Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa
File:                     323830333a336532303a3a2f33322d3334203d3e20323635383830.roa (raw, json)
Hash identifier:          Q9fRyu60sziFezbRVQpDo+6g+KhNaFS83OGBzBQu7UU=
Subject key identifier:   25:0F:D4:E8:17:E3:64:25:25:A6:E3:45:ED:05:8B:3F:86:90:AC:A0
Certificate issuer:       /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial:       5639609AE7F758C6F51B5976DE537338637ACA38
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa
Signing time:             Tue 19 Aug 2025 14:05:00 +0000
ROA not before:           Tue 19 Aug 2025 14:00:00 +0000
ROA not after:            Tue 18 Aug 2026 14:05:00 +0000
asID:                     265880
IP address blocks:        2803:3e20::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 23:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:39:60:9a:e7:f7:58:c6:f5:1b:59:76:de:53:73:38:63:7a:ca:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
        Validity
            Not Before: Aug 19 14:00:00 2025 GMT
            Not After : Aug 18 14:05:00 2026 GMT
        Subject: CN=250FD4E817E3642525A6E345ED058B3F8690ACA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:4c:ac:84:5b:35:c8:f1:d2:5e:5f:51:ee:
                    8a:b3:eb:46:dd:59:c3:41:68:a9:8f:3f:bb:ff:4e:
                    ab:76:c3:6d:44:7f:a0:c3:a3:6b:bf:f5:02:9c:e9:
                    e2:ee:c2:43:12:be:5a:65:a0:49:4e:56:af:2d:4d:
                    52:d9:9d:96:09:d4:06:dd:44:a0:5b:76:9f:a3:2a:
                    b3:72:43:69:5b:99:10:cc:b6:31:7c:d6:0b:2e:f5:
                    15:73:4a:40:28:02:6a:87:02:05:49:e7:70:c6:e6:
                    0e:b0:c7:22:4c:92:83:28:c7:83:ab:c7:07:6d:8f:
                    50:1b:e5:09:2f:51:fe:d7:f6:1f:69:30:b9:76:32:
                    f2:ae:91:31:31:fb:42:c5:34:de:bf:b3:92:f2:ca:
                    c4:7b:2c:0e:d8:b6:37:0c:34:60:ca:ee:da:9f:56:
                    e0:82:3f:be:d7:37:76:14:3b:8e:1e:bb:b1:e4:ff:
                    89:99:cf:55:35:99:f0:a6:a1:6d:5b:f8:1e:e6:27:
                    50:17:9f:ac:3d:b1:f3:4b:37:2e:6c:b4:d6:b1:f7:
                    a6:25:4c:a3:82:fd:cf:00:62:e0:44:69:76:cd:19:
                    c1:03:0a:19:94:12:33:32:50:d1:1e:6f:a0:a3:53:
                    1d:93:48:55:10:d7:8c:d1:e6:8b:da:23:a0:e1:eb:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:D4:E8:17:E3:64:25:25:A6:E3:45:ED:05:8B:3F:86:90:AC:A0
            X509v3 Authority Key Identifier:
                keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:a5:74:73:91:b8:69:67:da:99:5f:d1:b2:5f:a8:bf:48:
         35:ed:e2:6b:36:92:83:c6:7c:f6:9b:2b:30:d4:e7:f7:bb:43:
         07:bb:8a:64:e9:dd:d5:e9:ec:bc:a9:c4:2b:a1:ff:14:9a:9c:
         4d:13:94:04:aa:f4:a3:d9:6d:a5:b8:c6:78:c6:21:3d:75:5d:
         5f:41:3e:22:bf:a6:a1:65:42:4d:a5:74:9e:be:19:c8:dd:15:
         56:f6:ad:ac:e4:3c:ca:78:24:cb:51:7f:be:d7:06:53:14:55:
         08:92:93:8e:35:1d:c3:4e:23:3c:b9:e7:fe:c3:ae:ff:44:dc:
         71:7f:e0:c1:9c:37:31:f8:9e:d6:33:13:a4:dd:3e:c4:fd:dd:
         de:0d:1e:ec:26:d1:84:db:2e:92:b3:55:98:49:f8:b6:9f:f3:
         a2:5f:61:1a:e8:f7:4d:42:e9:56:07:b5:c7:9e:c9:e0:14:c9:
         00:73:5f:c7:41:1e:bf:06:ef:fb:a4:e8:50:28:92:dd:4f:ca:
         f4:28:9a:ac:90:84:5f:de:8d:a2:ec:c1:6d:81:e7:08:10:72:
         5d:8e:0d:4d:ff:39:ce:79:59:9a:ca:63:0e:bb:db:81:b1:2c:
         cd:74:43:f9:5f:c2:cb:a7:e8:e3:a3:3e:3f:7f:06:84:16:2f:
         2e:4f:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:26 2025 by rpki-client