Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa
File:                     323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa (raw, json)
Hash identifier:          tcyf/vRnX/ZDj+RhYWTXc/B97MVhtYZtBD8+l+3rsyA=
Subject key identifier:   12:0D:7A:0B:E4:4A:94:5A:A1:0C:C4:DB:33:A2:5E:D6:79:E8:84:00
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       3B75002273F058A6269A02A25EB0116A6D1F2047
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa
Signing time:             Fri 10 Oct 2025 02:55:00 +0000
ROA not before:           Fri 10 Oct 2025 02:50:00 +0000
ROA not after:            Fri 09 Oct 2026 02:55:00 +0000
asID:                     52268
IP address blocks:        2800:a80:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:75:00:22:73:f0:58:a6:26:9a:02:a2:5e:b0:11:6a:6d:1f:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Oct 10 02:50:00 2025 GMT
            Not After : Oct  9 02:55:00 2026 GMT
        Subject: CN=120D7A0BE44A945AA10CC4DB33A25ED679E88400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:7d:f0:ca:80:57:4c:4a:2f:b7:3d:91:72:
                    c8:60:7a:b7:e5:5c:f3:20:b0:82:29:64:9d:96:74:
                    c4:f5:38:2d:5a:b1:7a:49:43:a3:11:9a:87:07:66:
                    86:d6:b6:d2:7a:cc:19:db:e8:c0:7e:62:ca:80:d0:
                    91:0b:aa:7b:b2:de:f1:8e:2f:f2:de:3c:d8:63:2b:
                    3b:43:a7:50:ed:3a:98:63:de:85:94:53:73:fb:b8:
                    50:e9:aa:58:27:82:a3:a5:5f:1e:34:d7:15:04:eb:
                    cb:21:dc:c1:ec:37:c2:4f:eb:58:8c:87:70:89:7d:
                    3a:dc:80:53:af:d1:aa:c4:54:d5:4b:20:e4:2c:0e:
                    c2:1f:57:b6:97:bb:14:46:37:d5:fe:fd:51:7b:0a:
                    04:c2:00:84:14:72:50:79:22:23:6a:ae:89:11:86:
                    f2:67:4e:6b:8b:5b:e4:04:db:67:64:97:a3:10:b6:
                    e1:84:a8:2f:2b:b0:0f:f8:bd:4d:ab:6b:82:ba:6a:
                    37:cd:72:e9:79:72:cc:0f:8e:07:26:a6:68:9f:24:
                    ce:8c:95:6d:5b:81:13:85:dc:4d:7b:ab:8f:64:d9:
                    f4:b5:e7:94:95:29:38:5d:4d:fe:79:12:ed:36:ba:
                    14:5d:46:15:60:24:d9:57:4f:bd:37:b0:78:0b:f5:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0D:7A:0B:E4:4A:94:5A:A1:0C:C4:DB:33:A2:5E:D6:79:E8:84:00
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:66:83:90:0c:04:be:33:c8:6a:32:71:0d:90:33:d6:fe:c3:
         80:58:1c:56:60:a7:a7:98:62:06:da:bb:49:dd:91:65:ba:23:
         12:a9:58:1d:70:62:cd:8b:58:bb:88:01:3f:fe:ef:46:05:df:
         e8:77:aa:9f:30:dd:65:8e:ad:34:97:15:ae:d7:cd:d4:ac:33:
         66:fd:d2:3b:84:0f:28:ee:72:af:04:4c:7d:d4:2c:2f:0e:ad:
         ed:88:9e:2e:0b:7c:3d:38:d9:52:b7:30:b4:36:5a:0d:fd:25:
         65:39:78:26:ff:45:b6:b8:91:4e:40:bc:fb:4d:6b:81:11:ca:
         91:73:03:eb:f6:a1:3a:bc:b0:bc:cf:f4:9f:a6:44:5c:f6:8c:
         3d:6a:b7:ee:0a:23:07:14:86:a9:06:f9:fb:c9:5f:98:96:45:
         44:0f:c4:98:75:2c:30:d5:8f:bf:12:f3:4a:78:94:8b:49:5e:
         cd:b1:b7:7a:78:13:91:30:fe:1c:96:34:e0:31:5e:68:d4:79:
         e8:e6:13:74:a4:16:16:8f:45:38:fc:a0:65:36:55:dd:69:b2:
         59:f4:c5:3b:66:15:45:45:57:ea:03:61:23:bc:cd:14:8f:d7:
         34:f9:f3:6f:47:e3:70:36:01:2f:88:0a:15:88:46:3a:43:62:
         59:52:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:10:33 2025 by rpki-client