Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a313a3a2f34382d3438203d3e20323733383930.roa
File:                     323830313a3138643a313a3a2f34382d3438203d3e20323733383930.roa (raw, json)
Hash identifier:          hVgl4SfRdptEvI97zDQF2gLAJCWjCtjIpPFgZj5fJlk=
Subject key identifier:   03:EE:03:D1:0C:AD:89:B3:90:2E:7E:79:E8:19:DC:73:9A:60:D7:66
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       6E5ED835F6C8EDA32835304240E42219219AF0A3
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a313a3a2f34382d3438203d3e20323733383930.roa
Signing time:             Tue 01 Jul 2025 04:24:11 +0000
ROA not before:           Tue 01 Jul 2025 04:19:11 +0000
ROA not after:            Tue 30 Jun 2026 04:24:11 +0000
asID:                     273890
IP address blocks:        2801:18d:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 23:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5e:d8:35:f6:c8:ed:a3:28:35:30:42:40:e4:22:19:21:9a:f0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Jul  1 04:19:11 2025 GMT
            Not After : Jun 30 04:24:11 2026 GMT
        Subject: CN=03EE03D10CAD89B3902E7E79E819DC739A60D766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:43:b8:17:31:12:5b:ba:fb:df:68:f4:79:
                    6d:38:d6:38:c1:23:40:28:73:b5:c2:90:86:52:49:
                    86:ea:f6:0d:74:98:be:e4:c0:9b:5e:78:0b:5c:3e:
                    40:db:01:0f:40:d7:9c:91:10:9b:98:c5:69:f6:5f:
                    49:0f:94:83:75:e0:b5:77:fa:4e:2c:8c:54:42:5f:
                    87:92:f2:d8:b8:45:87:9c:3f:4c:2e:3d:56:df:fe:
                    cb:17:3a:90:36:ca:77:67:15:9f:8f:66:57:8d:f6:
                    30:d7:61:f5:bd:98:19:01:b3:22:b5:75:82:1e:68:
                    6f:52:be:66:41:6b:17:11:9b:04:22:89:42:d1:93:
                    ee:46:1c:91:3a:5f:e3:55:b7:26:ee:e6:e6:0e:9c:
                    31:00:12:c7:de:9c:d2:ab:04:5b:6c:9a:da:89:8e:
                    ef:05:e2:7f:be:a6:dd:59:be:ed:4d:43:89:f8:50:
                    54:16:28:ff:55:d9:d5:58:4f:12:0a:08:20:e6:25:
                    e2:84:dd:2c:4a:a2:0e:8a:0b:f5:d5:5d:a2:ce:5e:
                    e4:41:21:75:5b:e6:88:8e:4e:03:1c:fd:26:57:b6:
                    0a:ca:2c:4d:d7:ee:3c:08:64:3a:15:49:3f:e5:c0:
                    0e:9e:a5:a6:c1:00:a1:72:54:70:10:bf:4a:88:f2:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EE:03:D1:0C:AD:89:B3:90:2E:7E:79:E8:19:DC:73:9A:60:D7:66
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a313a3a2f34382d3438203d3e20323733383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18d:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:e2:4a:89:2d:31:da:e1:2b:be:31:4d:ab:08:3c:3e:9a:
         a2:d7:ff:7b:53:44:6b:ae:29:aa:6d:3a:81:9f:c8:92:8f:a2:
         ca:da:76:aa:5c:58:2a:45:ba:78:81:96:81:33:3a:8f:28:96:
         64:52:9f:f7:a1:d8:48:5f:69:05:77:e5:5c:b3:03:b0:39:52:
         16:44:c4:bd:b8:c5:e9:db:1d:b3:4e:28:67:3b:13:61:e8:1b:
         6d:0a:96:8a:2c:95:2e:90:32:86:12:8f:4a:ae:41:d1:a7:e7:
         2c:ed:23:04:de:b5:62:f0:dd:f5:8b:26:e4:2e:e1:d1:fd:7f:
         11:70:7e:31:74:84:a1:7e:85:18:4a:3f:97:ac:3d:9f:5e:76:
         db:7c:78:9b:98:81:0d:2b:7f:c4:d0:60:53:4c:67:21:60:0e:
         2a:7a:b6:cd:a5:24:98:5b:4c:4f:00:89:5c:03:3b:d4:fb:17:
         41:c5:a4:e1:91:a7:bd:21:20:83:f8:d4:bd:55:53:02:26:af:
         f4:4d:0f:56:a5:e9:bb:3a:38:62:3f:77:0c:15:8f:57:93:f5:
         52:2b:88:f3:81:3a:4b:33:3a:67:a2:e3:10:f8:07:38:0b:7f:
         92:3c:4c:6f:21:f0:83:20:53:0c:c3:4d:ea:b7:1a:53:da:b0:
         7f:36:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:55:24 2025 by rpki-client