Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/323830333a666639303a3a2f33322d3332203d3e20323733303838.roa
File:                     323830333a666639303a3a2f33322d3332203d3e20323733303838.roa (raw, json)
Hash identifier:          AoFSqQBITZRvQMoPT112jXEqR5g5vK69v1Lt9k/QzHA=
Subject key identifier:   67:8E:29:7C:E0:AC:93:CE:4B:2A:E6:90:68:7C:00:CE:B5:08:4A:9D
Certificate issuer:       /CN=9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96
Certificate serial:       1D47F0C46CC875CBCED8DB05BEA1D4D09EBBE33F
Authority key identifier: 9F:99:B2:7A:4E:BB:39:05:6C:CF:E0:FF:5F:01:83:AF:D5:65:5B:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/323830333a666639303a3a2f33322d3332203d3e20323733303838.roa
Signing time:             Mon 18 Aug 2025 20:40:09 +0000
ROA not before:           Mon 18 Aug 2025 20:35:09 +0000
ROA not after:            Mon 17 Aug 2026 20:40:09 +0000
asID:                     273088
IP address blocks:        2803:ff90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:47:f0:c4:6c:c8:75:cb:ce:d8:db:05:be:a1:d4:d0:9e:bb:e3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96
        Validity
            Not Before: Aug 18 20:35:09 2025 GMT
            Not After : Aug 17 20:40:09 2026 GMT
        Subject: CN=678E297CE0AC93CE4B2AE690687C00CEB5084A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:f7:d0:cc:99:e8:e1:9e:69:f4:fe:e4:a3:
                    c4:fa:36:02:e3:01:25:73:88:74:51:7b:ea:b3:e8:
                    65:f1:fe:06:5a:84:04:0b:e7:5b:45:07:b2:7f:69:
                    42:f4:6e:fa:18:34:f1:b9:3a:fa:2b:75:5a:a6:da:
                    d4:ac:fb:2a:01:3f:1b:e1:b5:aa:dc:f6:42:47:06:
                    07:35:64:d1:b2:66:99:1f:7f:cf:da:ca:7a:83:db:
                    a5:8d:a3:3a:31:bb:92:64:03:fe:bb:64:78:8f:47:
                    39:b3:d2:a2:11:28:88:f6:4b:4d:05:f4:5f:fa:32:
                    74:95:18:98:41:3a:3f:cc:7f:61:02:7c:7c:2d:53:
                    0d:1d:f2:a6:28:a4:09:1c:a4:1e:21:dd:ce:bb:87:
                    72:e1:3d:22:7e:3a:0e:d8:1c:9f:79:10:c7:77:9d:
                    93:f6:2f:16:91:ae:8c:53:19:01:b4:6b:54:23:24:
                    ed:95:64:a5:63:ee:0c:d2:8d:b8:72:dd:43:8b:59:
                    ea:55:75:a2:ef:c4:62:a8:b8:a8:28:df:6f:8f:c7:
                    66:2c:77:84:e9:45:84:86:33:ef:52:6e:d0:dd:60:
                    4e:b1:1a:d4:7f:8f:f3:df:18:14:00:76:95:dc:99:
                    6b:ce:84:12:45:32:58:c0:57:a0:39:d8:05:e1:6f:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8E:29:7C:E0:AC:93:CE:4B:2A:E6:90:68:7C:00:CE:B5:08:4A:9D
            X509v3 Authority Key Identifier:
                keyid:9F:99:B2:7A:4E:BB:39:05:6C:CF:E0:FF:5F:01:83:AF:D5:65:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F99B27A4EBB39056CCFE0FF5F0183AFD5655B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5724317C53FDACD48A1B7A27EF949AEAF852F2DA79B69D995415028E78D64C54/0/323830333a666639303a3a2f33322d3332203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff90::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:97:9e:d1:51:18:77:1b:f3:9c:d1:81:fa:a1:9f:0b:cf:
