Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa
File:                     323830333a663430303a3a2f33322d3438203d3e203230323939.roa (raw, json)
Hash identifier:          OUM0t0CoCk9C2damR1uYscKzT5X9cLMR6n6BDyguLL0=
Subject key identifier:   BF:6A:12:DB:4B:E9:B8:32:ED:1A:A6:73:33:90:DE:B9:C1:BA:81:0E
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       1FFB9EC2FEEDCE97111B250BB50889ED152179A1
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa
Signing time:             Mon 04 Aug 2025 15:20:00 +0000
ROA not before:           Mon 04 Aug 2025 15:15:00 +0000
ROA not after:            Mon 03 Aug 2026 15:20:00 +0000
asID:                     20299
IP address blocks:        2803:f400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fb:9e:c2:fe:ed:ce:97:11:1b:25:0b:b5:08:89:ed:15:21:79:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Aug  4 15:15:00 2025 GMT
            Not After : Aug  3 15:20:00 2026 GMT
        Subject: CN=BF6A12DB4BE9B832ED1AA6733390DEB9C1BA810E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:6a:cc:45:0a:4d:df:bc:13:83:71:88:be:
                    2a:55:28:56:75:8b:dd:4f:9d:cb:9c:79:e5:2f:f2:
                    9e:a9:b4:ee:a4:5c:3a:92:52:86:7d:ec:ad:66:04:
                    0e:b4:53:35:d1:33:3c:8d:4d:bd:e7:f1:85:17:3e:
                    bd:da:b0:1b:0d:0c:b9:aa:0f:f5:00:ff:b4:0c:22:
                    e8:2c:22:62:c8:cc:0b:92:12:75:3d:13:1c:eb:a1:
                    d4:c9:f9:df:fa:a8:84:fb:79:f7:bb:94:0d:3b:ff:
                    bf:ec:52:e1:e1:9c:fe:aa:20:94:12:e2:8f:00:b1:
                    fa:dd:cf:6e:67:24:e7:6b:be:79:a0:56:91:2a:48:
                    db:bc:89:f8:7f:c5:90:7f:c2:87:47:5a:2b:ac:6c:
                    d3:61:b8:a4:89:9f:6b:3a:1a:5d:33:06:82:ca:08:
                    32:fa:e4:a2:bd:cb:15:d1:75:35:95:93:aa:2a:2c:
                    be:04:5b:c9:36:84:db:31:78:9e:7a:3f:6b:e5:8f:
                    5d:6e:a2:68:0c:c7:1a:0c:8d:a8:40:5e:51:19:8b:
                    51:c0:ca:a8:67:10:98:21:db:a1:24:81:dd:84:8a:
                    55:39:ef:d0:88:ab:34:97:5a:ef:a3:8a:04:d5:0f:
                    99:21:81:f2:95:d0:03:fc:49:ca:e5:52:56:91:b0:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:12:DB:4B:E9:B8:32:ED:1A:A6:73:33:90:DE:B9:C1:BA:81:0E
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/323830333a663430303a3a2f33322d3438203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f400::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:4e:cb:32:c5:20:23:4b:57:c5:12:43:a6:16:ac:f9:be:
         01:be:09:2c:69:2c:b7:bb:ca:b0:88:c6:d3:c0:cf:48:11:50:
         8d:64:a0:db:66:a2:ba:62:98:1d:c8:7a:d2:c0:cb:f6:c8:4c:
         36:a1:86:2c:70:c0:3b:54:e7:d4:df:36:9a:60:64:95:01:d6:
         f6:95:7c:b5:d1:d2:0a:f6:23:31:6a:ab:d2:3b:a6:77:c1:09:
         b6:4c:9c:6e:60:3c:fd:07:c4:f2:a0:5c:11:27:9a:cc:19:01:
         4c:32:4c:93:67:e4:a0:4e:91:37:82:4a:af:20:65:ef:7e:9d:
         dd:84:08:60:c7:ef:e5:02:21:5a:42:85:83:a0:ed:a4:c4:e2:
         40:87:e6:3c:a5:57:f4:0c:c9:c7:e4:cf:25:bd:f4:c8:37:c8:
         08:d7:34:09:f9:d6:0b:7c:a4:48:05:89:e0:e6:56:17:bb:59:
         7c:e6:e4:f3:03:70:64:5b:09:62:f0:18:9d:2a:2d:22:20:71:
         43:c1:ad:e8:e2:2e:c7:43:82:6b:08:c3:7e:9d:f7:2f:10:75:
         d6:1a:4f:95:99:31:fd:3f:8a:49:0f:e8:9e:26:43:78:bc:15:
         32:5b:e8:a7:2c:78:d6:8f:41:4a:c2:48:7b:f6:a1:b0:8f:1c:
         05:e9:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:38:55 2025 by rpki-client