Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa
File:                     323830333a393063303a3a2f33322d3438203d3e20323634373637.roa (raw, json)
Hash identifier:          NK/ty4wjW4QlNnyz49Rh9YRxjb6MCfRMrVDvKJ6IOiY=
Subject key identifier:   D2:01:47:F8:B4:C5:AD:5B:61:29:5C:0E:D1:0E:41:BA:DC:29:87:AE
Certificate issuer:       /CN=DAF4891978146B0CD7A7F84B2A82824830B88416
Certificate serial:       075C72FEE55C9C00C70D7C19FCE6BFD94297CF85
Authority key identifier: DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa
Signing time:             Tue 19 Aug 2025 22:40:19 +0000
ROA not before:           Tue 19 Aug 2025 22:35:19 +0000
ROA not after:            Tue 18 Aug 2026 22:40:19 +0000
asID:                     264767
IP address blocks:        2803:90c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 05:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:72:fe:e5:5c:9c:00:c7:0d:7c:19:fc:e6:bf:d9:42:97:cf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF4891978146B0CD7A7F84B2A82824830B88416
        Validity
            Not Before: Aug 19 22:35:19 2025 GMT
            Not After : Aug 18 22:40:19 2026 GMT
        Subject: CN=D20147F8B4C5AD5B61295C0ED10E41BADC2987AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:b8:b9:ab:2e:81:e5:f6:85:d1:b3:92:79:
                    2b:16:85:1b:1e:0d:5d:6b:7f:52:70:57:da:0d:c8:
                    0f:61:b4:d9:50:50:76:f6:0c:5f:21:19:e9:ea:fa:
                    78:2c:05:f4:87:c3:f7:61:ea:9c:32:21:53:2a:1f:
                    88:bd:fc:d8:ee:70:b8:bb:10:a0:40:5e:9d:3d:67:
                    87:54:21:3f:49:37:69:3a:9c:7f:16:f7:eb:b6:8e:
                    f4:15:2c:40:b5:b7:97:90:d9:59:db:34:c5:f3:4f:
                    4f:df:51:53:47:a0:24:61:a5:2f:f0:33:9d:30:aa:
                    73:de:da:84:4e:74:e0:c2:a9:af:57:58:e7:10:ca:
                    a1:96:a9:1f:c5:be:d1:78:63:cf:8b:a7:bb:ca:a9:
                    51:04:a0:4a:d4:4b:d2:fd:a1:bc:da:8c:66:dc:03:
                    33:9b:c5:28:09:a8:64:bc:3b:86:a9:13:9d:20:bf:
                    be:07:a4:ce:24:9c:7a:96:88:ff:ae:56:3f:5c:67:
                    c9:6d:9b:13:5d:71:05:d3:90:86:96:ff:28:5f:2c:
                    f5:53:6c:19:9a:36:b4:5c:33:41:ad:15:31:7d:52:
                    d3:8f:12:56:bf:ce:4b:88:8d:6f:60:1c:ef:d1:35:
                    02:47:c7:13:1c:5c:f7:4d:04:43:15:cc:49:4c:4b:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:47:F8:B4:C5:AD:5B:61:29:5C:0E:D1:0E:41:BA:DC:29:87:AE
            X509v3 Authority Key Identifier:
                keyid:DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:90c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:f3:b0:ab:44:ab:71:48:1e:fa:53:63:db:ba:9a:01:6d:
         88:dc:ce:8f:8d:bc:c1:1d:0e:15:5f:ed:ee:10:19:56:39:dc:
         72:61:b8:c9:44:9c:22:18:bd:e4:25:6b:d3:2d:3f:be:64:f7:
         6f:68:40:56:e4:6b:a9:61:5f:64:b6:7b:cc:83:1f:15:e9:80:
         e6:e6:ea:eb:c5:83:5c:de:86:25:e3:bd:c6:82:e3:62:95:03:
         f4:f4:3e:c7:20:28:27:26:0d:68:db:1b:a5:32:b3:94:db:19:
         a2:56:9d:1b:4c:4a:2e:92:40:b7:05:46:9d:bc:20:4d:b2:01:
         c5:b1:1d:38:7e:e4:ea:bd:3c:ee:1a:a1:54:c2:31:bf:7d:4a:
         fd:52:2f:cb:25:42:8b:74:68:95:c3:04:1c:af:56:a1:8d:d9:
         8a:da:38:13:9b:f3:be:fe:9f:f5:4d:e9:13:1f:46:24:f3:6e:
         0e:45:95:83:ed:42:be:35:f4:d5:78:7c:11:48:23:5c:01:3a:
         c5:12:10:51:df:99:62:af:d4:07:df:ca:1e:08:a1:85:04:a2:
         6c:6d:37:6f:99:f3:6b:32:7a:47:32:40:d7:2a:6a:c0:47:47:
         86:7e:8a:be:f2:e6:f5:06:78:a8:0c:27:4e:c7:2b:90:2c:49:
         1c:ed:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:58 2025 by rpki-client