Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa
File:                     323830333a623130303a3a2f33322d3332203d3e203532333932.roa (raw, json)
Hash identifier:          LRzRybDflXSwQsUyFx4DWgQwlsF/SoLKx7ViY4PfRbE=
Subject key identifier:   A3:54:F5:54:E1:C9:5A:00:0E:12:BA:35:4D:8C:A9:9B:BA:48:3D:B9
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       5FD731CCDEA94AE967D204AF8D6D64554181DFE7
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa
Signing time:             Tue 22 Jul 2025 21:26:19 +0000
ROA not before:           Tue 22 Jul 2025 21:21:19 +0000
ROA not after:            Tue 21 Jul 2026 21:26:19 +0000
asID:                     52392
IP address blocks:        2803:b100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d7:31:cc:de:a9:4a:e9:67:d2:04:af:8d:6d:64:55:41:81:df:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jul 22 21:21:19 2025 GMT
            Not After : Jul 21 21:26:19 2026 GMT
        Subject: CN=A354F554E1C95A000E12BA354D8CA99BBA483DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:15:53:5c:7b:07:ea:08:e7:fe:ab:0f:ed:
                    71:62:63:62:9a:ca:36:20:1a:37:54:8c:48:66:6a:
                    ed:e9:b6:d4:02:51:d9:e2:fc:21:62:45:70:f4:0d:
                    a7:0a:12:2f:7f:32:2d:09:1c:e6:96:47:48:43:e9:
                    a0:ef:5f:af:99:74:70:fc:3f:55:80:58:89:01:35:
                    aa:43:e4:b8:1c:f3:24:77:35:5b:51:cd:59:0a:35:
                    ee:cf:27:5e:02:2f:2b:f5:58:5e:5d:d2:09:b9:95:
                    c2:b2:2c:7e:2a:9f:d1:7a:3a:3d:2f:67:4e:1d:75:
                    60:0c:86:b7:fe:4e:2e:32:7d:f7:a3:d0:07:0c:81:
                    ec:6d:53:bb:76:8e:37:1b:13:8d:c0:63:ba:62:67:
                    9d:90:97:c0:72:37:6c:e4:eb:d4:56:78:44:d2:d7:
                    87:bb:1d:97:2e:b6:b2:b1:f6:45:ae:93:63:8a:fe:
                    f6:84:43:5c:e1:ed:b9:4b:b0:f1:12:87:64:bb:32:
                    2b:37:96:35:35:10:ff:42:6d:65:76:47:9e:7a:76:
                    95:00:ee:1e:73:30:1d:2b:4b:f3:c2:55:98:83:f9:
                    2e:34:0a:d5:d3:6f:f9:77:45:3e:70:a1:a3:cd:1a:
                    22:4f:78:57:6a:76:d2:72:00:e2:2e:8f:7c:9f:e2:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:54:F5:54:E1:C9:5A:00:0E:12:BA:35:4D:8C:A9:9B:BA:48:3D:B9
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:1a:8f:d0:e4:3e:0b:07:72:6e:ff:c5:bc:ea:b4:ac:e0:54:
         ee:ba:ee:62:b8:bb:ae:d9:e9:5d:2b:38:f4:69:9a:e9:24:6b:
         94:a8:22:60:eb:76:78:d2:a7:1c:87:50:21:3b:b9:a5:18:3a:
         0c:ab:36:87:96:c7:f4:93:dc:b9:6b:ae:e0:b0:b8:88:78:57:
         12:59:70:00:20:4c:4e:b0:c3:b9:22:72:1d:ed:0e:46:1e:70:
         b0:e8:de:4d:1f:bc:ee:2d:70:1b:4d:2d:ba:12:ec:1f:84:07:
         6b:9a:8e:6d:00:6e:53:64:05:83:d8:95:82:12:e9:a9:13:ea:
         17:61:59:82:d7:64:3d:e7:eb:11:37:39:6d:fe:3c:a6:69:70:
         1d:bc:10:01:e2:18:ec:74:4f:e1:5e:db:cb:40:96:93:54:04:
         95:3d:1a:c7:1d:74:62:20:51:99:85:dc:24:75:ab:5f:39:68:
         54:5d:e9:a3:62:cd:5f:cb:12:bb:85:89:a5:f9:5b:8a:44:bf:
         fe:74:e9:ef:5d:fe:d3:d4:b0:cc:7d:bb:ef:f0:ae:b7:77:de:
         b0:55:81:ff:12:a8:56:65:24:0c:0c:5e:ed:01:75:9e:64:7f:
         de:35:5c:d5:ae:b0:67:1d:de:f3:73:49:37:0c:9f:b0:67:86:
         6a:0a:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:22:15 2025 by rpki-client