Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa
File:                     323830333a646135303a3a2f33322d3438203d3e20323733313836.roa (raw, json)
Hash identifier:          tGSUg+hrMpuG15amTGtLHk+JRN/qLIMNB3Dbzl0N+Zg=
Subject key identifier:   98:8D:06:CE:BB:8B:92:EA:3C:61:E4:0D:DD:33:E9:63:B5:D8:D2:5E
Certificate issuer:       /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
Certificate serial:       4A4164C7043F5FE98CDF28C1654D1E60056094A5
Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa
Signing time:             Fri 25 Jul 2025 04:26:42 +0000
ROA not before:           Fri 25 Jul 2025 04:21:42 +0000
ROA not after:            Fri 24 Jul 2026 04:26:42 +0000
asID:                     273186
IP address blocks:        2803:da50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 23:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:41:64:c7:04:3f:5f:e9:8c:df:28:c1:65:4d:1e:60:05:60:94:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
        Validity
            Not Before: Jul 25 04:21:42 2025 GMT
            Not After : Jul 24 04:26:42 2026 GMT
        Subject: CN=988D06CEBB8B92EA3C61E40DDD33E963B5D8D25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:a9:71:7e:98:ab:19:3c:42:fd:96:16:98:
                    0c:cb:14:af:28:88:ac:2c:98:cd:68:84:cd:af:c9:
                    86:cb:39:4f:5e:bd:69:26:f7:6b:c3:7f:e9:0d:2c:
                    ad:7e:e7:7f:86:d0:9b:8c:2c:f2:0e:51:0a:cd:9e:
                    ea:7a:d5:44:f4:de:6b:92:9f:93:00:25:9f:75:5b:
                    e6:06:64:23:cd:16:0f:8b:34:eb:52:b0:5f:12:24:
                    33:8b:ff:2b:33:f4:fc:93:85:ac:0c:73:56:ca:04:
                    54:9f:b1:72:cb:f8:04:97:f7:7f:8e:4e:96:29:6a:
                    c9:d1:d6:2e:d4:66:a7:c9:4e:04:ab:a1:85:72:85:
                    3b:84:9d:e6:22:eb:11:55:74:bf:48:5b:b3:ab:16:
                    35:1b:a9:32:32:15:41:d1:a6:e9:0a:fe:1d:17:32:
                    d0:31:3b:ac:e3:b2:a9:20:9c:90:d7:1c:91:b0:23:
                    20:81:30:b7:84:12:42:e2:f1:09:b3:12:39:17:e2:
                    7d:f6:ff:55:3b:a9:19:58:1a:c6:c2:fb:ce:60:4d:
                    34:82:2b:fc:f8:c0:6f:0f:09:93:d5:40:71:cb:8b:
                    0a:e1:31:a0:de:6b:76:2b:d4:c3:2f:e0:74:e2:50:
                    01:50:5d:42:76:93:c5:5f:cd:91:20:a0:88:02:d7:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:06:CE:BB:8B:92:EA:3C:61:E4:0D:DD:33:E9:63:B5:D8:D2:5E
            X509v3 Authority Key Identifier:
                keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3438203d3e20323733313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da50::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:17:27:fc:7a:c6:3b:99:74:66:f8:fd:95:5b:50:cc:62:2a:
         b8:63:72:f0:1b:b2:e1:38:13:ba:3b:37:36:3c:5c:67:18:bf:
         d7:60:2e:d5:d2:fe:b6:56:fa:51:0d:09:aa:ff:14:1d:30:a8:
         ee:a4:3a:bd:55:9d:60:b6:f9:6c:03:fb:56:09:6b:16:59:ef:
         3c:71:8b:4a:1c:b9:85:e2:6d:b8:8b:54:c7:59:88:85:9b:36:
         36:73:21:c2:d3:a1:35:2b:ad:ca:06:73:63:28:71:1d:7c:6d:
         4c:d7:a7:23:05:b6:db:39:79:e7:c0:fb:b3:d3:78:cf:aa:a7:
         3c:c2:8c:9a:58:d1:30:ba:66:e0:b7:4e:b3:84:a4:11:c3:18:
         b3:6e:45:07:18:88:9e:16:ba:04:bc:6c:40:f4:cd:6c:84:57:
         ab:37:19:3f:67:49:a1:4f:de:4f:4f:c5:ab:0a:7f:af:f6:77:
         93:dd:10:55:3b:ad:da:fb:69:4f:35:5a:4d:2f:d4:b4:72:05:
         b3:e7:f9:54:31:fd:9e:69:b9:3c:62:eb:ca:94:06:fb:c1:d4:
         ec:29:dc:3a:ab:7e:56:64:fc:32:1e:44:97:30:0d:73:80:64:
         74:bc:57:c3:ec:96:ad:d9:84:fe:56:28:88:fa:ad:d1:17:2b:
         df:02:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:44 2025 by rpki-client