Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a31333a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a31333a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          ZMlqAfAPGwciNWePQbq2DfTXJioVs8yLmnS/3oFTwbA=
Subject key identifier:   F7:AE:15:E6:9D:2D:82:ED:DD:B4:AD:63:A3:B0:36:91:87:37:96:2B
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       1CEE888EC4BC8324E2014BC1A05490DF5ADB5902
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a31333a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Mon 11 Aug 2025 14:35:26 +0000
ROA not before:           Mon 11 Aug 2025 14:30:26 +0000
ROA not after:            Mon 10 Aug 2026 14:35:26 +0000
asID:                     267787
IP address blocks:        2803:4fa0:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 02:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ee:88:8e:c4:bc:83:24:e2:01:4b:c1:a0:54:90:df:5a:db:59:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Aug 11 14:30:26 2025 GMT
            Not After : Aug 10 14:35:26 2026 GMT
        Subject: CN=F7AE15E69D2D82EDDDB4AD63A3B036918737962B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:c7:c1:eb:9b:70:fd:14:79:25:55:0e:0b:
                    73:60:d5:93:00:17:0c:cc:bb:9b:72:71:af:9b:de:
                    bc:26:3f:8d:80:89:24:55:c2:ac:e2:af:53:ae:93:
                    aa:15:e1:a6:7a:50:68:a2:7f:6d:be:dd:6a:5c:be:
                    0d:c6:6a:27:67:56:30:86:92:76:02:20:25:eb:ea:
                    1b:35:04:bc:3d:d9:74:4c:8d:e5:ea:ae:d8:89:47:
                    6c:8c:9c:da:bf:59:8d:1e:68:09:2b:4a:f4:a0:bc:
                    47:88:15:5a:8f:6b:6d:82:01:5e:29:fb:67:b2:33:
                    51:28:44:96:2d:ff:a6:de:2e:fc:e5:8d:70:a6:07:
                    0e:12:23:48:d0:11:36:13:10:25:0b:1d:3c:68:7c:
                    39:3d:1d:be:86:a1:49:44:9d:4a:a2:7a:fb:4a:08:
                    b2:47:da:d9:11:f8:ad:05:0c:40:22:80:d1:ef:28:
                    00:5d:9c:b1:7e:65:47:3d:01:db:e2:ec:91:e5:cf:
                    af:cd:45:2f:f5:9a:ba:d4:50:82:7c:95:50:6e:31:
                    e0:4e:d1:04:1d:b8:91:ad:a8:8e:14:06:64:90:dd:
                    f5:ed:d0:6f:4f:3d:56:60:cc:8e:b9:91:4e:e4:a5:
                    94:d6:17:69:bd:57:8a:bd:51:2d:d3:7d:a4:e1:c1:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:15:E6:9D:2D:82:ED:DD:B4:AD:63:A3:B0:36:91:87:37:96:2B
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a31333a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:16:a7:2a:50:d1:e2:50:46:63:f7:26:72:50:4c:d9:8f:ca:
         e2:f8:f4:3c:77:ed:01:67:0d:d3:de:95:d9:85:fc:3a:c6:74:
         e1:38:61:c6:56:f7:6f:bc:57:69:65:6d:2c:54:2d:c7:69:da:
         58:13:60:82:7b:c5:6c:2d:3d:86:4b:bb:aa:cd:4d:10:9a:29:
         fa:1c:31:bd:e3:bb:5c:92:31:78:26:73:01:b6:89:9e:b3:78:
         ba:64:a2:76:8e:6c:8a:a2:b7:ba:5a:33:69:48:db:e8:c3:b2:
         70:59:5d:0a:69:f0:67:c2:b5:10:9d:9d:36:b9:05:95:54:93:
         4a:c3:28:81:4c:d3:07:c9:fb:df:f6:35:d4:b9:bb:c6:cf:5b:
         95:f8:94:58:3f:3a:c6:81:c0:1f:f7:4b:3a:f5:b5:0e:5d:22:
         3d:d8:b6:22:2a:7a:87:ca:ce:69:af:f4:11:9c:33:69:11:02:
         5c:1d:8e:7f:60:19:a1:ea:e3:9f:d8:58:3e:f1:3c:54:5b:fd:
         c5:66:43:07:94:25:2b:9c:f2:5a:79:78:1e:73:87:fb:5b:d0:
         3f:dd:97:9c:d4:fb:54:35:52:88:8a:d9:3c:1c:ea:cb:ee:38:
         96:05:e9:cd:f4:b4:3d:8c:0f:ed:e1:a0:d0:d7:a7:81:1f:18:
         dd:62:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:24:11 2025 by rpki-client