Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a313a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a313a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          IpcR/XDYejEy87/g1yV4pwk37060PeAhzXA2VfmNk4c=
Subject key identifier:   D2:A3:39:DE:10:4C:0B:2B:33:1D:2C:24:F8:34:EC:DD:40:A0:B1:E8
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       245F60D874436D297EDE7BAF983A62B5AA3750AF
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a313a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 08 Aug 2025 23:35:19 +0000
ROA not before:           Fri 08 Aug 2025 23:30:19 +0000
ROA not after:            Fri 07 Aug 2026 23:35:19 +0000
asID:                     267787
IP address blocks:        2803:4fa0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 02:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:60:d8:74:43:6d:29:7e:de:7b:af:98:3a:62:b5:aa:37:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Aug  8 23:30:19 2025 GMT
            Not After : Aug  7 23:35:19 2026 GMT
        Subject: CN=D2A339DE104C0B2B331D2C24F834ECDD40A0B1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:3b:cd:98:3a:7d:a9:a1:f8:93:6e:f8:35:
                    cc:03:90:0f:48:f0:d7:d7:26:bf:77:bc:d1:40:38:
                    d3:95:51:39:54:49:90:36:ef:21:03:3f:c4:51:70:
                    51:9e:30:23:44:3f:cf:db:84:29:3f:e5:d5:30:f2:
                    a1:b7:cc:21:92:d1:88:e6:34:92:1f:c3:fa:8f:0d:
                    d3:01:4e:f5:3b:7b:9b:67:db:ab:7b:4d:29:00:61:
                    0b:2e:8f:0e:44:f5:2d:2b:63:c8:b5:27:d5:58:6b:
                    b0:a4:5f:a0:6b:7d:37:ef:c6:7c:e1:d0:fd:df:43:
                    20:ec:e6:20:b7:b6:d6:cc:a4:1c:63:8c:7c:0b:4f:
                    6d:90:7e:fd:01:0a:78:b6:78:4b:03:cf:12:36:e4:
                    f0:97:93:3a:39:bb:03:f1:f4:cf:8e:af:ac:ed:5a:
                    53:3a:f6:1f:b6:33:47:65:bb:a6:c0:97:f6:6f:17:
                    16:02:fe:f3:4d:c0:ac:bf:ab:65:39:b5:e0:cc:c9:
                    b8:5d:70:38:38:30:42:ca:f6:20:81:b8:44:47:ec:
                    e7:80:4f:dc:47:6a:b8:66:40:c9:c9:17:df:56:83:
                    8d:e2:8a:2c:87:3b:6d:34:80:a5:c4:e3:dd:89:08:
                    f2:29:d9:92:26:ca:e7:f5:1d:43:1c:16:4e:87:bc:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A3:39:DE:10:4C:0B:2B:33:1D:2C:24:F8:34:EC:DD:40:A0:B1:E8
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a313a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:2f:72:98:d6:f6:05:71:4c:e9:19:b2:e5:5e:c3:ee:2a:
         71:36:4c:fc:ed:63:1a:45:e4:68:eb:e3:e9:72:4b:3c:f8:d8:
         b3:ff:c0:cb:78:ed:32:19:ad:f6:0d:0d:95:dc:22:46:72:61:
         36:6c:50:d5:af:58:b5:52:03:e8:cc:e8:bc:8c:a2:cf:9b:b2:
         41:2f:31:fd:87:b2:f2:af:f1:f4:3d:be:57:b1:c6:d9:ed:03:
         8f:78:44:3a:fe:c4:9f:45:97:33:c4:7b:2e:2d:b3:17:b5:7e:
         c1:da:2c:4d:d6:ca:9b:62:a0:c1:39:fb:c3:2d:60:5a:2f:29:
         ab:6e:73:2f:a6:cc:8e:7f:2e:3d:a2:fc:35:de:d5:88:65:54:
         62:ff:21:c2:c9:ff:53:21:eb:71:3b:77:9a:1f:50:2a:33:35:
         0f:57:e9:bb:54:be:df:6b:1c:69:33:d5:52:3d:08:be:37:08:
         e1:e3:03:8c:d0:0a:21:52:d6:2b:f1:fc:0b:a0:e7:5b:fe:30:
         53:fb:25:4d:60:69:c7:e9:b7:36:c1:60:ef:d8:7c:92:8f:d6:
         22:02:90:3a:d0:02:1a:e1:ab:86:fa:ee:b6:8e:b0:2b:55:f4:
         ba:3e:2e:57:bb:1a:46:31:1d:b2:30:de:24:78:d7:95:84:87:
         5b:24:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:23:24 2025 by rpki-client