Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa
File:                     323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa (raw, json)
Hash identifier:          P9NK6aAAQvZDV0mtCm4mbbVnWfsIf444Q+aMcFfWbJE=
Subject key identifier:   1A:47:22:64:C6:89:F5:79:16:9F:91:AF:1A:BA:03:65:D9:2E:07:B5
Certificate issuer:       /CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
Certificate serial:       1D70034B13CA4B95AB76E8784DD96EA919DACC8D
Authority key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa
Signing time:             Wed 06 Aug 2025 15:15:00 +0000
ROA not before:           Wed 06 Aug 2025 15:10:00 +0000
ROA not after:            Wed 05 Aug 2026 15:15:00 +0000
asID:                     273944
IP address blocks:        2803:cf50:400::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:70:03:4b:13:ca:4b:95:ab:76:e8:78:4d:d9:6e:a9:19:da:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
        Validity
            Not Before: Aug  6 15:10:00 2025 GMT
            Not After : Aug  5 15:15:00 2026 GMT
        Subject: CN=1A472264C689F579169F91AF1ABA0365D92E07B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:f5:aa:01:c8:3e:6b:c2:b7:86:00:20:4a:
                    d3:b0:f1:10:f3:26:f0:88:f7:3b:34:1f:91:a3:d9:
                    b1:27:f4:74:70:74:34:ee:9a:d9:ab:1e:fb:c2:b1:
                    e4:51:22:e0:4a:dc:a6:d3:74:ab:66:ac:9f:c9:36:
                    e4:a0:88:f6:e5:6e:02:11:7d:01:30:68:ac:d6:bf:
                    f3:04:01:7c:e4:f2:68:b1:ae:10:b9:9b:bb:86:1d:
                    a2:b7:a8:ef:3b:71:14:e8:b8:29:db:22:05:66:57:
                    e8:2b:4f:9a:57:68:17:ac:81:3b:87:9f:11:4c:7d:
                    1d:8d:e8:9a:f3:c7:a2:4d:f8:74:15:34:f2:5f:37:
                    48:d7:bc:7b:d4:c9:62:ed:7c:68:74:c3:47:e8:6c:
                    e7:e4:ba:82:7a:db:4f:84:fd:7c:e4:bc:2e:68:5b:
                    df:16:0f:80:f4:39:81:6e:da:a9:97:48:f4:47:d6:
                    8b:9c:75:16:c0:fd:25:0f:4d:4c:d5:d7:60:eb:7e:
                    ce:79:ba:e3:75:52:a6:f5:28:7c:3e:7d:18:82:b6:
                    25:25:a4:5e:67:72:d8:59:8e:c3:4d:98:71:49:ac:
                    bf:3d:5d:02:a5:f5:9d:82:ca:ad:69:18:5b:98:cf:
                    a7:d4:ba:56:37:66:b3:60:e2:71:f4:5b:6b:21:40:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:22:64:C6:89:F5:79:16:9F:91:AF:1A:BA:03:65:D9:2E:07:B5
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3430303a3a2f34302d3634203d3e20323733393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf50:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:c8:9d:f3:ab:4e:75:9a:66:3e:a5:a3:63:f6:57:f2:b4:6b:
         75:64:5c:70:85:e1:d0:e5:08:61:cb:9c:f4:50:e7:30:94:02:
         47:6b:26:cb:74:95:c1:53:e4:5e:0b:d5:be:94:c6:fd:5a:0e:
         d7:07:de:05:5f:c4:2d:94:81:aa:3d:aa:b3:00:31:43:d7:c0:
         b3:23:33:86:f2:46:df:5c:7e:b8:b6:2b:73:d7:97:60:ea:c3:
         cb:f0:bf:18:2f:f1:46:0e:3f:f8:c9:97:5e:60:46:f2:c6:e2:
         c9:3c:31:fb:62:8f:4a:4e:52:55:00:0c:44:9a:5f:dc:43:8e:
         ab:c4:dd:b9:ee:26:e1:b8:b7:c2:7c:01:a3:e4:c0:67:07:e1:
         17:8b:5b:78:39:00:8b:1f:22:a9:b1:96:ef:7c:09:0b:e6:be:
         b1:b9:5d:b1:72:0d:7d:d3:66:16:9a:a1:ec:73:f3:ba:68:4e:
         74:28:f1:df:64:40:29:cf:4f:26:bf:0b:66:67:04:32:5d:ce:
         5c:2d:48:0e:91:e7:5b:69:04:10:43:5f:62:62:ce:5b:04:7a:
         f7:38:dc:37:72:d0:a7:db:19:1a:43:a3:8c:5e:b2:55:a0:1c:
         d1:e9:cc:14:35:ff:2f:d6:17:89:23:c2:d7:a3:70:e0:9b:f9:
         4c:60:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:21 2025 by rpki-client