Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/323830333a383531303a3a2f33322d3438203d3e20323732303137.roa
File:                     323830333a383531303a3a2f33322d3438203d3e20323732303137.roa (raw, json)
Hash identifier:          zkfsQk/CPUyS70DjCcPB3IHLPn4ubZ8pW4Z3J1aZXDw=
Subject key identifier:   D3:EE:1C:56:18:46:06:F0:E7:16:8C:69:5D:6C:D5:04:31:7F:E0:C7
Certificate issuer:       /CN=39956370C43807CD505618A96E0AB1D69E7FFD91
Certificate serial:       36F8F028003BBC9899ABB17352B46DC7CAFE02CB
Authority key identifier: 39:95:63:70:C4:38:07:CD:50:56:18:A9:6E:0A:B1:D6:9E:7F:FD:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39956370C43807CD505618A96E0AB1D69E7FFD91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/323830333a383531303a3a2f33322d3438203d3e20323732303137.roa
Signing time:             Mon 11 Aug 2025 14:15:00 +0000
ROA not before:           Mon 11 Aug 2025 14:10:00 +0000
ROA not after:            Mon 10 Aug 2026 14:15:00 +0000
asID:                     272017
IP address blocks:        2803:8510::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/39956370C43807CD505618A96E0AB1D69E7FFD91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/39956370C43807CD505618A96E0AB1D69E7FFD91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39956370C43807CD505618A96E0AB1D69E7FFD91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:f0:28:00:3b:bc:98:99:ab:b1:73:52:b4:6d:c7:ca:fe:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39956370C43807CD505618A96E0AB1D69E7FFD91
        Validity
            Not Before: Aug 11 14:10:00 2025 GMT
            Not After : Aug 10 14:15:00 2026 GMT
        Subject: CN=D3EE1C56184606F0E7168C695D6CD504317FE0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:4c:be:c2:82:2e:f8:dc:8e:3d:7e:62:17:
                    9b:e8:9c:3d:9b:e0:b4:f6:b6:d7:4f:fc:a9:35:85:
                    99:24:c0:13:a0:8f:5c:e4:42:4d:75:91:fb:ff:b4:
                    6e:3c:96:7e:90:80:19:79:2f:c7:10:35:62:ec:67:
                    8e:77:ec:ed:a4:01:1d:18:17:69:e8:0a:b4:98:ad:
                    cd:2c:63:8e:ee:08:3d:ab:df:b9:3e:60:22:d2:b1:
                    09:29:c4:1b:71:2d:b3:1f:53:8d:ba:39:17:93:13:
                    82:b9:b7:23:91:7e:08:04:e2:9d:c6:df:04:73:e9:
                    60:98:d6:fa:c1:95:0a:e1:9c:14:0d:d5:5d:45:44:
                    8f:07:3e:bf:3f:51:24:a1:a0:15:39:0e:c4:fc:83:
                    9b:9e:8a:4e:8a:e9:c4:e0:57:af:7f:b3:50:73:20:
                    82:e0:49:6c:8b:cc:6e:c0:6a:c0:49:d6:26:bf:3b:
                    96:e1:76:29:c6:5a:ad:5a:cb:d0:23:9c:fd:6d:f0:
                    69:e2:bb:0e:6d:ee:95:bd:be:fa:0e:6e:a8:a8:33:
                    0e:d2:73:3d:04:79:96:8f:32:60:be:cc:09:ec:35:
                    2b:bc:f5:13:2d:b2:93:10:c9:77:45:e0:5c:3c:16:
                    16:8f:74:6f:73:d9:d6:2c:0a:1d:cd:67:98:b5:23:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:1C:56:18:46:06:F0:E7:16:8C:69:5D:6C:D5:04:31:7F:E0:C7
            X509v3 Authority Key Identifier:
