Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa
File:                     323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa (raw, json)
Hash identifier:          /DaHZZ62x2fi39/RTfOHNJ5rm2sIHjS6YtkAzxWYmVU=
Subject key identifier:   7A:20:59:F7:7C:C9:10:81:4D:12:42:07:1B:B6:A3:3E:41:CF:16:BD
Certificate issuer:       /CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
Certificate serial:       4C9008563F99E7071D8C14AC72B7A5271A1F9C4A
Authority key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa
Signing time:             Wed 06 Aug 2025 15:10:00 +0000
ROA not before:           Wed 06 Aug 2025 15:05:00 +0000
ROA not after:            Wed 05 Aug 2026 15:10:00 +0000
asID:                     273944
IP address blocks:        2803:cf50:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:08:56:3f:99:e7:07:1d:8c:14:ac:72:b7:a5:27:1a:1f:9c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
        Validity
            Not Before: Aug  6 15:05:00 2025 GMT
            Not After : Aug  5 15:10:00 2026 GMT
        Subject: CN=7A2059F77CC910814D1242071BB6A33E41CF16BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:f2:fc:ec:e3:7e:27:d2:d2:ce:0e:c3:02:
                    07:9b:95:79:3a:58:87:02:af:06:9a:d8:49:66:5f:
                    a7:83:96:ac:c6:08:3d:32:f1:25:b8:b3:0c:d1:01:
                    00:34:41:7e:41:ee:5b:15:dc:00:be:08:21:b4:19:
                    b1:a9:e4:28:5b:78:03:5f:2b:a9:fc:c3:83:e7:1e:
                    bf:c8:38:8a:cb:f2:9b:23:0c:ec:75:32:8e:88:4e:
                    d5:3e:78:f8:4e:b1:d3:6d:37:76:40:20:bd:ee:68:
                    24:15:ae:56:69:8d:8b:2b:39:e0:ec:15:c1:de:bf:
                    9d:d6:3f:64:b1:7f:8e:7f:d6:fa:24:89:f8:c4:e3:
                    7e:a9:e7:23:5d:8b:01:a0:b7:61:dc:13:21:78:53:
                    b9:3b:5b:a2:26:15:96:ff:3e:da:df:81:33:f7:d4:
                    e5:63:d6:bb:d1:33:59:5e:4e:78:5a:71:c4:63:38:
                    86:98:78:fa:8e:f8:bf:c8:57:d9:c4:b5:73:4b:27:
                    50:63:04:65:3a:77:7c:0c:44:28:7c:35:59:cc:71:
                    16:0f:73:df:36:50:27:88:b3:3d:85:10:7b:95:d7:
                    bd:18:cb:3c:46:90:09:9c:8d:e1:f7:f4:80:67:3f:
                    dd:b2:2a:8a:aa:7e:19:d4:e3:b7:4a:4a:8c:a1:e1:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:20:59:F7:7C:C9:10:81:4D:12:42:07:1B:B6:A3:3E:41:CF:16:BD
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf50:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:67:1f:e2:10:21:39:a4:56:b0:48:56:70:00:22:80:15:08:
         65:b1:25:43:15:fe:c5:13:dc:40:66:5a:fd:d0:ca:b4:27:92:
         93:6a:bc:00:4d:56:bb:4d:6d:26:f5:93:6f:37:90:70:29:87:
         93:c3:af:5f:e3:07:18:f5:5d:7f:76:24:3f:40:5f:c4:6c:cd:
         88:b3:60:d3:56:ef:0d:51:cc:a2:d9:f3:69:71:3f:45:c4:e3:
         f9:79:10:7c:0f:e0:bc:3c:19:5b:ce:1a:42:da:2a:60:2c:c3:
         bf:13:17:25:4d:fa:d4:a4:81:f9:ad:6d:7e:76:4c:7a:81:b6:
         8b:43:aa:90:58:a0:74:1b:7a:d1:0c:d8:07:41:46:08:30:64:
         64:f1:dd:50:89:e7:4e:a8:d2:9f:33:8b:ac:6b:8d:0b:3b:2a:
         30:94:4f:7b:53:cf:ca:51:96:e4:99:61:72:f2:9a:b2:be:97:
         28:cb:ef:1c:20:31:7a:5f:79:c4:2c:15:d0:c7:c4:92:39:56:
         07:0e:5c:de:57:a7:00:ab:51:d2:f5:66:47:b9:cd:82:72:61:
         d4:06:fc:f4:6f:c9:9a:35:ec:45:40:90:d8:4b:04:89:be:e3:
         85:91:7c:19:4f:2a:2b:7f:6f:91:bb:73:7b:3b:11:26:de:7a:
         5f:51:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:19 2025 by rpki-client