Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3438203d3e20323733313438.roa
File:                     323830333a396335303a3a2f33322d3438203d3e20323733313438.roa (raw, json)
Hash identifier:          +DDFwmPuK7R+vy9vLkKqcDz1z9s2v3tnj3f8cYloVbE=
Subject key identifier:   57:D0:53:B8:5E:E1:F2:BC:5C:D1:AA:9B:B7:34:72:77:D4:2A:65:AB
Certificate issuer:       /CN=D11050469F1A1FAEF7D47A0EB215D99DB1F18725
Certificate serial:       1EFE0BF70B782F602D02312E8A2C4CA017388363
Authority key identifier: D1:10:50:46:9F:1A:1F:AE:F7:D4:7A:0E:B2:15:D9:9D:B1:F1:87:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3438203d3e20323733313438.roa
Signing time:             Mon 11 Aug 2025 01:25:00 +0000
ROA not before:           Mon 11 Aug 2025 01:20:00 +0000
ROA not after:            Mon 10 Aug 2026 01:25:00 +0000
asID:                     273148
IP address blocks:        2803:9c50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fe:0b:f7:0b:78:2f:60:2d:02:31:2e:8a:2c:4c:a0:17:38:83:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11050469F1A1FAEF7D47A0EB215D99DB1F18725
        Validity
            Not Before: Aug 11 01:20:00 2025 GMT
            Not After : Aug 10 01:25:00 2026 GMT
        Subject: CN=57D053B85EE1F2BC5CD1AA9BB7347277D42A65AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:3c:10:53:b6:5b:5c:17:12:a5:52:c2:9a:
                    49:79:c5:fc:00:04:11:b6:a3:91:1c:98:e8:c0:c2:
                    a2:13:65:0c:8b:1f:bc:61:99:82:8c:4e:63:e5:d0:
                    ca:b6:3f:83:8a:17:84:6d:d7:e5:8e:f6:0f:f4:d1:
                    64:c8:77:52:f6:28:b8:66:2a:01:02:46:67:ab:fd:
                    1d:05:7b:9a:59:9c:08:23:fe:3d:0c:a7:cc:17:4c:
                    b1:52:ad:26:45:41:64:3b:ea:02:ed:f1:91:46:34:
                    08:b0:3c:f6:4c:57:35:2f:f5:03:08:08:a0:47:ef:
                    76:2d:19:50:9a:a0:6c:75:e4:58:07:79:f5:70:a2:
                    69:e5:f8:f6:79:76:2f:90:c0:39:d6:fd:0e:2b:b9:
                    87:76:b7:58:ee:9a:eb:a1:5a:5e:7b:e5:f2:ae:2c:
                    e6:4d:32:00:3e:9d:eb:50:9e:55:a0:33:9e:98:8e:
                    c3:48:f7:4c:af:e5:a2:47:de:d2:0b:b6:80:c3:05:
                    68:da:ec:64:b3:dd:21:fc:78:d4:99:d0:bf:eb:69:
                    1b:a9:03:80:95:b5:83:a2:02:53:d8:7b:05:a8:72:
                    c9:c3:0d:f1:60:be:49:c7:37:cf:a6:9a:c7:07:36:
                    b5:c2:a6:46:3d:ce:2e:d4:99:36:b2:a7:61:b1:0f:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:53:B8:5E:E1:F2:BC:5C:D1:AA:9B:B7:34:72:77:D4:2A:65:AB
            X509v3 Authority Key Identifier:
                keyid:D1:10:50:46:9F:1A:1F:AE:F7:D4:7A:0E:B2:15:D9:9D:B1:F1:87:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3438203d3e20323733313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:ab:45:5a:49:73:6d:94:76:21:aa:8a:ed:a8:da:41:85:
         dd:11:14:34:07:5f:66:56:3f:a8:de:04:ee:8b:4d:2c:1e:aa:
         35:e9:87:9f:3b:2d:85:ba:03:ca:89:1b:69:6c:9a:56:cb:b1:
         38:e4:ae:9a:3d:64:c3:41:27:8d:42:e9:49:e0:2c:41:bc:17:
         3a:21:9a:2d:ea:05:b2:f2:15:13:2d:88:4e:d7:37:fb:1d:91:
         0e:ca:4a:0c:8c:aa:be:7a:4a:35:2b:34:1f:3e:b4:fe:64:a4:
         e8:ee:47:2a:7a:46:dd:15:55:48:af:1f:b2:0d:a1:97:b2:2e:
         98:b4:76:ab:d0:f0:35:d4:44:e1:a0:ed:8c:10:28:2c:81:f2:
         57:a1:5b:cd:7f:32:96:af:b1:aa:84:8f:a5:f0:b4:25:f6:8f:
         9a:f5:41:32:26:50:6f:94:1a:fe:2d:56:f5:28:a7:5c:b3:1d:
         f5:55:83:16:87:23:89:d9:4c:5d:22:aa:79:c2:4e:4f:9c:95:
         a4:9c:fd:7a:15:83:50:ed:41:a1:8f:2b:0c:cf:21:df:77:0a:
         32:21:4c:8e:ed:cb:55:bd:8d:71:2e:7f:d1:ae:54:cb:f5:06:
         22:36:68:b2:25:1a:c6:72:54:77:31:01:b8:76:bb:58:75:80:
         d3:46:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:06:02 2025 by rpki-client