Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          /J6cSwbqcCnDKCZF51ukuLhrR+79OdE7pYcTNBRh/Yc=
Subject key identifier:   4D:8A:18:90:8D:1D:59:54:B7:78:6B:E6:2B:16:41:04:81:3E:9C:0D
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       6FBB7508719F4449600CED3659756781E31C6CC9
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 05 Jun 2025 20:21:04 +0000
ROA not before:           Thu 05 Jun 2025 20:16:04 +0000
ROA not after:            Thu 04 Jun 2026 20:21:04 +0000
asID:                     273068
IP address blocks:        2803:b790:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 04:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bb:75:08:71:9f:44:49:60:0c:ed:36:59:75:67:81:e3:1c:6c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jun  5 20:16:04 2025 GMT
            Not After : Jun  4 20:21:04 2026 GMT
        Subject: CN=4D8A18908D1D5954B7786BE62B164104813E9C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:e1:ae:d0:14:ba:95:5a:b5:e4:2f:b1:42:
                    0e:5c:dd:72:2a:30:64:44:b5:86:66:48:1b:2b:98:
                    ee:6f:67:12:8c:2a:29:dd:8e:8c:5d:83:0a:a2:5e:
                    a2:5e:38:9b:6d:30:80:72:80:6b:fc:f8:83:95:b8:
                    84:2f:7f:7c:ae:84:aa:ef:9a:0a:c0:1e:cb:e2:f3:
                    30:eb:33:ae:de:a4:ba:17:a5:18:6b:dc:b0:93:a8:
                    ce:16:a3:f8:d0:d7:87:ad:26:9a:e0:b5:19:65:38:
                    a1:ec:ac:c9:0b:a1:29:28:36:08:76:5d:2a:1a:a8:
                    a1:0d:da:e8:c5:1b:3f:59:90:6f:ef:ce:67:25:48:
                    27:b7:71:44:90:16:33:1e:08:a5:95:75:89:99:05:
                    b1:eb:c2:10:28:99:51:83:44:13:1a:2e:c9:fa:bb:
                    d2:77:b1:fa:3e:70:69:38:eb:2e:dd:fd:34:03:24:
                    fc:cf:e0:62:05:dc:fb:76:f8:cf:e1:ac:b4:da:e2:
                    11:ad:cc:92:1e:34:32:df:c3:f4:e4:c4:83:bd:f3:
                    97:8a:c2:07:a3:56:e9:69:5d:20:98:bd:d8:50:ea:
                    69:ec:df:82:44:7b:08:50:8b:9c:c4:68:b1:ac:bb:
                    3b:ea:da:60:06:97:3c:b9:1c:5a:d0:cf:b5:18:a6:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:18:90:8D:1D:59:54:B7:78:6B:E6:2B:16:41:04:81:3E:9C:0D
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:f9:34:05:f1:ee:de:49:b9:ad:fe:1d:57:1e:df:67:50:
         c0:4f:49:1d:b9:94:7d:d7:19:73:6d:33:e7:da:fe:08:de:68:
         a4:e0:85:bb:c3:6e:35:b1:af:76:77:d1:5a:0f:7c:90:d0:e9:
         e4:ce:e9:91:44:b1:73:34:5f:89:40:75:f8:d6:e7:52:3c:70:
         cc:73:d4:5e:49:d0:db:fd:8e:b9:1f:b4:5e:15:4d:66:20:a8:
         d7:02:10:15:bf:e0:c4:f7:e1:5e:c9:96:e8:d5:3d:6a:76:3e:
         ea:e4:82:bc:3d:f8:c8:b5:60:a0:5b:de:26:54:e4:d8:36:d4:
         26:3e:5f:81:7e:b5:b9:02:a4:32:64:cf:70:47:0a:43:5e:d6:
         6d:dd:86:46:ad:c9:c1:ab:a1:f5:76:d2:ad:ba:b4:61:4b:aa:
         a8:c8:9c:02:54:b4:eb:b8:91:97:d1:d8:22:4d:c1:24:d6:60:
         cf:b5:cf:34:b7:8c:e4:5d:93:2f:17:c4:d0:42:a8:5b:ee:0d:
         7d:20:f2:ce:43:48:6a:a5:c3:db:dc:3a:53:01:f8:6c:6e:7d:
         07:34:70:25:fc:bf:bd:f6:14:94:08:b4:21:44:d2:99:38:9e:
         b3:cc:7b:4d:e9:c4:8e:14:ee:ed:2f:eb:cb:d8:a5:87:62:04:
         7e:49:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:39:24 2025 by rpki-client