Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/323830333a373936303a3a2f33322d3438203d3e20323639373438.roa
File:                     323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (raw, json)
Hash identifier:          MN/4RtlE9d+DnKy0U12QHBIdBSJFq+lAXrFHgivrrPc=
Subject key identifier:   C7:34:52:73:42:D8:E1:71:68:1F:0A:89:67:04:39:BF:91:DE:48:CC
Certificate issuer:       /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
Certificate serial:       48A270B65102FD631EFB716912A73E5B45D36BF9
Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/323830333a373936303a3a2f33322d3438203d3e20323639373438.roa
Signing time:             Mon 23 Jun 2025 16:23:20 +0000
ROA not before:           Mon 23 Jun 2025 16:18:20 +0000
ROA not after:            Mon 22 Jun 2026 16:23:20 +0000
asID:                     269748
IP address blocks:        2803:7960::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 17:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a2:70:b6:51:02:fd:63:1e:fb:71:69:12:a7:3e:5b:45:d3:6b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
        Validity
            Not Before: Jun 23 16:18:20 2025 GMT
            Not After : Jun 22 16:23:20 2026 GMT
        Subject: CN=C734527342D8E171681F0A89670439BF91DE48CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:86:cb:0f:8f:2c:b0:ea:ac:43:6b:b7:e2:
                    bf:11:64:68:03:46:c8:e9:5b:90:e3:0f:be:18:c8:
                    6e:b0:10:9a:42:9e:26:78:29:6d:64:64:30:de:bd:
                    ac:e3:c1:e8:1b:2b:78:93:c1:8e:0e:aa:1a:4f:31:
                    89:60:58:45:88:3c:fa:bd:f5:95:55:c9:b1:42:5a:
                    db:65:6b:09:2b:4b:ea:6f:90:d0:46:72:05:5c:ed:
                    b6:67:8b:ed:a6:55:83:1d:86:17:d8:a0:12:0f:b8:
                    92:a5:48:fe:5e:18:02:ad:35:e6:a9:9d:1a:73:4c:
                    5a:3d:24:08:50:28:0b:ff:b8:d0:a4:82:fa:bd:00:
                    4a:21:7f:c5:78:d3:c1:79:75:56:4a:0e:0c:36:e9:
                    ca:07:24:d5:49:37:de:fa:c1:67:84:de:1c:1f:9d:
                    6d:18:83:15:03:df:82:fc:87:1f:e7:03:51:ae:6b:
                    5a:34:6d:7e:5d:cf:e5:d3:e3:cd:c3:4b:27:5c:bf:
                    c3:35:66:d6:fb:cc:5d:fb:21:30:46:0e:de:78:5e:
                    10:ac:a8:c4:61:4f:04:93:9c:6b:73:d2:12:71:0b:
                    2b:4a:cd:61:1b:ff:e2:4d:7e:0d:52:bd:be:39:8d:
                    cf:20:b0:3f:67:af:6d:24:1a:6b:6a:81:56:9c:42:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:52:73:42:D8:E1:71:68:1F:0A:89:67:04:39:BF:91:DE:48:CC
            X509v3 Authority Key Identifier:
                keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/323830333a373936303a3a2f33322d3438203d3e20323639373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7960::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:cd:73:0b:67:5b:26:e5:bf:25:7a:fc:2f:e4:42:0e:93:
         27:cc:10:ae:20:70:9c:e6:b1:9f:1d:f9:c7:6d:8d:ce:fe:bb:
         b7:60:ed:b7:f9:df:0f:b3:67:97:0f:d6:38:31:b8:f7:d1:4b:
         15:11:a8:99:d8:b3:be:08:34:bf:df:ac:5e:fa:e4:41:18:42:
         9c:c1:48:2d:a1:6d:0b:a3:5c:c2:40:0c:41:f7:1f:53:6d:25:
         62:7e:6a:f0:bc:db:06:86:d6:89:c3:2b:eb:ce:2c:5e:7f:e8:
         fa:4f:24:71:41:85:28:e0:6c:3c:7d:d0:9d:18:91:2d:de:3f:
         54:30:19:23:5a:9b:f7:00:15:10:4c:55:b5:86:7a:75:37:45:
         30:5d:4e:ab:be:c6:a5:06:69:a3:46:da:94:95:7d:03:a4:cb:
         f4:cb:fb:81:8a:e8:87:26:83:2f:65:b6:0b:4c:1d:64:5b:73:
         98:43:1e:0a:a8:f5:07:0a:26:fc:45:24:bc:fa:fa:a8:69:ab:
         c1:df:2f:99:f7:b9:ba:ac:3b:71:c1:4b:c4:31:2d:cd:27:9c:
         01:a7:ee:de:e9:95:22:08:a9:fb:18:9c:c8:96:25:91:7b:b3:
         15:08:22:ec:54:c9:9a:a7:be:14:64:f2:ec:65:a7:17:46:5c:
         6d:47:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:13:53 2025 by rpki-client