Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          nS1d/GUUJx6p0O1RJ/yyAELDkHEmokyDIAS1dnhNIMg=
Subject key identifier:   13:05:2E:B2:2D:7F:4B:02:79:C2:2E:5E:1B:13:09:C0:66:66:0C:12
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       4B6BACF8404130059A82A3D9B6B041C6E58CABDD
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 30 Jul 2025 20:34:20 +0000
ROA not before:           Wed 30 Jul 2025 20:29:20 +0000
ROA not after:            Wed 29 Jul 2026 20:34:20 +0000
asID:                     267914
IP address blocks:        2803:8e60:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:ac:f8:40:41:30:05:9a:82:a3:d9:b6:b0:41:c6:e5:8c:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul 30 20:29:20 2025 GMT
            Not After : Jul 29 20:34:20 2026 GMT
        Subject: CN=13052EB22D7F4B0279C22E5E1B1309C066660C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:c1:92:9f:d1:3b:f0:b4:40:52:85:9b:ee:
                    86:5b:3b:e3:41:78:29:5c:4a:d9:2f:ce:34:bc:c5:
                    4f:6b:c1:1d:4a:a9:0b:f6:82:bf:30:ac:7b:ef:48:
                    d7:ff:89:1f:51:cc:78:ec:61:ab:2b:f0:fd:f3:1e:
                    d9:d5:1f:45:98:83:c2:c1:b1:07:77:3b:95:3a:4f:
                    68:ef:a6:c3:a3:21:a7:b6:dc:5e:87:c0:a6:c2:9e:
                    08:4a:f8:98:55:54:be:34:ef:e4:de:a7:80:7a:21:
                    ea:76:e3:8d:0a:66:66:a7:6e:7f:bf:57:0f:69:61:
                    12:84:f8:83:6f:a7:71:79:6b:73:e5:89:9e:b9:0e:
                    60:48:c5:09:5f:26:b1:9a:00:39:65:6e:d8:10:2a:
                    a3:51:ff:3b:dc:e6:88:5d:d6:f9:08:af:a9:57:9c:
                    81:96:09:77:fa:4a:7c:b0:1c:16:16:34:13:da:50:
                    52:ef:18:d4:00:9e:3d:bd:4b:22:1a:d2:75:56:e6:
                    60:6e:b3:5c:40:57:28:2b:e9:34:d5:ed:8d:6c:44:
                    3a:4a:4d:db:5b:62:76:ce:46:43:5f:8d:c1:5b:70:
                    12:1d:ab:8e:4a:cb:62:a0:5c:d7:82:c8:ad:fe:5d:
                    02:14:67:56:87:a5:b9:45:1a:2f:ed:eb:0f:51:0f:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:2E:B2:2D:7F:4B:02:79:C2:2E:5E:1B:13:09:C0:66:66:0C:12
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:75:b3:56:43:cf:c8:6a:74:7a:88:26:21:92:d3:c4:7f:
         7e:5e:58:b3:71:7b:af:a3:23:b4:d3:16:89:57:cf:b6:34:a8:
         0c:57:5a:52:89:11:97:fd:b2:3d:e2:56:33:ac:1f:1e:27:58:
         c9:e7:22:ee:12:61:d1:4b:bd:ec:5a:9b:82:48:3b:42:70:bb:
         8b:f9:07:da:3b:47:b9:c8:43:d9:9b:86:f6:7a:fc:aa:47:db:
         ea:a8:47:c4:e8:cf:89:76:79:4c:c3:04:83:1d:42:af:c0:40:
         a1:c0:88:da:25:b6:72:2a:c3:25:ac:07:f3:5f:62:6e:a5:9b:
         c6:46:7e:68:60:9e:77:9d:97:7e:32:7f:83:dc:c4:bb:b9:ec:
         75:91:29:dc:f3:c6:0a:c1:b7:6a:bb:2e:af:26:e1:3c:5f:cf:
         87:48:bd:eb:d1:d1:3c:bb:a7:93:c5:95:1c:3a:d0:3e:8c:ac:
         2c:ef:c5:51:28:84:38:4e:29:ab:67:39:5c:66:f9:79:2b:69:
         79:db:a1:bd:0f:87:e3:91:0e:60:b5:2c:7e:85:0f:eb:73:b5:
         54:5c:94:ca:cd:07:54:47:f8:e2:af:f8:8f:41:bb:75:e8:ad:
         37:4c:f8:25:9b:63:cc:36:94:f7:b8:3f:1a:91:15:2b:eb:7d:
         a1:5c:96:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:55 2025 by rpki-client