Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          PbjuEDhMII7jtTevXkPZ7rNVUy5UH/L+cPf1C+0+S54=
Subject key identifier:   CC:80:CD:86:3E:53:79:BF:57:2F:BD:52:7F:5F:67:C9:E4:7C:5D:79
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       0F98A39EA9AB11BD94F9A830AFA91BDE603436B6
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 08 Aug 2025 23:35:18 +0000
ROA not before:           Fri 08 Aug 2025 23:30:18 +0000
ROA not after:            Fri 07 Aug 2026 23:35:18 +0000
asID:                     267787
IP address blocks:        2803:4fa0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 02:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:98:a3:9e:a9:ab:11:bd:94:f9:a8:30:af:a9:1b:de:60:34:36:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Aug  8 23:30:18 2025 GMT
            Not After : Aug  7 23:35:18 2026 GMT
        Subject: CN=CC80CD863E5379BF572FBD527F5F67C9E47C5D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:5c:a8:ed:a2:80:69:bd:c0:ac:d9:07:db:
                    35:07:bc:12:3b:c3:97:71:2e:a4:c8:c9:76:91:ab:
                    5a:a9:53:03:9c:d4:c7:01:ee:bd:c9:0a:c4:c5:8f:
                    8d:d5:56:9d:df:ce:92:52:1f:7e:22:0a:1d:0a:cc:
                    6a:57:92:25:43:8f:7f:90:57:dd:23:a6:56:a5:5d:
                    05:7b:48:5e:32:0e:58:46:c7:f1:bc:bb:21:00:68:
                    c7:d8:c7:83:76:94:e7:e4:ac:e6:26:97:ac:b9:e8:
                    86:5f:6b:7e:14:c1:1c:15:95:1c:be:b1:f8:4c:97:
                    5f:32:c5:2b:c5:9e:98:ea:bc:14:4d:a9:4c:55:48:
                    04:d1:17:0f:a5:66:02:fe:36:91:e7:4f:dd:26:b2:
                    df:0a:c3:b6:e7:b5:9a:4a:68:ba:16:f9:d4:bf:52:
                    e9:02:90:15:b9:20:64:a8:33:ff:6f:b8:e4:4e:85:
                    b1:91:e1:4e:b9:d9:6a:56:72:1a:5d:8f:ca:58:72:
                    69:08:fc:56:97:e9:76:5f:49:4b:ce:1a:cd:9f:d5:
                    ec:77:d4:b8:55:c2:83:e8:86:be:0d:41:a7:7d:48:
                    39:9a:99:30:6e:4b:63:56:d4:c9:6f:b0:5c:04:90:
                    8c:5f:cd:03:2e:08:34:1d:d5:55:50:1b:bb:30:df:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:80:CD:86:3E:53:79:BF:57:2F:BD:52:7F:5F:67:C9:E4:7C:5D:79
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:6d:5c:c1:9b:f0:5e:66:51:9c:bf:40:0e:37:43:f3:19:2b:
         9d:bf:5a:45:3b:a9:c0:08:58:cb:f5:16:e9:33:ff:61:21:03:
         b8:31:34:87:32:66:f6:0f:d4:53:c8:1e:b8:37:f6:4d:ad:1c:
         0c:60:d1:7a:13:95:e8:46:86:b2:a9:95:79:95:05:d0:8b:ad:
