Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          9J4lWWvhfyvE11/AxsEgMzpxQouafTlz8nV1vci30jk=
Subject key identifier:   31:30:1A:C6:86:A2:DE:DF:2F:98:58:8D:5C:68:4D:B7:CA:EB:48:28
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       4E21043DECC9D78F07C880BAE205C6B7F8112584
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 27 Jun 2025 00:23:57 +0000
ROA not before:           Fri 27 Jun 2025 00:18:57 +0000
ROA not after:            Fri 26 Jun 2026 00:23:57 +0000
asID:                     273123
IP address blocks:        2803:450:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 12:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:21:04:3d:ec:c9:d7:8f:07:c8:80:ba:e2:05:c6:b7:f8:11:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jun 27 00:18:57 2025 GMT
            Not After : Jun 26 00:23:57 2026 GMT
        Subject: CN=31301AC686A2DEDF2F98588D5C684DB7CAEB4828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:04:d3:43:a3:f6:3e:b2:a4:e6:52:1c:8b:
                    56:9f:2c:aa:3a:f3:3e:e8:94:71:4b:f0:24:91:6e:
                    37:df:25:90:0f:7c:61:8c:82:34:88:bc:ff:26:fa:
                    26:96:be:43:16:79:85:2f:8d:43:eb:02:aa:08:14:
                    94:84:b6:15:07:5b:8b:17:72:18:fc:c0:2c:d7:3b:
                    88:53:71:ca:a5:af:2f:11:30:69:39:6a:3a:13:3d:
                    aa:4c:73:af:f4:30:3f:b0:99:b3:71:b6:17:b8:19:
                    28:2b:2e:fd:f2:a1:d2:f7:53:b6:35:69:e1:b5:b4:
                    5c:36:92:62:05:44:ec:6f:4f:8e:c8:d4:77:70:4a:
                    3d:cb:d7:5b:1e:c7:8b:e7:b6:46:49:dc:00:e0:6c:
                    e4:8a:8e:b1:51:53:44:23:93:9f:c8:55:cc:77:4d:
                    58:e3:fa:43:fa:47:3d:2e:4f:7d:1a:7a:89:32:10:
                    cc:b9:67:cb:10:f4:8a:13:dc:36:1b:d4:6b:e9:e6:
                    78:b0:4c:31:27:58:a9:9d:86:6b:f0:b6:87:27:26:
                    31:9f:68:35:e7:30:73:67:f9:51:32:87:a8:3c:94:
                    a3:96:42:80:d9:ca:e7:47:ab:a2:ca:78:27:2b:e7:
                    7e:bb:5c:10:5c:09:43:8c:24:ec:d6:e7:6f:fa:ea:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:1A:C6:86:A2:DE:DF:2F:98:58:8D:5C:68:4D:B7:CA:EB:48:28
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:1d:6d:0f:30:71:68:ee:dd:92:4d:8b:fe:63:27:88:4c:65:
         94:9c:18:66:c8:43:eb:34:72:bb:1c:c9:49:07:b6:cc:89:13:
         c3:e7:a7:c4:e1:c5:f4:12:c8:7d:ea:1e:fd:68:5b:eb:90:ff:
         8e:5c:73:9d:3a:23:38:af:da:b0:28:fa:54:1e:71:29:1f:a8:
         66:cc:3b:91:ef:06:6a:78:4d:7c:83:28:ed:68:69:5f:96:a9:
         f1:7d:7e:a4:04:5f:45:a0:3a:26:f5:a4:81:e4:3d:11:5f:dc:
         bd:90:ae:fa:a9:c4:30:e6:31:e9:9a:91:26:c7:da:a1:9b:5f:
         a9:93:1c:d3:69:92:3f:63:81:40:d7:dd:b4:70:b6:59:ce:e1:
         50:da:83:6d:ca:7c:03:ea:b5:e9:49:4e:f0:a3:d7:ed:96:55:
         04:57:83:90:ec:c7:1d:34:6a:67:02:27:5d:41:32:2d:f0:da:
         e9:72:d7:a1:bf:fa:cb:8b:d5:cf:49:30:72:1a:62:28:92:dc:
         e3:ab:6e:b4:1b:01:66:41:19:67:78:0b:a3:16:6d:09:37:8f:
         d0:fa:b4:9d:a6:40:ae:68:2d:fc:79:7c:55:e7:bd:12:43:98:
         85:a3:07:94:25:55:5c:a6:bb:38:af:ff:e0:22:6e:50:96:0e:
         87:f4:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:58:58 2025 by rpki-client