Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/323830333a333034303a3a2f33322d3332203d3e203237363630.roa
File:                     323830333a333034303a3a2f33322d3332203d3e203237363630.roa (raw, json)
Hash identifier:          wp6piqBilA1sXhv9tezwdOzuVsc05xS00p5M4opW5os=
Subject key identifier:   4F:6E:8C:F3:B9:1F:D9:9F:90:CE:C6:A3:67:1F:94:BC:60:26:2C:26
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       78C2905C93A18ABA39E0368110431D13735E3480
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/323830333a333034303a3a2f33322d3332203d3e203237363630.roa
Signing time:             Tue 24 Jun 2025 16:23:27 +0000
ROA not before:           Tue 24 Jun 2025 16:18:27 +0000
ROA not after:            Tue 23 Jun 2026 16:23:27 +0000
asID:                     27660
IP address blocks:        2803:3040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c2:90:5c:93:a1:8a:ba:39:e0:36:81:10:43:1d:13:73:5e:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: Jun 24 16:18:27 2025 GMT
            Not After : Jun 23 16:23:27 2026 GMT
        Subject: CN=4F6E8CF3B91FD99F90CEC6A3671F94BC60262C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:14:6f:59:e4:b2:6d:0f:28:1d:b8:60:a0:
                    a6:ea:fd:ce:53:6e:3c:7b:1b:19:3d:37:f3:2d:3e:
                    e2:5d:f7:fb:58:13:86:4f:f3:77:88:87:e6:0a:df:
                    d4:99:fa:b8:3c:90:ad:4d:fa:e5:23:27:15:ec:8a:
                    a4:fc:d9:a2:a8:f7:0d:62:88:78:e8:3f:06:7d:ef:
                    3f:dc:cf:ba:16:82:a8:9c:6b:cc:75:1b:54:16:74:
                    ec:cb:f9:f6:be:bf:b2:63:34:24:20:a4:75:d3:f1:
                    44:5b:1c:c3:d0:7e:fd:2e:e2:53:09:2b:a0:9c:29:
                    e6:00:dc:ff:af:8b:0b:9e:08:08:e5:8f:d7:41:5a:
                    c2:6c:be:8c:93:05:3a:b0:fd:71:4c:c0:31:5c:07:
                    62:55:a6:86:1e:ff:9c:c2:aa:49:92:0b:f4:04:f2:
                    78:30:c1:e7:d9:17:53:1d:3a:96:34:f7:90:56:e5:
                    f1:7d:e8:ed:a7:22:25:c2:55:84:22:b1:7c:02:3e:
                    24:e0:09:7a:fc:64:e6:82:0e:50:57:af:65:de:34:
                    8e:76:5a:96:a3:ea:f7:82:11:f2:0a:ad:61:df:06:
                    01:e6:53:54:d6:7b:1b:19:5c:83:c7:20:9a:24:da:
                    ff:cd:d3:3e:d9:48:b2:82:ec:d3:fd:ed:a4:fd:06:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6E:8C:F3:B9:1F:D9:9F:90:CE:C6:A3:67:1F:94:BC:60:26:2C:26
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/323830333a333034303a3a2f33322d3332203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:34:14:b4:3c:b5:f4:5f:d0:bd:59:02:cc:0f:83:a6:c5:4c:
         82:d6:98:70:38:0c:53:22:4c:03:b6:da:c5:bd:ed:a1:26:c6:
         39:8a:81:c0:65:2c:d7:b3:af:e7:ef:88:6f:02:60:3a:45:f4:
         09:ce:62:55:72:a7:d9:b3:dd:d7:85:2c:d1:0e:4d:6d:3d:3c:
         0c:bf:a5:d7:88:2d:2d:47:b0:5c:ea:22:f8:7e:ee:29:9c:d0:
         6e:31:d8:94:e4:cd:ef:70:35:51:c6:83:96:48:32:89:80:48:
         f2:33:2e:2e:71:4a:26:bf:09:b3:e8:af:14:20:89:d6:e8:6b:
         5c:40:aa:b3:ed:2a:5b:f9:7c:da:30:fa:81:5a:4a:48:5f:74:
         2e:96:86:5c:d4:a3:68:55:b2:8b:60:18:50:68:61:02:46:07:
         91:fa:03:75:f1:9c:60:a3:bf:d7:8e:48:b4:41:85:09:07:4a:
         22:b2:08:65:90:cf:23:9c:46:a8:01:45:b8:d5:63:74:d9:f0:
         4c:58:f1:84:17:79:6f:4b:0e:74:1a:27:7c:b9:04:58:8e:0b:
         2c:ab:ad:c1:2f:95:2e:73:98:3e:7f:c0:24:e8:3c:6e:7d:87:
         af:df:b2:52:e1:8f:f9:37:0e:fc:a6:03:39:6c:96:42:1e:3c:
         cd:b4:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:53:21 2025 by rpki-client