Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/323830333a313431303a636166303a3a2f34382d3438203d3e20323731383632.roa
File:                     323830333a313431303a636166303a3a2f34382d3438203d3e20323731383632.roa (raw, json)
Hash identifier:          0T0RyBxy/ZH9KT2Y58zYWXJNRumtDUzVEytxKNUeZho=
Subject key identifier:   80:24:07:0F:C1:E3:2D:C8:83:AA:D9:17:EC:6D:AF:B9:92:01:FC:28
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       571DE50F965C2D078373FE17B989D1178135E61F
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/323830333a313431303a636166303a3a2f34382d3438203d3e20323731383632.roa
Signing time:             Wed 20 Aug 2025 05:00:00 +0000
ROA not before:           Wed 20 Aug 2025 04:55:00 +0000
ROA not after:            Wed 19 Aug 2026 05:00:00 +0000
asID:                     271862
IP address blocks:        2803:1410:caf0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1d:e5:0f:96:5c:2d:07:83:73:fe:17:b9:89:d1:17:81:35:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: Aug 20 04:55:00 2025 GMT
            Not After : Aug 19 05:00:00 2026 GMT
        Subject: CN=8024070FC1E32DC883AAD917EC6DAFB99201FC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:ed:37:2c:3d:96:af:86:d2:a0:c4:72:9f:
                    e2:95:88:15:8d:6a:34:47:8f:9e:ab:2d:3e:59:09:
                    e7:c2:bf:94:73:a2:3e:ad:98:1b:02:52:18:5f:ae:
                    db:00:a6:04:fe:72:f0:d8:03:99:62:57:98:e8:68:
                    c2:42:58:65:7d:87:c8:49:4d:bd:3f:7b:9a:4f:04:
                    64:40:37:2a:66:18:14:34:03:c7:af:dc:70:a5:2b:
                    27:d6:f0:74:d8:83:db:f9:74:cd:5a:46:f7:bb:4f:
                    97:8d:bf:e6:af:0c:cb:cd:e1:2d:c5:56:35:71:e9:
                    3f:01:13:88:83:ff:62:37:a7:79:33:66:31:80:c3:
                    6f:90:4e:93:ea:24:83:a2:ee:ff:d7:a6:56:24:98:
                    c6:98:53:2f:cd:5e:ef:41:be:41:6c:c7:7f:b5:e0:
                    1a:2b:d0:ac:02:6c:74:0f:7e:0c:34:cd:a5:91:39:
                    51:ad:b0:af:f4:61:42:18:d7:70:d8:56:98:81:cc:
                    21:86:9b:a8:64:4d:91:88:24:4d:b3:e5:95:92:20:
                    dd:48:8d:a3:c8:82:cd:bb:5d:36:6b:82:5c:9e:c8:
                    89:7d:5f:c6:35:d7:ea:ee:1d:61:5a:ee:ec:6f:9e:
                    f1:56:18:2b:4d:a8:f4:4f:a1:a9:e6:9c:88:03:30:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:07:0F:C1:E3:2D:C8:83:AA:D9:17:EC:6D:AF:B9:92:01:FC:28
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/323830333a313431303a636166303a3a2f34382d3438203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1410:caf0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:aa:ce:4f:70:ab:f1:46:6e:00:b8:de:f4:84:22:b8:07:
         ef:43:a8:d3:76:4e:50:0e:bc:2c:db:21:c5:e6:9b:5c:86:da:
         09:d3:f3:40:1d:bb:81:c0:e7:87:8c:46:3b:8b:36:bb:3b:94:
         d8:af:54:2b:d7:29:53:a6:ab:dc:74:ec:ad:c1:e8:e5:31:39:
         11:24:6b:9a:a0:49:f8:91:7c:b0:91:86:6c:38:14:f4:e8:cb:
         f2:9d:6f:72:10:97:8d:c6:a4:1f:78:26:40:e4:ff:da:5f:8a:
         d0:a0:3f:be:bf:a6:49:9f:e7:48:93:93:81:85:c0:84:f8:b3:
         28:c0:7c:60:b9:6f:1b:4d:3f:b4:64:62:62:7a:d4:15:1d:c4:
         c7:ec:91:7d:75:02:d9:4f:e0:ca:03:f9:4c:57:e0:68:4f:5f:
         24:91:cc:3a:16:e3:c4:21:26:73:cf:68:66:d3:c4:1c:8b:75:
         d8:e6:86:b3:77:39:08:36:e9:a4:7a:64:cc:50:4d:99:ad:57:
         35:02:58:51:db:6d:fe:2c:c6:d9:d7:1a:f3:5c:b6:7e:77:a7:
         dc:36:d0:9a:c5:c8:61:70:e2:89:19:c2:2e:50:ab:06:8f:0d:
         88:db:d4:43:36:79:f8:84:a8:27:50:96:a6:b2:69:a6:5f:c7:
         4b:ba:50:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:39:55 2025 by rpki-client