Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          sZX3HW+I2Z9xUPnYkhFaXdwqQ+85WYPITkWjjlVDci0=
Subject key identifier:   68:00:A9:61:B1:EC:9A:10:6E:9F:5A:60:43:CB:6A:35:E0:67:20:0F
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       49563153B2A93A7FABD0EF4315F9FC9A98A10E64
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Thu 21 Aug 2025 12:40:24 +0000
ROA not before:           Thu 21 Aug 2025 12:35:24 +0000
ROA not after:            Thu 20 Aug 2026 12:40:24 +0000
asID:                     267919
IP address blocks:        2803:ee60:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:56:31:53:b2:a9:3a:7f:ab:d0:ef:43:15:f9:fc:9a:98:a1:0e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Aug 21 12:35:24 2025 GMT
            Not After : Aug 20 12:40:24 2026 GMT
        Subject: CN=6800A961B1EC9A106E9F5A6043CB6A35E067200F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:8f:22:2b:6c:2a:00:58:45:f9:0e:ef:0c:
                    50:a2:75:11:2c:38:39:0c:b9:93:75:58:2c:f3:13:
                    d4:e5:69:83:7f:a2:54:ef:fd:fe:e7:d5:b7:ee:b7:
                    77:26:9d:e9:4d:bb:35:1e:89:97:54:69:b2:66:f1:
                    32:93:68:53:20:e8:d1:f8:dd:9e:0e:53:41:1c:03:
                    fc:3f:93:6e:cd:37:8c:c4:cc:4c:5e:6c:1d:fe:2a:
                    79:99:ed:30:26:29:b9:12:11:25:0d:c4:71:88:33:
                    2c:fb:fa:34:bc:40:23:34:94:81:35:ba:8d:09:b9:
                    34:e4:88:7e:40:12:e7:c4:3f:f8:9e:44:3c:a2:a6:
                    38:5c:18:13:2b:02:59:e0:7e:ca:29:05:d8:c4:92:
                    87:ad:60:66:f6:c4:13:b9:fe:f4:62:56:fd:c9:ba:
                    d7:b5:4c:13:54:d8:bf:1a:f4:a9:ca:1c:34:ad:32:
                    12:34:5f:b7:d0:16:d0:6d:a1:d1:27:63:5c:03:a4:
                    32:31:f1:31:48:6f:6d:f9:44:a8:52:b0:54:c4:c1:
                    4a:00:c8:81:97:03:55:a5:5b:bc:94:56:81:e5:9f:
                    74:2f:69:15:d7:c2:bc:0b:83:19:b7:ad:13:31:8c:
                    36:70:65:3a:7e:97:13:5e:ca:a0:6c:45:3d:7a:e3:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:A9:61:B1:EC:9A:10:6E:9F:5A:60:43:CB:6A:35:E0:67:20:0F
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:5b:3c:77:e0:00:83:84:bb:05:73:e0:d3:48:e5:bc:76:
         6b:cc:b9:54:4f:2c:4a:42:cc:f0:0f:b8:24:c7:3b:6e:e8:43:
         e0:27:a9:59:33:df:28:7f:4b:e1:9b:c2:b2:0b:3b:7c:de:4f:
         5a:97:13:83:c6:99:9a:b0:90:8f:a3:2b:6c:8e:f6:42:b1:83:
         ca:98:9d:7b:da:67:a3:8d:47:4b:0f:00:a9:8b:b7:49:f6:ce:
         dc:82:19:15:30:16:1e:ae:6b:eb:94:28:41:c0:01:ff:a0:11:
         e9:51:01:14:11:ef:e4:ae:1d:9a:5a:63:9e:18:3c:e9:02:92:
         da:0c:5a:4e:62:ca:85:89:a9:9d:01:8e:b6:c0:29:71:8c:6f:
         fe:30:dd:51:ed:6b:dd:da:7a:16:ac:a3:7a:08:0a:d7:dc:73:
         94:11:3b:00:ca:0f:3e:f0:b4:53:ab:e2:4f:53:3d:70:73:a7:
         6f:80:04:f6:e9:ed:cf:ab:42:05:2d:89:38:bf:b6:9f:a1:e9:
         93:a8:ee:39:59:8b:86:b8:b0:56:87:fc:df:f8:c4:d7:4f:69:
         53:f5:ac:d3:66:f9:4c:76:03:f7:60:d6:00:e8:74:52:46:60:
         c3:19:e0:97:85:ab:05:75:97:1c:ae:a4:7b:54:56:56:6a:68:
         0a:cc:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:39:39 2025 by rpki-client