         58:be:d9:d4:67:50:33:61:8a:82:9b:5c:2c:01:d3:6d:f0:6f:
         38:d7:33:14:ea:27:34:1e:20:e8:70:37:54:64:e2:7e:ac:8e:
         3d:02:30:45:58:f5:0d:b9:59:a8:db:80:ab:1c:1b:b2:be:23:
         5f:3d:1a:52:66:1e:5e:85:03:50:15:d6:45:1d:ca:fd:9f:97:
         88:31:7e:49:20:d7:c1:76:94:21:40:dd:d1:17:74:b0:8a:a2:
         33:d1:64:6a:38:ed:c6:2e:39:33:d6:58:40:ae:a5:15:1e:6c:
         5e:81:6e:6a:88:8d:97:c5:f1:1e:ca:b4:aa:ff:32:01:36:af:
         25:76:1e:30:92:7e:2f:6f:76:b1:49:54:5d:7d:b0:bd:0f:f6:
         c6:af:79:26:ee:a9:90:21:7e:e5:fd:48:0d:2c:c6:65:39:49:
         4e:71:22:54:88:96:28:56:3a:97:c5:f0:b4:ba:7d:b8:ce:d5:
         a8:df:d4:ce:f6:7f:37:46:6d:a9:46:ba:58:3c:c0:ee:97:35:
         df:36:09:96:e3:e2:60:ea:b2:60:73:e5:ab:5c:39:84:0f:12:
         70:2d:8e:80:6c:61:c7:3a:83:26:6f:cf:2a:61:26:d7:26:35:
         e4:fc:89:2a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHUfwxGzIdcvO2NsFvqHU0J674z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5OUIyN0E0RUJCMzkwNTZDQ0ZFMEZGNUYwMTgzQUZE
NTY1NUI5NjAeFw0yNTA4MTgyMDM1MDlaFw0yNjA4MTcyMDQwMDlaMDMxMTAvBgNV
BAMTKDY3OEUyOTdDRTBBQzkzQ0U0QjJBRTY5MDY4N0MwMENFQjUwODRBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/PfQzJno4Z5p9P7ko8T6NgLj
ASVziHRRe+qz6GXx/gZahAQL51tFB7J/aUL0bvoYNPG5OvordVqm2tSs+yoBPxvh
tarc9kJHBgc1ZNGyZpkff8/aynqD26WNozoxu5JkA/67ZHiPRzmz0qIRKIj2S00F
9F/6MnSVGJhBOj/Mf2ECfHwtUw0d8qYopAkcpB4h3c67h3LhPSJ+Og7YHJ95EMd3
nZP2LxaRroxTGQG0a1QjJO2VZKVj7gzSjbhy3UOLWepVdaLvxGKouKgo32+Px2Ys
d4TpRYSGM+9SbtDdYE6xGtR/j/PfGBQAdpXcmWvOhBJFMljAV6A52AXhb3FtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZ44pfOCsk85LKuaQaHwAzrUISp0wHwYDVR0j
BBgwFoAUn5myek67OQVsz+D/XwGDr9VlW5YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzI0MzE3QzUzRkRBQ0Q0OEExQjdBMjdFRjk0OUFFQUY4
NTJGMkRBNzlCNjlEOTk1NDE1MDI4RTc4RDY0QzU0LzAvOUY5OUIyN0E0RUJCMzkw
NTZDQ0ZFMEZGNUYwMTgzQUZENTY1NUI5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Rjk5QjI3QTRFQkIzOTA1NkND
RkUwRkY1RjAxODNBRkQ1NjU1Qjk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTcyNDMxN0M1M0ZEQUNENDhBMUI3QTI3RUY5NDlBRUFGODUyRjJEQTc5
QjY5RDk5NTQxNTAyOEU3OEQ2NEM1NC8wLzMyMzgzMDMzM2E2NjY2MzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/5Aw
DQYJKoZIhvcNAQELBQADggEBAEbpl57RURh3G/Oc0YH6oZ8Lz1i+2dRnUDNhioKb
XCwB023wbzjXMxTqJzQeIOhwN1Rk4n6sjj0CMEVY9Q25WajbgKscG7K+I189GlJm
Hl6FA1AV1kUdyv2fl4gxfkkg18F2lCFA3dEXdLCKojPRZGo47cYuOTPWWECupRUe
bF6BbmqIjZfF8R7KtKr/MgE2ryV2HjCSfi9vdrFJVF19sL0P9saveSbuqZAhfuX9
SA0sxmU5SU5xIlSIlihWOpfF8LS6fbjO1ajf1M72fzdGbalGulg8wO6XNd82CZbj
4mDqsmBz5atcOYQPEnAtjoBsYcc6gyZvzyphJtcmNeT8iSo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:48 2025 by rpki-client