Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa
File:                     323830333a373632303a3a2f33322d3332203d3e20323636373430.roa (raw, json)
Hash identifier:          Gg7R/YrHtrncVJ8Noa3ui2DFwjezvHVpSDZrDqMWE2I=
Subject key identifier:   5C:11:C4:16:38:C5:F9:56:95:AB:70:5E:92:60:88:7F:1D:24:5D:65
Certificate issuer:       /CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
Certificate serial:       59E1179EA52B662306B359C8A2D64C70E447441D
Authority key identifier: 46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa
Signing time:             Tue 12 Aug 2025 22:40:00 +0000
ROA not before:           Tue 12 Aug 2025 22:35:00 +0000
ROA not after:            Tue 11 Aug 2026 22:40:00 +0000
asID:                     266740
IP address blocks:        2803:7620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:17:9e:a5:2b:66:23:06:b3:59:c8:a2:d6:4c:70:e4:47:44:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
        Validity
            Not Before: Aug 12 22:35:00 2025 GMT
            Not After : Aug 11 22:40:00 2026 GMT
        Subject: CN=5C11C41638C5F95695AB705E9260887F1D245D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:81:18:68:6d:60:3e:8f:40:24:05:fb:9d:
                    70:c4:31:05:64:e3:44:46:0b:f7:d2:52:b2:e3:6b:
                    48:16:77:1e:c6:51:4f:e0:d3:32:0f:a9:56:7e:fb:
                    6a:a2:d1:fb:12:d3:85:6d:b5:be:0d:02:09:f8:11:
                    09:71:0c:17:ee:36:f0:2c:ce:75:9c:b1:23:06:9e:
                    74:ae:64:a9:7d:86:32:87:52:5b:0e:6b:27:09:69:
                    15:5d:f5:11:e0:71:94:81:28:5c:fc:e3:68:76:10:
                    6b:4e:c6:f7:27:61:d3:d9:17:3b:ea:f8:25:05:f4:
                    5c:4c:e3:0f:17:20:b1:65:68:d9:f6:2f:96:bf:f4:
                    f1:3e:dd:47:90:34:4b:40:c4:ce:ad:d3:74:8a:99:
                    3b:fd:97:76:e3:bf:fd:02:1c:21:19:34:5e:09:d7:
                    80:4c:74:73:79:8c:1b:7b:18:65:0b:86:05:2f:73:
                    d3:0a:d9:55:53:22:ce:ad:d7:49:59:ef:5c:cb:3d:
                    21:19:97:9c:7c:b1:86:9f:0d:88:83:ef:cc:87:8f:
                    1a:ce:1c:bb:5f:07:89:a4:df:b2:26:b6:af:0e:88:
                    f0:13:3f:ee:19:83:e7:03:4f:3f:56:23:56:08:d8:
                    58:b8:08:62:1d:c2:b9:4c:10:78:09:6d:0c:db:cc:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:C4:16:38:C5:F9:56:95:AB:70:5E:92:60:88:7F:1D:24:5D:65
            X509v3 Authority Key Identifier:
                keyid:46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:d5:40:84:a4:bb:ce:0a:ea:f3:1c:43:5d:9b:d9:c7:47:
         bd:85:01:d2:25:e8:92:64:ff:72:e0:55:d2:a4:27:9e:b1:80:
         99:67:c5:bc:83:28:23:75:85:e9:72:5f:4c:ac:ba:74:e4:16:
         08:95:39:1b:72:fa:08:73:a8:f4:6a:b5:a2:a3:78:91:6b:f5:
         a9:7a:d1:36:b6:6d:aa:32:8b:9f:01:c3:54:4d:d1:e4:01:64:
         9e:5d:60:62:32:2e:c4:bf:9c:06:71:26:f9:94:26:80:e9:e9:
         55:f2:65:3c:dd:7b:5d:fa:93:72:1a:37:ad:35:d3:57:e8:12:
         b4:19:f0:8b:1c:25:69:ea:a1:99:e5:d2:6b:1c:9f:dc:a2:f9:
         d3:3a:5c:92:4f:71:2b:a8:ab:2a:70:a7:81:09:ec:d2:44:e4:
         e0:37:40:12:a2:68:09:ce:73:81:b0:0c:44:32:31:2e:f2:f2:
         2f:d0:12:22:24:c9:93:e3:9e:5f:cc:df:e5:94:94:59:75:f1:
         29:fc:c9:17:17:d6:f2:a4:f8:ca:c8:86:49:9a:66:7c:59:36:
         4d:2a:42:d9:c8:5f:cf:08:77:ba:1e:b7:3d:b3:52:75:69:d8:
         00:bb:94:92:d9:bf:90:d6:0b:3b:95:76:53:b4:52:5f:c7:b9:
         e2:9b:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:56:05 2025 by rpki-client