Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/323830333a663663303a3a2f33322d3438203d3e20323635363631.roa
File:                     323830333a663663303a3a2f33322d3438203d3e20323635363631.roa (raw, json)
Hash identifier:          +S23epnp3FDmUQsTpFpcWNWrENMUUT8KA7qUTo167Hw=
Subject key identifier:   F2:40:E5:E2:20:8A:52:6C:8E:D4:34:5B:D0:A9:F0:7C:4F:1B:BC:98
Certificate issuer:       /CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
Certificate serial:       15D26F56B947ED577D87F2CF83D917997A7087E2
Authority key identifier: 52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/323830333a663663303a3a2f33322d3438203d3e20323635363631.roa
Signing time:             Wed 18 Jun 2025 14:10:00 +0000
ROA not before:           Wed 18 Jun 2025 14:05:00 +0000
ROA not after:            Wed 17 Jun 2026 14:10:00 +0000
asID:                     265661
IP address blocks:        2803:f6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:6f:56:b9:47:ed:57:7d:87:f2:cf:83:d9:17:99:7a:70:87:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
        Validity
            Not Before: Jun 18 14:05:00 2025 GMT
            Not After : Jun 17 14:10:00 2026 GMT
        Subject: CN=F240E5E2208A526C8ED4345BD0A9F07C4F1BBC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:b0:6b:37:2e:81:00:4b:35:b3:6c:ba:c4:
                    b4:9a:ad:9a:b5:9d:c5:6c:38:74:4f:71:0b:10:f4:
                    66:9e:3a:18:22:60:a4:bc:06:b8:52:84:0e:a5:38:
                    fe:ae:a0:d9:86:3b:7d:8c:85:0b:01:40:16:30:4b:
                    b2:67:57:e4:e9:95:e4:3c:ec:cf:c5:d8:4a:a4:fa:
                    3b:2b:64:14:6d:68:71:9c:0b:4d:1a:51:a1:c7:47:
                    2f:a6:3a:74:a3:82:c2:cf:ff:1c:67:d9:ce:45:4a:
                    e7:4e:95:e2:dc:93:95:31:d0:99:72:b0:3f:be:4f:
                    5d:f8:07:7a:01:f0:54:5d:c3:86:15:34:ee:70:ed:
                    ae:8c:90:4f:3f:e5:91:68:17:f3:eb:c2:22:8f:2d:
                    2c:c4:f1:cd:27:39:b7:71:48:8b:d6:9a:b8:a2:39:
                    f3:46:b1:f3:d1:70:38:24:d8:83:4e:23:45:78:cc:
                    2e:37:7d:83:b6:51:34:6d:c8:17:53:6f:38:0a:00:
                    72:15:73:3d:e9:f4:39:ff:e6:6c:3c:e4:52:31:30:
                    71:a0:35:34:4b:d4:7c:cd:48:2f:d1:9d:d5:99:32:
                    4e:dc:21:fe:6a:bc:ed:72:ee:a6:ae:d4:d8:03:d1:
                    56:09:e6:39:d9:d2:9b:fc:77:dd:e5:28:38:28:65:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:E5:E2:20:8A:52:6C:8E:D4:34:5B:D0:A9:F0:7C:4F:1B:BC:98
            X509v3 Authority Key Identifier:
                keyid:52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/323830333a663663303a3a2f33322d3438203d3e20323635363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:64:ca:73:2d:9c:9e:b7:2b:b2:65:cc:5e:3e:a9:c2:57:46:
         cd:10:7d:dc:fc:9c:71:a0:02:3e:f8:94:fc:59:d6:10:4b:ee:
         51:90:83:d5:51:25:55:06:fb:7c:a3:dd:94:a6:54:81:4a:52:
         1f:93:d8:be:e7:75:c9:9b:3c:8f:e9:1e:99:c3:82:87:93:a1:
         61:11:a3:92:d6:0c:28:e6:1d:7d:fc:c1:10:29:1c:b9:47:ec:
         2f:fc:1f:4b:11:a7:4a:c6:c5:d0:62:be:ba:a0:ff:5a:a9:43:
         54:e7:6b:f4:8d:e6:38:1a:b3:12:6a:b5:c2:60:4e:73:80:bc:
         7c:64:d8:bd:99:7b:19:70:a9:6f:fe:1e:9e:b3:5d:06:e4:27:
         f7:c1:61:33:59:38:7b:7c:27:30:eb:36:7d:20:51:2c:67:22:
         aa:73:a4:c6:ea:e9:d9:f2:0e:4c:52:d7:5a:0c:a4:a0:22:d3:
         e7:92:85:38:68:ec:f5:2a:8e:c5:80:f0:0f:76:d3:47:35:36:
         3c:94:c5:b1:df:1b:7b:d0:1f:9a:f0:c0:5c:80:ee:8f:c7:99:
         a2:da:f1:24:3e:ce:10:a2:17:c1:84:64:bc:20:02:1b:49:f1:
         4b:7d:d5:52:a7:70:fc:12:ba:7b:7e:c8:40:9c:d8:2c:f7:15:
         31:d5:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:31:14 2025 by rpki-client