Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33322d3332203d3e20323730303735.roa
File:                     323830333a633365303a3a2f33322d3332203d3e20323730303735.roa (raw, json)
Hash identifier:          UKjCSODeJKcpZC62A6m8+KwynTb/HJxYF4u1ANM+ecI=
Subject key identifier:   2B:91:5E:3D:3A:3B:C8:03:4B:29:1D:A3:D8:69:AA:59:D3:D0:C2:2E
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       1A01D4E3A1CD0C7F1FC57DFA071109EF21574307
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33322d3332203d3e20323730303735.roa
Signing time:             Tue 01 Jul 2025 16:25:00 +0000
ROA not before:           Tue 01 Jul 2025 16:20:00 +0000
ROA not after:            Tue 30 Jun 2026 16:25:00 +0000
asID:                     270075
IP address blocks:        2803:c3e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 09:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:d4:e3:a1:cd:0c:7f:1f:c5:7d:fa:07:11:09:ef:21:57:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Jul  1 16:20:00 2025 GMT
            Not After : Jun 30 16:25:00 2026 GMT
        Subject: CN=2B915E3D3A3BC8034B291DA3D869AA59D3D0C22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:63:45:cd:18:d2:84:53:08:ee:00:10:48:
                    48:eb:59:a9:2f:e6:ab:54:c9:3e:95:18:e7:b3:99:
                    da:0f:03:dd:57:fb:fa:62:35:70:2f:25:0c:3e:04:
                    c7:b0:ac:b5:78:ca:44:73:fe:f8:ed:f8:51:83:b2:
                    9b:66:c5:17:c6:0d:1b:c2:ba:bf:fb:05:44:77:fd:
                    5e:03:f0:b6:7f:03:90:bb:65:ba:5d:93:93:0a:06:
                    4c:8e:ff:dd:42:a9:f9:a4:87:b1:e1:3f:06:ef:60:
                    d7:f7:07:74:87:7d:03:fc:05:21:14:c3:1c:ac:03:
                    8b:4e:3c:c4:9d:8e:27:c4:55:e9:04:08:a2:b7:1d:
                    c0:02:b0:d5:52:21:2f:4b:fe:63:8b:ab:28:ca:ff:
                    0a:fd:83:57:ee:33:33:70:62:a1:16:93:be:e9:58:
                    81:36:28:1c:08:a3:8f:c2:a2:ec:99:03:45:49:12:
                    50:9a:c8:44:93:8c:a0:06:80:63:aa:53:ab:7e:32:
                    17:07:80:bb:bc:5b:af:37:9b:54:43:89:fe:8f:9c:
                    ba:a2:cc:a0:02:08:f8:73:f5:42:3e:34:4d:22:de:
                    8d:4d:79:29:a1:14:c7:12:17:04:bd:2a:f6:e0:e2:
                    10:49:16:aa:ea:1e:e4:96:83:db:c5:59:40:96:98:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:91:5E:3D:3A:3B:C8:03:4B:29:1D:A3:D8:69:AA:59:D3:D0:C2:2E
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33322d3332203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:38:1f:ff:53:5d:cd:be:4f:bf:96:55:12:be:03:34:06:f3:
         fa:d3:6e:5b:76:80:b4:95:c0:dc:74:7c:33:a2:e8:cb:c7:4c:
         6a:10:d2:9e:ac:d5:4e:85:ab:21:f3:f0:38:76:6c:06:f9:ac:
         a1:34:76:46:e6:1e:6f:b9:e3:d6:8c:33:03:f5:50:8e:84:fa:
         9b:4c:de:85:fc:e5:82:1c:e9:4b:aa:41:af:0e:46:c6:ec:e9:
         b2:33:76:1a:4f:51:fc:e7:37:95:47:8d:09:d2:34:54:39:fe:
         57:94:3a:de:70:2b:23:1d:c5:63:71:52:82:57:4c:2a:f5:79:
         99:2d:ac:d2:ac:75:69:a8:7a:88:36:aa:c2:09:20:d4:b6:eb:
         68:cc:23:c5:1e:24:cc:b1:fb:7c:8c:88:e1:ff:6b:68:c8:c5:
         4b:06:14:06:2b:2c:70:29:41:f6:fd:56:be:55:0b:c7:ed:ec:
         c9:68:44:9e:72:1f:66:58:fa:89:53:2d:5a:b1:35:e7:d7:29:
         10:8f:12:65:d0:0c:d0:ba:21:6c:20:b6:27:38:35:57:f1:ce:
         85:7c:f8:73:cf:89:03:10:a5:5f:4d:35:d3:c8:1c:31:2a:e1:
         2e:2d:7d:8a:ef:0d:02:68:d1:90:03:44:fe:1a:17:7e:f7:3b:
         20:e8:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:22:25 2025 by rpki-client