Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
File:                     323830333a326135303a3a2f33322d3332203d3e20323733313830.roa (raw, json)
Hash identifier:          QtgLQxXxYCebIjBxlLMtRGm7aF0TrXAvtvNV3OcV3HY=
Subject key identifier:   99:62:84:D4:95:40:3C:A1:AB:CB:54:69:5D:FC:22:63:C4:2F:96:00
Certificate issuer:       /CN=45036BDB7E22AA4777363E0285556F756CC67A52
Certificate serial:       29FA72731C74A91EA703F2103751D4763AFF6C7D
Authority key identifier: 45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
Signing time:             Mon 23 Jun 2025 18:23:22 +0000
ROA not before:           Mon 23 Jun 2025 18:18:22 +0000
ROA not after:            Mon 22 Jun 2026 18:23:22 +0000
asID:                     273180
IP address blocks:        2803:2a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 09:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fa:72:73:1c:74:a9:1e:a7:03:f2:10:37:51:d4:76:3a:ff:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45036BDB7E22AA4777363E0285556F756CC67A52
        Validity
            Not Before: Jun 23 18:18:22 2025 GMT
            Not After : Jun 22 18:23:22 2026 GMT
        Subject: CN=996284D495403CA1ABCB54695DFC2263C42F9600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:52:54:ee:e2:5b:80:5d:54:1e:e8:19:48:
                    b8:d9:e0:ed:60:37:89:cc:d7:96:a7:45:89:dd:50:
                    85:5f:3b:f7:92:b7:51:00:22:18:73:58:8f:00:53:
                    ce:f5:79:aa:19:ca:e2:80:c4:c6:d7:8e:c8:fe:d1:
                    25:59:c6:8c:1c:eb:2e:23:1a:7f:ca:c7:a2:05:24:
                    90:6d:9b:9f:5a:b0:2a:e4:03:1d:a9:03:05:bb:f7:
                    6f:3e:3f:51:ee:c7:ac:74:5a:a5:7e:25:54:42:5c:
                    52:d1:a5:e0:de:52:28:2f:ce:fc:43:5d:6b:ca:f3:
                    6f:b9:90:20:63:95:9a:92:66:3c:6d:38:48:56:32:
                    fe:b5:ec:c8:8a:a1:e4:12:e4:26:91:46:18:f6:42:
                    d2:fd:49:f5:95:7c:26:f6:84:f6:b1:5d:17:63:f4:
                    b8:f2:64:9c:d6:16:41:ab:88:ab:e1:77:71:0e:dd:
                    dc:57:ab:5c:3a:64:3a:23:4c:cd:34:96:a8:82:1e:
                    70:c4:11:39:b7:4c:4b:e0:13:bc:0c:e1:d6:a9:1c:
                    49:5a:67:59:e1:c8:52:15:c0:c7:f0:4b:c2:17:33:
                    00:fe:f9:92:9b:74:6d:96:a4:22:a1:8b:d9:e6:8b:
                    da:7e:d7:4c:2c:75:be:62:4c:77:1f:8b:79:d8:f2:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:84:D4:95:40:3C:A1:AB:CB:54:69:5D:FC:22:63:C4:2F:96:00
            X509v3 Authority Key Identifier:
                keyid:45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:0d:e4:b9:3d:84:11:e8:26:7a:e6:e6:83:bb:c8:ba:f1:
         e8:e0:f4:18:ae:ee:e0:ee:a5:cb:08:33:4a:99:4e:ed:c9:df:
         0e:c5:08:74:56:66:3c:11:24:e1:3b:33:ca:a8:6c:99:a5:44:
         b4:2c:36:71:6e:a1:e4:c0:39:e5:af:1e:03:49:1e:3c:8c:b5:
         0f:4f:b7:1f:3e:c6:cb:4d:c0:3c:5d:76:d4:d9:16:09:51:a0:
         f2:a1:c7:b0:d8:00:af:69:ac:24:33:97:72:53:02:ee:d4:cf:
         de:29:92:89:d3:b2:49:ae:a7:5e:5b:53:47:5e:e9:eb:ca:f4:
         4b:73:29:dc:41:14:51:23:24:21:4b:8c:c9:43:cf:a3:3f:1d:
         b7:84:e8:81:62:4d:49:61:47:43:70:a7:70:0c:92:9e:09:25:
         5b:0f:43:50:94:e6:04:36:4f:19:e8:68:24:86:83:fc:7e:7d:
         7d:88:80:e1:a6:98:1c:7a:77:ef:83:6c:4d:5b:6e:3f:e1:0f:
         41:c4:82:57:f7:5a:bb:75:ca:70:b8:96:85:78:ba:25:92:fc:
         33:27:a2:a9:d7:c2:25:91:ec:a2:a8:89:0a:80:02:63:03:83:
         d4:be:5a:bf:be:7c:88:64:31:33:f4:fb:c5:ff:7e:84:f7:cc:
         23:f1:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:48:26 2025 by rpki-client