                keyid:39:95:63:70:C4:38:07:CD:50:56:18:A9:6E:0A:B1:D6:9E:7F:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/39956370C43807CD505618A96E0AB1D69E7FFD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39956370C43807CD505618A96E0AB1D69E7FFD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/323830333a383531303a3a2f33322d3438203d3e20323732303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8510::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:18:f9:57:e4:06:35:71:89:56:2e:e0:ea:a3:b9:ea:c0:cc:
         c1:27:84:e3:f1:09:7d:3c:02:45:ed:f5:0b:1c:fe:1e:32:bc:
         24:79:f5:b0:0d:17:ac:2f:85:c0:53:50:c6:e2:f9:b8:7c:74:
         59:79:27:22:27:19:c3:8d:ff:74:f6:4b:80:ad:4d:4d:cd:a8:
         94:ad:84:7e:e1:8f:81:25:f6:a1:20:f9:87:da:59:8c:e6:43:
         6d:13:1c:a4:29:16:2f:49:58:ae:63:f0:8e:3a:0c:c5:26:ec:
         66:83:ff:92:1c:4d:ae:3c:62:b3:71:c7:55:64:df:a9:87:05:
         d3:0f:46:bf:bc:4e:b9:b3:f7:10:9f:c3:47:82:6d:ab:3f:12:
         94:fa:5c:54:03:50:68:7c:9a:27:ef:39:35:86:10:8f:09:34:
         8b:13:db:68:2c:31:c6:d8:5a:19:83:90:23:05:0d:cd:a2:a9:
         5e:14:00:f4:a2:f8:91:96:48:1b:f8:51:b2:94:c0:33:73:ed:
         f0:16:29:ca:ff:aa:e0:29:ef:95:90:ec:7c:45:ef:d6:36:28:
         e0:93:e2:61:32:92:10:ce:c8:ff:29:af:66:3f:95:31:4f:b1:
         5b:e0:11:a3:d5:c2:b5:33:84:69:d1:f1:54:91:f7:b7:0e:b7:
         17:19:59:ae
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNvjwKAA7vJiZq7FzUrRtx8r+AsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5NTYzNzBDNDM4MDdDRDUwNTYxOEE5NkUwQUIxRDY5
RTdGRkQ5MTAeFw0yNTA4MTExNDEwMDBaFw0yNjA4MTAxNDE1MDBaMDMxMTAvBgNV
BAMTKEQzRUUxQzU2MTg0NjA2RjBFNzE2OEM2OTVENkNENTA0MzE3RkUwQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAI0y+woIu+NyOPX5iF5vonD2b
4LT2ttdP/Kk1hZkkwBOgj1zkQk11kfv/tG48ln6QgBl5L8cQNWLsZ4537O2kAR0Y
F2noCrSYrc0sY47uCD2r37k+YCLSsQkpxBtxLbMfU426OReTE4K5tyORfggE4p3G
3wRz6WCY1vrBlQrhnBQN1V1FRI8HPr8/USShoBU5DsT8g5ueik6K6cTgV69/s1Bz
IILgSWyLzG7AasBJ1ia/O5bhdinGWq1ay9AjnP1t8Gniuw5t7pW9vvoObqioMw7S
cz0EeZaPMmC+zAnsNSu89RMtspMQyXdF4Fw8FhaPdG9z2dYsCh3NZ5i1I/ghAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0+4cVhhGBvDnFoxpXWzVBDF/4McwHwYDVR0j
BBgwFoAUOZVjcMQ4B81QVhipbgqx1p5//ZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjA5MThENjUxNzg2NzY3OUREMTQ4Qzc0MjcwOUUxQzMy
MUVEMkFBQTA3REE1MUI4OUY0RTlFNDczNTkzQTg4LzAvMzk5NTYzNzBDNDM4MDdD
RDUwNTYxOEE5NkUwQUIxRDY5RTdGRkQ5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTk1NjM3MEM0MzgwN0NENTA1
NjE4QTk2RTBBQjFENjlFN0ZGRDkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YwOTE4RDY1MTc4Njc2NzlERDE0OEM3NDI3MDlFMUMzMjFFRDJBQUEw
N0RBNTFCODlGNEU5RTQ3MzU5M0E4OC8wLzMyMzgzMDMzM2EzODM1MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDhRAw
DQYJKoZIhvcNAQELBQADggEBABMY+VfkBjVxiVYu4OqjuerAzMEnhOPxCX08AkXt
9Qsc/h4yvCR59bANF6wvhcBTUMbi+bh8dFl5JyInGcON/3T2S4CtTU3NqJSthH7h
j4El9qEg+YfaWYzmQ20THKQpFi9JWK5j8I46DMUm7GaD/5IcTa48YrNxx1Vk36mH
BdMPRr+8Trmz9xCfw0eCbas/EpT6XFQDUGh8mifvOTWGEI8JNIsT22gsMcbYWhmD
kCMFDc2iqV4UAPSi+JGWSBv4UbKUwDNz7fAWKcr/quAp75WQ7HxF79Y2KOCT4mEy
khDOyP8pr2Y/lTFPsVvgEaPVwrUzhGnR8VSR97cOtxcZWa4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:37 2025 by rpki-client