Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a343a3a2f34362d3438203d3e20323733383930.roa
File:                     323830313a3138643a343a3a2f34362d3438203d3e20323733383930.roa (raw, json)
Hash identifier:          Le2qeK2eG5NPxoxEXTIylLWNkI2E83VI+JMGIVGljxQ=
Subject key identifier:   3F:33:F3:8A:52:8E:F1:04:85:A6:BF:8B:1B:E4:33:DE:11:B2:A4:BB
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       68C0666206044AE758464857DB67F309F1CB9DDB
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a343a3a2f34362d3438203d3e20323733383930.roa
Signing time:             Tue 01 Jul 2025 04:24:11 +0000
ROA not before:           Tue 01 Jul 2025 04:19:11 +0000
ROA not after:            Tue 30 Jun 2026 04:24:11 +0000
asID:                     273890
IP address blocks:        2801:18d:4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 23:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:66:62:06:04:4a:e7:58:46:48:57:db:67:f3:09:f1:cb:9d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Jul  1 04:19:11 2025 GMT
            Not After : Jun 30 04:24:11 2026 GMT
        Subject: CN=3F33F38A528EF10485A6BF8B1BE433DE11B2A4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:95:0f:01:1f:f2:eb:c1:61:42:03:2f:c2:
                    54:ce:3c:a9:bc:73:ed:4f:91:66:9a:0a:6f:be:30:
                    04:36:15:f1:d2:2a:ba:24:6d:21:d3:c6:f9:a2:ae:
                    64:83:0a:3f:15:ff:0a:6c:ef:08:05:3a:3f:dc:41:
                    fd:aa:32:cd:f3:94:16:e3:fd:18:b0:e7:5c:4a:ce:
                    26:5f:d9:d7:ca:b8:30:d2:75:82:3b:23:61:1a:b7:
                    ea:64:44:05:5c:e6:14:92:5f:29:cd:3f:e3:55:32:
                    63:7f:68:75:84:36:9c:63:f0:71:52:08:e7:75:f4:
                    26:bd:63:8c:ba:45:ca:95:b4:99:01:f9:3d:3b:7f:
                    6f:14:f8:9e:9b:fe:83:7a:d8:03:21:23:6a:41:c8:
                    5c:bc:38:ec:ca:99:2a:e6:eb:d5:24:0d:0d:6e:05:
                    4c:b7:70:97:80:21:ab:13:3f:b4:29:24:a3:d8:2b:
                    e4:4a:d3:99:8d:e3:f3:25:ae:ae:9c:1f:6e:ef:23:
                    8d:32:0e:ae:ab:0f:cd:d8:1e:ed:05:bc:ad:41:3c:
                    00:86:b4:13:63:88:d1:73:51:d7:50:6c:74:9c:db:
                    e3:f8:f1:a5:cb:ce:e8:6e:fd:86:f0:84:a3:d3:a0:
                    d8:15:76:1a:41:9b:b9:f1:22:b9:53:77:73:c0:a5:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:33:F3:8A:52:8E:F1:04:85:A6:BF:8B:1B:E4:33:DE:11:B2:A4:BB
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a343a3a2f34362d3438203d3e20323733383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18d:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:a2:bd:38:2f:1b:1a:5a:fc:e9:e3:3b:13:0a:c8:e6:a8:
         7b:28:36:aa:cd:6a:b1:35:04:a6:95:5e:6d:64:e5:93:b8:51:
         c6:d5:14:ad:45:8c:e6:a3:ab:b2:18:ff:7f:14:c0:3c:70:ad:
         00:f2:82:b0:60:fb:5a:67:84:18:80:6d:0a:7e:6e:90:6f:46:
         df:02:84:00:ea:06:00:0c:35:54:b8:07:a9:27:c3:9a:0e:4e:
         60:e7:b3:ef:25:0c:ad:e3:51:b6:73:95:43:ff:46:1d:ec:84:
         b7:7a:66:9c:01:14:96:f4:93:07:ee:7a:39:29:d2:8a:cf:d5:
         a4:1f:9c:b5:70:fd:5a:6a:d6:bb:c6:1b:f5:55:c4:7f:b2:94:
         42:3c:98:72:03:4d:88:80:bb:68:85:e7:d2:cb:ee:f7:02:06:
         1c:ac:1f:da:8a:28:09:90:7e:d0:32:3a:12:29:28:89:0d:0f:
         f8:6f:ea:0e:ce:7b:cd:7a:db:17:0a:65:7c:23:c6:ec:3a:fb:
         25:12:8b:62:0e:92:eb:8e:d1:0b:23:52:3b:a3:31:69:5e:28:
         a6:01:c0:f7:76:b7:d0:fa:26:50:35:f5:5c:25:96:aa:3f:7d:
         7c:6c:5e:e4:1a:b9:e8:e8:27:62:89:71:9e:6f:b4:3e:36:95:
         03:94:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:54:31 2025 by rpki-client