Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/323830333a353331303a3a2f33322d3634203d3e20323732303636.roa
File:                     323830333a353331303a3a2f33322d3634203d3e20323732303636.roa (raw, json)
Hash identifier:          VKerbUBEHxb2Yl9Xfo6zbeGipNqoC/Y49GHGUIK6TRM=
Subject key identifier:   6B:87:CB:E4:B5:00:CB:72:B3:85:5E:95:04:AB:80:40:0F:FB:40:4C
Certificate issuer:       /CN=F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08
Certificate serial:       764E968340CFB6CE35BDC2ADBCA7660A85A36221
Authority key identifier: F4:EB:3A:B2:FD:2A:99:C2:58:06:C4:CE:2D:BB:D9:A0:C7:4B:BB:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/323830333a353331303a3a2f33322d3634203d3e20323732303636.roa
Signing time:             Tue 07 Oct 2025 14:00:00 +0000
ROA not before:           Tue 07 Oct 2025 13:55:00 +0000
ROA not after:            Tue 06 Oct 2026 14:00:00 +0000
asID:                     272066
IP address blocks:        2803:5310::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 15:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4e:96:83:40:cf:b6:ce:35:bd:c2:ad:bc:a7:66:0a:85:a3:62:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08
        Validity
            Not Before: Oct  7 13:55:00 2025 GMT
            Not After : Oct  6 14:00:00 2026 GMT
        Subject: CN=6B87CBE4B500CB72B3855E9504AB80400FFB404C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:cf:79:98:81:4f:4a:93:ec:98:77:07:4c:
                    7f:66:d7:8e:e5:a3:a8:58:ca:4a:e1:01:2c:37:12:
                    6a:8d:55:af:76:38:0d:8f:0d:ae:50:d6:6b:75:be:
                    0b:d1:e0:ef:3f:f4:78:e9:57:a3:75:81:f8:be:f9:
                    7a:ae:65:2c:b9:88:8c:84:ec:fe:0c:73:f3:87:4c:
                    f9:22:e0:28:57:62:ff:f6:c1:01:91:3e:c7:97:c9:
                    fe:bd:b3:45:d4:18:7d:ac:cd:e7:d2:30:65:fb:44:
                    7d:97:99:1d:0f:c1:19:3b:0e:ec:21:3e:c7:a3:b4:
                    a2:92:3b:e2:69:fc:e1:55:15:22:9f:b3:71:b5:c2:
                    48:c7:20:96:2b:7e:c2:77:17:31:30:99:62:2b:82:
                    77:72:3d:a1:90:61:24:af:f9:6c:ae:b3:03:3c:b8:
                    01:a7:54:c0:fb:5a:36:c2:1d:66:fe:3a:4e:37:0c:
                    2f:75:f1:18:81:25:39:bf:a9:5c:9b:02:70:6c:c1:
                    c5:0f:03:eb:fc:a0:6f:f2:b1:d2:d5:1a:69:48:c6:
                    72:32:8d:d1:1e:0e:cc:0e:a0:e5:94:1e:e9:a2:2f:
                    a6:3d:7c:2d:cb:9f:59:23:f7:25:47:3e:d3:64:a9:
                    31:62:0f:22:b8:27:41:41:9a:d6:2b:3f:bb:3f:ab:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:CB:E4:B5:00:CB:72:B3:85:5E:95:04:AB:80:40:0F:FB:40:4C
            X509v3 Authority Key Identifier:
                keyid:F4:EB:3A:B2:FD:2A:99:C2:58:06:C4:CE:2D:BB:D9:A0:C7:4B:BB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/323830333a353331303a3a2f33322d3634203d3e20323732303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5310::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:b3:bb:8b:73:a1:74:e3:2f:4d:2f:00:55:a6:c7:e5:25:
         63:a7:cd:0e:70:89:40:d9:8a:0c:05:0a:47:97:60:bb:9a:1d:
         f9:de:9b:38:07:08:00:12:c1:f1:46:2a:c2:85:c9:d7:23:5d:
         9f:db:2a:5f:e3:4e:32:56:97:c3:8d:60:aa:28:ed:db:85:1e:
         e5:4e:ec:0d:e9:f7:3e:4c:89:2d:97:bc:35:11:2d:5d:4e:79:
         0a:43:90:1e:01:1b:a3:17:86:10:0a:3a:92:c9:cc:10:29:d7:
         f9:f1:a1:fe:2f:38:be:b9:2e:4e:2d:7f:1c:c1:9d:08:a5:21:
         27:14:e5:e9:cc:01:1c:79:3c:bc:ba:ea:04:e0:0b:b0:c9:61:
         fe:77:c6:e1:2d:d8:f5:c4:52:dd:07:a2:c1:cd:9e:01:9e:62:
         41:84:cf:47:f4:cc:3d:e4:08:4d:70:05:b3:ba:8b:4b:d9:4a:
         1e:a1:fd:7f:32:1d:12:0b:fa:f8:ae:b0:e2:eb:bb:7b:2b:33:
         18:a4:0c:97:02:70:06:5d:75:09:d2:e8:89:ad:2c:8f:85:e6:
         76:40:2c:6e:7a:04:b0:6f:31:d1:0a:1c:70:25:49:86:a6:74:
         ba:06:00:d1:69:b9:7d:cf:85:1e:0b:af:e7:45:e3:56:57:16:
         f9:1d:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:50 2025 by rpki-client