Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa
File:                     323830333a376661303a3a2f33322d3438203d3e20323637383034.roa (raw, json)
Hash identifier:          7t72bjnJ5quKwMzz74ir9pPVuL+RWrTFcO4m1kgWkJU=
Subject key identifier:   BD:0A:B7:BA:A7:BE:BD:FD:95:C4:B6:CB:5D:D0:F7:1C:F7:D4:40:FB
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       65EF346C4CD383C394F5FAFA9971AB492CFCC8AB
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa
Signing time:             Mon 11 Aug 2025 19:15:00 +0000
ROA not before:           Mon 11 Aug 2025 19:10:00 +0000
ROA not after:            Mon 10 Aug 2026 19:15:00 +0000
asID:                     267804
IP address blocks:        2803:7fa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ef:34:6c:4c:d3:83:c3:94:f5:fa:fa:99:71:ab:49:2c:fc:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Aug 11 19:10:00 2025 GMT
            Not After : Aug 10 19:15:00 2026 GMT
        Subject: CN=BD0AB7BAA7BEBDFD95C4B6CB5DD0F71CF7D440FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:86:47:30:af:6f:3a:11:d5:81:1d:87:4d:
                    d5:ff:05:2c:7c:02:50:34:9e:4c:a0:d0:cb:88:c3:
                    f0:6e:47:1a:e4:5d:e0:6d:c9:0e:5b:01:27:57:dd:
                    1f:24:cf:5b:c9:97:41:ce:28:d9:db:0c:f2:c9:47:
                    8f:a2:48:62:19:7d:a1:72:a1:9b:95:8e:ce:59:0a:
                    2a:fa:f3:7a:e1:f4:9b:b8:70:99:fc:b4:64:d4:c8:
                    30:79:68:c3:ee:4a:b6:67:a9:6a:e3:d9:14:aa:f8:
                    0f:9d:29:98:69:74:74:cf:ad:05:61:c5:03:4e:a2:
                    e5:31:ed:13:cc:ba:6f:39:76:27:dd:3f:b5:32:b5:
                    d9:6e:36:c7:9b:5d:03:d5:4f:e0:cf:9d:cc:7c:8a:
                    74:ec:41:28:97:6c:e7:02:1b:17:be:0e:53:ba:16:
                    c1:fe:7c:f4:54:37:bf:81:d9:3c:0c:be:83:e2:ce:
                    dc:c0:70:03:e9:64:6d:61:ff:df:24:b1:43:66:09:
                    9e:64:04:41:aa:cb:6c:49:c4:df:fe:59:20:3b:ce:
                    b2:1c:21:50:a4:25:27:2a:cf:68:d5:d4:b3:a9:64:
                    2f:3d:a4:2d:94:fe:75:fa:c5:55:de:f2:8d:57:ab:
                    b8:5a:86:37:c5:9f:60:4a:64:55:7f:5e:c0:3b:42:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0A:B7:BA:A7:BE:BD:FD:95:C4:B6:CB:5D:D0:F7:1C:F7:D4:40:FB
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:44:2c:73:e1:c8:22:e4:73:3f:29:78:75:36:ce:3c:61:95:
         e6:bf:b6:9c:89:b3:13:fe:37:a1:5d:0b:7a:df:f5:41:0e:7d:
         e7:3c:58:d9:4c:e0:f0:83:2e:31:88:03:62:a2:f3:2f:b0:0b:
         ee:22:45:1d:95:f4:1b:44:34:ab:c8:56:b4:55:ee:f1:fe:88:
         01:14:5d:d8:fa:7f:6f:a8:39:cd:91:1b:b7:17:c8:a1:ba:92:
         07:20:14:5f:94:3b:12:10:2a:b5:ea:d0:95:83:32:db:74:1e:
         3e:de:c9:f9:26:51:e9:f6:2e:15:86:bd:79:29:8a:88:32:c9:
         0c:25:57:ba:04:69:a7:f1:28:6a:9a:c5:9d:bd:40:7e:8a:a6:
         bb:cf:30:3c:52:66:bd:d6:e7:cd:d5:55:56:d7:f3:c3:db:53:
         e3:35:96:a9:59:59:64:c2:a6:e0:ed:3d:99:f5:ec:ae:48:a4:
         ad:13:d1:4f:e3:ad:83:41:68:50:8a:63:57:58:96:7d:e8:ad:
         33:4a:af:66:84:f6:1a:fc:37:66:6c:4a:c6:cb:18:12:0a:90:
         3b:e7:59:0f:3a:a9:c5:4a:b1:c7:81:dd:1d:a7:74:69:a4:75:
         be:e5:26:b1:08:ec:c4:3b:64:3e:2a:e0:4a:cd:3b:f0:bd:23:
         58:c3:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:49 2025 by rpki-client