         92:19:2a:81:41:fe:39:59:5f:05:f9:de:2c:4f:dc:08:ab:d1:
         9a:02:c7:e6:2c:70:0f:fd:84:f6:79:4c:33:95:91:6e:fc:d8:
         b1:07:6d:2f:ae:65:aa:b1:d9:13:be:c3:25:27:b0:c5:13:fe:
         22:80:74:70:48:67:9f:a5:61:4b:21:c2:33:b7:0a:5e:14:8f:
         eb:f6:68:75:e7:7b:11:65:d7:87:22:ed:b2:a3:4f:5d:b8:ae:
         aa:17:23:4a:c1:d6:5c:56:d6:c5:ca:28:b2:eb:7e:07:ef:0e:
         48:bf:18:d6:63:c2:96:72:0d:6a:e5:d6:4d:2f:81:ba:82:75:
         2b:56:1d:0f:93:7b:25:51:4a:e2:fb:d7:11:a8:14:0b:b4:b1:
         bb:25:53:3c:41:a4:a0:77:0e:85:9a:aa:c3:1e:59:82:ca:e5:
         75:22:67:b6:7a:27:2a:df:47:14:32:02:2d:a7:4c:1b:11:59:
         ed:bd:34:d2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUD5ijnqmrEb2U+agwr6kb3mA0NrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBMDU5MTM3MTJCMzE1REFFQjZEMTE2NzEyODQyOERE
N0I2RDM2MjAeFw0yNTA4MDgyMzMwMThaFw0yNjA4MDcyMzM1MThaMDMxMTAvBgNV
BAMTKENDODBDRDg2M0U1Mzc5QkY1NzJGQkQ1MjdGNUY2N0M5RTQ3QzVENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFVyo7aKAab3ArNkH2zUHvBI7
w5dxLqTIyXaRq1qpUwOc1McB7r3JCsTFj43VVp3fzpJSH34iCh0KzGpXkiVDj3+Q
V90jplalXQV7SF4yDlhGx/G8uyEAaMfYx4N2lOfkrOYml6y56IZfa34UwRwVlRy+
sfhMl18yxSvFnpjqvBRNqUxVSATRFw+lZgL+NpHnT90mst8Kw7bntZpKaLoW+dS/
UukCkBW5IGSoM/9vuOROhbGR4U652WpWchpdj8pYcmkI/FaX6XZfSUvOGs2f1ex3
1LhVwoPohr4NQad9SDmamTBuS2NW1MlvsFwEkIxfzQMuCDQd1VVQG7sw30zbAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzIDNhj5Teb9XL71Sf19nyeR8XXkwHwYDVR0j
BBgwFoAUQ6BZE3ErMV2uttEWcShCjde202IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkI4ODc1RjRBRTEwMzJGNEMxOEU0RkFFNEI0NEIxQjlC
RUIyRkUwNTJGMzNDNjcyRTNCQjQyMkE0MTJDNjZBLzAvNDNBMDU5MTM3MTJCMzE1
REFFQjZEMTE2NzEyODQyOEREN0I2RDM2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0EwNTkxMzcxMkIzMTVEQUVC
NkQxMTY3MTI4NDI4REQ3QjZEMzYyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJCODg3NUY0QUUxMDMyRjRDMThFNEZBRTRCNDRCMUI5QkVCMkZFMDUy
RjMzQzY3MkUzQkI0MjJBNDEyQzY2QS8wLzMyMzgzMDMzM2EzNDY2NjEzMDNhMzcz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNzM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A0+gAAcwDQYJKoZIhvcNAQELBQADggEBAFRtXMGb8F5mUZy/QA43Q/MZK52/WkU7
qcAIWMv1Fukz/2EhA7gxNIcyZvYP1FPIHrg39k2tHAxg0XoTlehGhrKplXmVBdCL
rZIZKoFB/jlZXwX53ixP3Air0ZoCx+YscA/9hPZ5TDOVkW782LEHbS+uZaqx2RO+
wyUnsMUT/iKAdHBIZ5+lYUshwjO3Cl4Uj+v2aHXnexFl14ci7bKjT124rqoXI0rB
1lxW1sXKKLLrfgfvDki/GNZjwpZyDWrl1k0vgbqCdStWHQ+TeyVRSuL71xGoFAu0
sbslUzxBpKB3DoWaqsMeWYLK5XUiZ7Z6JyrfRxQyAi2nTBsRWe29NNI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:27:08 2025 by rpki-client