Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/323830333a393638303a3a2f33322d3438203d3e20323633323336.roa
File:                     323830333a393638303a3a2f33322d3438203d3e20323633323336.roa (raw, json)
Hash identifier:          yqjl2PDNf3W5bnPrhD0OYbRI/nhvWoEAaSMH5BalVnA=
Subject key identifier:   63:FB:F4:98:FF:C0:E9:10:57:1B:03:7F:2D:6C:94:CD:EA:F2:1A:D3
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       28549205F3F841DC930ADB692EA6D8D688048ACF
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/323830333a393638303a3a2f33322d3438203d3e20323633323336.roa
Signing time:             Thu 12 Jun 2025 22:22:00 +0000
ROA not before:           Thu 12 Jun 2025 22:17:00 +0000
ROA not after:            Thu 11 Jun 2026 22:22:00 +0000
asID:                     263236
IP address blocks:        2803:9680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 20:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:54:92:05:f3:f8:41:dc:93:0a:db:69:2e:a6:d8:d6:88:04:8a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Jun 12 22:17:00 2025 GMT
            Not After : Jun 11 22:22:00 2026 GMT
        Subject: CN=63FBF498FFC0E910571B037F2D6C94CDEAF21AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:8b:51:e1:9b:b7:57:29:e1:4d:8c:3c:41:
                    f4:ae:a3:d2:c2:b9:ee:95:16:ae:be:4f:1e:66:1d:
                    88:3d:24:1c:88:af:eb:5d:cf:af:b3:b4:0d:4a:b6:
                    39:d2:98:26:28:99:a4:13:bb:ff:13:1a:a1:1c:eb:
                    03:ec:5d:33:0c:9b:a9:09:9e:52:8f:20:5e:9c:d0:
                    cd:0e:d4:bf:19:11:0a:07:52:e9:f6:94:35:8a:70:
                    c9:f3:12:0e:82:68:89:a4:94:bb:a6:7c:7c:dd:d2:
                    c5:bf:b9:a8:a1:2c:a7:0a:11:8b:1c:6a:11:08:c4:
                    0f:4c:83:11:98:ee:cb:74:8f:25:62:40:76:7e:a1:
                    2a:dc:45:17:d6:98:39:b1:3f:79:06:de:c2:72:47:
                    a7:1a:68:07:39:27:11:01:2c:0c:43:8b:8e:5a:94:
                    df:ca:0a:e6:bb:43:32:21:45:44:06:21:c1:f2:7e:
                    f9:96:40:66:20:db:61:52:77:71:c0:01:97:de:27:
                    1f:93:49:dd:11:b9:3a:6e:1a:3a:ad:e1:35:8c:67:
                    f3:fb:26:36:2d:d1:32:29:0e:19:81:d2:8e:5d:3f:
                    15:8e:73:1d:1e:f8:a5:21:cc:53:1d:23:38:de:bb:
                    95:12:91:06:52:53:62:c6:41:26:f9:f5:0f:75:e4:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:F4:98:FF:C0:E9:10:57:1B:03:7F:2D:6C:94:CD:EA:F2:1A:D3
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/323830333a393638303a3a2f33322d3438203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9680::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:c7:b7:00:73:3e:34:03:0e:a5:1f:92:cb:ba:ac:f4:46:
         f8:c0:44:60:73:9c:ec:53:da:fc:2f:80:4b:a7:1c:7c:07:11:
         20:f0:38:17:5d:10:96:ae:40:37:ae:25:1c:1e:cf:1c:e5:4c:
         26:de:d3:da:90:b1:7f:d0:16:52:e1:c6:f9:b1:9e:db:e0:0a:
         e1:a7:f8:1c:23:a7:60:4f:5c:6f:98:f6:c9:00:d6:e1:b3:3e:
         1c:4b:b4:01:33:da:f4:e4:7c:24:a3:f4:50:22:ee:53:6b:d2:
         bf:86:96:42:26:53:a7:7b:1f:fa:37:65:bb:c7:5e:b0:71:04:
         a9:ca:9a:b5:c4:9a:8b:f6:9a:f7:fc:30:73:53:21:21:62:87:
         17:09:83:23:fc:7b:29:b1:5a:ba:f6:51:84:ea:44:04:b0:29:
         b3:3d:5c:a3:36:79:8d:7b:74:fa:99:15:74:51:b7:4e:9c:41:
         d6:cf:59:f0:4f:56:4d:a0:d3:19:b1:bb:0a:58:d1:f2:9a:20:
         38:61:2b:8c:e1:f2:af:0d:5e:95:ce:98:8a:37:c4:c0:80:6f:
         9a:82:7f:f3:3e:8e:e8:04:ab:16:48:c9:d5:e6:bb:cd:b1:25:
         d4:e7:62:5e:08:1d:55:ba:ef:af:d8:7e:5e:c7:be:20:15:f5:
         91:3f:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:47:33 2025 by rpki-client