Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a343030303a3a2f33362d3336203d3e20323635383535.roa
File:                     323830333a663864303a343030303a3a2f33362d3336203d3e20323635383535.roa (raw, json)
Hash identifier:          ot/OOWujAJyFuAeagiHkBoWX0Cx8JDb9vlT29EYr/7g=
Subject key identifier:   38:59:79:85:5C:FD:74:17:76:0A:BF:C7:DA:69:D7:B1:7B:E8:9D:6C
Certificate issuer:       /CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
Certificate serial:       559EF1DE9ADD9C487D995A329935B5CA3A364568
Authority key identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a343030303a3a2f33362d3336203d3e20323635383535.roa
Signing time:             Tue 12 Aug 2025 15:15:00 +0000
ROA not before:           Tue 12 Aug 2025 15:10:00 +0000
ROA not after:            Tue 11 Aug 2026 15:15:00 +0000
asID:                     265855
IP address blocks:        2803:f8d0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9e:f1:de:9a:dd:9c:48:7d:99:5a:32:99:35:b5:ca:3a:36:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
        Validity
            Not Before: Aug 12 15:10:00 2025 GMT
            Not After : Aug 11 15:15:00 2026 GMT
        Subject: CN=385979855CFD7417760ABFC7DA69D7B17BE89D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:90:d3:38:ea:5a:5f:b3:5e:bd:c4:e5:81:
                    2b:8e:b5:62:96:02:53:59:f4:cc:d2:66:92:d5:e1:
                    86:03:96:fe:71:48:cd:af:0b:1e:af:a1:d0:ad:1d:
                    b0:29:e4:ce:5e:15:bd:0d:cf:a8:18:ee:67:6c:72:
                    6b:a3:83:82:51:a6:05:ae:cc:bb:2c:96:8f:31:46:
                    95:e5:4b:7c:a9:04:16:83:2b:e5:49:2a:6f:79:bf:
                    9c:a4:a2:ac:9c:6f:4d:21:fe:5c:81:11:f7:5b:88:
                    f2:e7:ca:a1:93:c8:ff:5e:3a:8f:aa:f6:33:b1:21:
                    ff:30:df:34:c5:db:92:e5:36:b6:a6:8b:97:cd:b4:
                    04:74:66:de:57:43:59:dc:1f:21:38:80:da:fb:32:
                    14:7f:d3:9a:09:c0:c7:78:a0:42:94:82:5d:08:42:
                    41:9f:0c:f1:b6:ca:8e:f1:f4:c3:d6:05:b0:90:46:
                    35:bf:f7:c7:0f:03:74:6b:12:58:b0:74:55:63:70:
                    51:05:57:28:22:e2:d4:42:b2:a6:4a:30:11:af:45:
                    d1:14:34:b0:28:5c:87:d7:aa:67:56:ff:44:83:4e:
                    29:3d:39:3f:07:04:b8:0c:99:07:be:0f:64:3e:04:
                    4c:54:a6:45:ba:12:c3:f1:4c:a4:8d:b1:c0:7e:d7:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:59:79:85:5C:FD:74:17:76:0A:BF:C7:DA:69:D7:B1:7B:E8:9D:6C
            X509v3 Authority Key Identifier:
                keyid:44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a343030303a3a2f33362d3336203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8d0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:b3:d4:1d:41:33:07:bd:dc:43:70:59:f5:6f:64:8a:03:
         5b:a4:4d:ba:26:dd:98:74:fa:9c:e5:f6:3e:c7:5a:c5:51:84:
         e1:26:74:35:86:c4:f0:6b:cf:fd:69:77:3d:85:1b:66:0a:f5:
         e4:68:a8:bd:98:ab:62:02:7f:94:e5:a4:2f:71:db:6c:96:f5:
         01:f3:b5:c2:33:55:f6:5d:10:91:59:c6:4e:83:5e:74:67:97:
         57:3b:53:9e:14:cf:78:04:53:f5:55:2e:d0:78:a4:3d:64:c3:
         d7:37:88:a1:f6:10:ba:e3:60:25:e1:02:3f:ff:dc:f0:85:99:
         1e:de:6b:04:4f:38:ed:a1:75:c0:49:57:70:7c:15:0f:19:b2:
         cc:12:39:1a:7a:8d:be:2b:09:40:9a:56:34:0e:ee:1c:89:93:
         83:8f:80:c0:8d:35:16:11:d3:db:86:05:eb:8a:c3:d8:65:b2:
         99:87:41:d2:c4:02:b0:39:59:d7:5f:a2:65:a7:d3:c1:fb:c9:
         54:80:53:40:56:84:c4:aa:55:96:d7:67:d4:a8:cb:12:6b:d9:
         8d:f1:88:ff:9d:69:29:14:a7:18:a0:03:44:eb:10:3a:a0:99:
         d1:43:fe:c0:db:58:98:f1:aa:f6:f7:12:fa:12:d3:ee:7d:69:
         93:9d:18:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:28 2025 by rpki-client