Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa
File:                     323830333a643635303a3a2f33322d3332203d3e20323733323037.roa (raw, json)
Hash identifier:          BjUu8YjO1y9Rqz7lGSfBOw9r/t5QN8SfYPCBrr+pglY=
Subject key identifier:   DA:96:D0:A2:C3:3C:41:42:AC:0B:D4:80:B0:8C:5C:A5:43:29:DF:9A
Certificate issuer:       /CN=6702CFD6C64C6F0FBB5330412BAF62BD85FAE668
Certificate serial:       4A94DD0C8AEAAF994ADF536FF5B9BBBE04B0DE51
Authority key identifier: 67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa
Signing time:             Fri 04 Jul 2025 00:24:34 +0000
ROA not before:           Fri 04 Jul 2025 00:19:34 +0000
ROA not after:            Fri 03 Jul 2026 00:24:34 +0000
asID:                     273207
IP address blocks:        2803:d650::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:94:dd:0c:8a:ea:af:99:4a:df:53:6f:f5:b9:bb:be:04:b0:de:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6702CFD6C64C6F0FBB5330412BAF62BD85FAE668
        Validity
            Not Before: Jul  4 00:19:34 2025 GMT
            Not After : Jul  3 00:24:34 2026 GMT
        Subject: CN=DA96D0A2C33C4142AC0BD480B08C5CA54329DF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:48:a9:f3:41:4e:26:48:2a:26:21:6f:f6:
                    f9:c1:4c:ec:f5:98:5f:2c:7e:f6:0a:d1:d9:40:a7:
                    dd:77:18:fb:d2:fe:7e:20:8e:9d:3b:f0:c2:44:27:
                    58:f2:d8:1c:4c:ab:1e:fe:f2:c6:bd:be:6f:23:f6:
                    92:92:8a:7e:4a:8b:a2:09:e3:af:2e:05:70:e3:a5:
                    5c:d1:e1:9f:2b:4d:de:a6:40:70:21:43:ac:7c:16:
                    3b:54:e5:88:96:be:55:c3:0a:5a:6c:dd:08:08:59:
                    07:d0:79:b3:2e:c9:9b:5f:67:d3:31:e2:18:4b:f0:
                    85:34:69:4c:3a:19:9c:4c:f8:42:3b:b1:59:87:9d:
                    22:28:d1:eb:44:df:12:b3:ed:92:71:56:32:f7:ca:
                    e8:3c:ec:03:bd:11:0e:c5:ee:2a:2b:22:ee:0e:b4:
                    71:a3:ed:0e:a0:55:40:a4:d3:e1:d9:5e:da:60:c8:
                    49:7b:c7:2a:dc:f9:0a:34:cf:3e:24:b7:eb:78:ad:
                    ae:ec:55:a3:57:4f:32:c0:80:28:53:ec:99:af:29:
                    2a:4c:e1:bb:c1:29:24:7b:ed:a1:9b:12:55:55:20:
                    33:97:d0:d5:a2:bd:ea:01:6f:30:92:09:2a:d3:a2:
                    80:fd:c7:69:80:f4:61:a1:81:b7:50:94:d6:5d:cc:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:D0:A2:C3:3C:41:42:AC:0B:D4:80:B0:8C:5C:A5:43:29:DF:9A
            X509v3 Authority Key Identifier:
                keyid:67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d650::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:1e:c9:04:74:73:e5:f2:4e:c2:78:00:1e:8d:00:b6:3e:03:
         e1:4d:d4:3a:7f:42:61:a7:83:43:1d:f0:53:9f:d3:31:7a:89:
         77:58:a8:f8:f0:56:db:b9:09:1a:9c:4a:c8:ef:d8:02:aa:f9:
         6d:6f:ca:5b:96:d4:87:2f:8e:56:e5:87:d6:41:9d:01:a0:6c:
         ad:14:c1:b4:f0:2d:d1:39:34:65:a9:a1:18:7a:91:62:45:26:
         72:3d:dc:05:38:7e:db:4f:0c:3c:a8:40:95:22:33:9a:87:99:
         12:6c:64:86:92:a8:dd:42:b3:d6:86:f2:28:27:68:5a:e9:e1:
         fb:50:b8:24:21:d6:15:84:53:72:1d:62:67:40:8c:cc:84:f3:
         cc:86:c5:0f:4f:26:3d:86:d0:24:7f:2b:2b:80:cf:10:b9:22:
         8a:dc:75:65:f2:82:d7:3b:36:30:99:b1:2c:0b:d0:c5:44:69:
         9f:52:45:ea:67:5f:ef:89:8d:26:23:20:07:08:46:04:1b:35:
         5a:ae:22:83:40:58:12:9a:d8:91:34:c4:32:76:fa:b8:62:4b:
         a2:9c:6e:bf:29:15:e4:65:3e:90:e7:d8:15:3a:1d:65:4f:f9:
         2b:53:6c:d1:d2:db:e2:a8:e5:d5:3b:e7:87:23:f1:8d:46:e1:
         ae:6b:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:52:13 2025 by rpki-client