Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a393a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a393a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          H7QQS+Z+Pqu2IygK3buaZ8qXrBRXhrNMKwwTzPzV1RA=
Subject key identifier:   1B:16:F2:66:39:88:0F:0A:14:C0:50:DA:0D:16:56:D5:C9:17:34:83
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       5998574FADFF11F75D344D98830621441905665D
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a393a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 08 Aug 2025 23:35:16 +0000
ROA not before:           Fri 08 Aug 2025 23:30:16 +0000
ROA not after:            Fri 07 Aug 2026 23:35:16 +0000
asID:                     267787
IP address blocks:        2803:4fa0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 02:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:98:57:4f:ad:ff:11:f7:5d:34:4d:98:83:06:21:44:19:05:66:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Aug  8 23:30:16 2025 GMT
            Not After : Aug  7 23:35:16 2026 GMT
        Subject: CN=1B16F26639880F0A14C050DA0D1656D5C9173483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:8e:74:00:eb:82:51:56:b2:d7:19:0d:23:
                    3f:79:4c:5c:7d:0b:00:fe:ed:52:4a:dd:2e:8c:c6:
                    48:46:5b:e1:34:94:23:76:e6:02:97:7f:a8:fd:c9:
                    8e:41:dc:21:e7:c8:c6:cb:c0:ac:7b:5a:ba:5f:11:
                    36:12:a0:31:11:8a:3b:98:ca:0a:e0:07:b3:24:84:
                    2b:6d:ed:4a:b2:71:0c:c5:3b:e5:69:2c:9c:0b:65:
                    e1:0e:d7:a5:d0:4d:68:13:82:2e:a1:f6:a5:ee:15:
                    89:71:b3:83:fa:28:1b:cb:fe:01:02:29:74:d9:f6:
                    c0:16:1f:e8:c2:60:7b:a9:f8:6f:47:4b:41:47:3f:
                    69:8d:8b:09:eb:c3:fe:96:51:f8:b3:7b:7a:a6:ea:
                    65:61:be:71:60:23:e5:cc:f7:f6:25:10:1e:1b:e5:
                    72:35:da:5e:de:73:61:e1:4f:01:26:26:14:4c:b6:
                    3d:7a:b1:47:1f:79:d7:01:a7:07:d8:50:37:19:54:
                    5e:8a:45:58:86:ba:ac:38:b5:7a:15:b8:c8:84:c2:
                    f5:65:81:e4:8d:23:b2:af:a7:8f:c0:c8:35:f7:df:
                    fe:9a:f1:63:8a:6a:dd:62:8b:9c:46:44:08:be:74:
                    2c:5a:d6:f3:8d:9f:73:b2:ad:fd:69:b9:e6:71:2b:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:F2:66:39:88:0F:0A:14:C0:50:DA:0D:16:56:D5:C9:17:34:83
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a393a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:91:08:c7:0f:e9:7f:4f:ae:d0:42:88:9a:af:5f:e0:a1:
         e1:73:4c:ed:1e:35:e0:75:9a:4c:28:37:67:a0:3f:97:b2:17:
         0b:40:30:04:bd:98:99:22:da:cf:3e:f8:92:2f:d9:39:c6:e5:
         d3:62:37:11:72:f5:7f:b6:6e:ad:e6:0b:33:67:e5:d5:ee:46:
         f2:28:3c:1a:1a:af:23:2f:5c:43:cb:01:fb:b6:6b:94:e5:eb:
         2c:d9:a1:e8:9b:8a:a4:b1:95:7b:93:84:b7:72:cc:bf:60:57:
         79:bd:e3:68:c8:af:75:22:9f:05:38:22:57:81:78:e4:27:40:
         15:13:18:45:35:74:ce:b7:0d:fa:dd:a3:f3:df:2d:80:19:03:
         79:dc:96:24:04:ad:2e:e7:52:b0:94:a6:03:1f:04:e2:21:e5:
         16:07:93:cd:4a:ae:be:e1:54:07:98:26:51:29:ad:8f:1a:5d:
         04:c9:c9:2f:d5:25:40:70:b4:4b:d8:35:74:a7:47:67:58:f6:
         35:49:6e:12:86:ee:50:33:4b:e6:cf:5c:cc:e9:0c:7a:46:87:
         c1:92:a5:b4:a2:fb:fb:57:d8:6a:56:73:92:b7:32:1a:30:a5:
         eb:f4:3e:19:42:f1:67:ff:c6:80:d5:02:f5:20:59:6d:e6:47:
         1d:bd:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:26:43 2025 by rpki-client