Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3332203d3e20323732303235.roa
File:                     323830333a613531303a3a2f33322d3332203d3e20323732303235.roa (raw, json)
Hash identifier:          kglHi5raMfeiD+sr0IcjRx/ESDVtIITOcjCIwGtraPA=
Subject key identifier:   5B:52:4A:60:A5:BB:E6:02:6D:11:A4:57:66:19:BC:CC:A8:D1:ED:2F
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       5B60FEB87F877D11B494EA258F28549C19AAFEF5
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3332203d3e20323732303235.roa
Signing time:             Fri 15 Aug 2025 18:35:48 +0000
ROA not before:           Fri 15 Aug 2025 18:30:48 +0000
ROA not after:            Fri 14 Aug 2026 18:35:48 +0000
asID:                     272025
IP address blocks:        2803:a510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:60:fe:b8:7f:87:7d:11:b4:94:ea:25:8f:28:54:9c:19:aa:fe:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Aug 15 18:30:48 2025 GMT
            Not After : Aug 14 18:35:48 2026 GMT
        Subject: CN=5B524A60A5BBE6026D11A4576619BCCCA8D1ED2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:4b:ef:32:3d:1d:fd:59:a1:46:10:a8:39:
                    30:96:52:95:dc:b5:10:09:ac:70:3b:46:24:8e:4e:
                    de:07:bf:cc:ce:ee:32:c7:85:a3:99:2a:71:d7:ee:
                    86:29:6a:a5:9d:16:5f:a3:98:c5:68:ff:37:aa:ad:
                    23:3d:59:80:2c:18:c0:fc:38:3c:84:84:2b:00:c6:
                    e6:2b:e7:96:6b:cd:6c:1d:78:73:90:09:6c:9a:8f:
                    07:f4:f5:84:20:c3:10:8b:9c:65:76:92:0a:e1:8e:
                    d6:e9:01:c1:84:f5:00:8c:fe:30:94:0f:cd:0b:69:
                    48:8b:91:e4:a9:0c:a6:7d:7a:3c:1f:72:f2:3e:55:
                    73:82:b5:a2:37:60:7e:4b:40:dd:2a:7a:93:a3:1e:
                    0d:72:f2:4f:41:46:c9:ed:d9:95:2d:b8:ac:b0:7e:
                    5b:7c:0f:93:9d:d8:17:3a:a1:ec:ad:eb:e0:57:ac:
                    48:b7:1a:74:f3:aa:8f:f5:05:6f:97:f1:4f:c4:a8:
                    9f:e5:71:3c:bd:87:47:be:ee:26:60:5f:48:87:0e:
                    83:68:65:68:ab:58:af:47:ff:db:e2:b6:31:57:e3:
                    78:44:ef:7b:35:d8:cf:f7:44:ee:96:8f:3e:dd:69:
                    a5:76:74:10:e0:c8:74:a5:10:a6:bc:21:19:01:0b:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:4A:60:A5:BB:E6:02:6D:11:A4:57:66:19:BC:CC:A8:D1:ED:2F
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3332203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a510::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:29:e4:be:2e:fa:3f:5b:94:91:4b:c5:b9:ce:5d:2b:08:49:
         af:c3:4a:16:94:17:3a:08:67:89:0e:e0:e8:25:a5:3f:01:5d:
         1a:30:51:0c:0e:e8:c5:f7:6d:14:8d:37:19:39:77:53:77:c6:
         dd:cf:1a:c6:53:ca:e1:95:85:83:ff:d0:2b:89:1a:c6:14:df:
         d0:af:61:0c:16:74:c3:5a:d2:b4:3f:5d:50:e1:b2:b9:e8:6a:
         d7:2a:f5:8c:5f:d5:16:ca:10:e4:2b:9c:ac:6d:e2:cf:23:0a:
         0d:98:7c:c7:ef:bc:49:c9:59:5f:dc:a0:ea:77:85:80:30:88:
         1b:6d:13:e1:25:3c:0e:86:3c:90:63:33:ea:60:77:aa:1e:35:
         7d:e9:dd:53:1b:e4:98:18:f4:5f:95:f6:80:c2:78:03:2e:85:
         81:51:2f:66:85:42:c5:4a:bf:aa:00:0f:44:41:ab:77:bd:31:
         dc:c4:6c:b2:eb:d8:3c:25:95:f2:f7:1d:aa:55:0a:47:5a:37:
         14:1c:08:f2:19:11:03:27:d9:30:17:44:86:bc:2f:b5:cf:37:
         22:f8:8d:48:2f:8e:9f:0c:b8:f6:a0:52:d1:10:48:db:93:4e:
         c6:1a:6c:b8:d9:15:2c:79:ba:08:5e:06:9a:56:47:02:df:ea:
         0c:83:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:41:42 2025 by rpki-client