Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
File:                     323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier:          PqGhzofOlepNTxhXejcRX/OsF34FpdThZKyoDtU4Oc4=
Subject key identifier:   9B:7B:BE:A7:CE:D2:13:27:D4:8B:77:4E:76:A3:57:5B:E9:A7:A2:87
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       3D2EE13DA88A803279110D2886987EE8195EB2D4
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
Signing time:             Mon 15 Sep 2025 02:46:33 +0000
ROA not before:           Mon 15 Sep 2025 02:41:33 +0000
ROA not after:            Mon 14 Sep 2026 02:46:33 +0000
asID:                     272889
IP address blocks:        2803:8690:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2e:e1:3d:a8:8a:80:32:79:11:0d:28:86:98:7e:e8:19:5e:b2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Sep 15 02:41:33 2025 GMT
            Not After : Sep 14 02:46:33 2026 GMT
        Subject: CN=9B7BBEA7CED21327D48B774E76A3575BE9A7A287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:a3:3d:cb:7e:65:39:f7:d1:02:55:6a:98:
                    76:59:c0:89:b9:08:74:3b:e7:3a:b0:20:e4:55:d7:
                    43:7b:69:31:5c:7f:36:80:2a:59:6f:30:71:fd:d3:
                    9e:cc:64:4c:f7:95:08:bf:01:a2:65:56:72:f2:67:
                    0f:ab:0a:60:c7:70:96:cd:65:2b:2c:10:9e:85:0a:
                    5c:54:e2:71:19:42:60:b3:14:30:57:32:39:99:f8:
                    14:46:8f:60:48:6a:22:0f:41:87:eb:03:a1:95:94:
                    61:b7:b2:10:5a:a0:42:f4:23:67:75:19:44:fe:f3:
                    4b:cd:0d:19:05:46:d4:5d:ae:e1:d6:2c:56:ce:31:
                    37:64:8a:9c:2a:e0:96:f3:00:b9:df:97:e6:d6:0a:
                    07:3b:b3:f0:a3:fa:df:26:d3:d5:dc:1b:8a:60:c9:
                    7a:03:58:18:ee:b9:d9:a6:9d:af:b4:02:26:03:9c:
                    11:84:b3:29:9c:75:3e:8b:0c:fe:7b:9f:92:88:a4:
                    af:b4:ac:7d:f6:01:38:6e:de:38:a2:60:22:38:2f:
                    0c:e2:16:d3:16:21:13:3f:33:cc:4f:a7:71:0d:8d:
                    0e:c6:61:c5:b6:71:47:c7:e0:41:41:e7:30:89:a7:
                    40:ae:13:ec:71:20:79:63:70:14:0a:73:fb:a7:44:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:BE:A7:CE:D2:13:27:D4:8B:77:4E:76:A3:57:5B:E9:A7:A2:87
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:71:37:3c:fd:33:10:50:f1:c4:a9:fd:4b:d7:69:d5:17:25:
         fa:23:49:01:8f:73:20:69:f2:87:64:27:58:29:1a:60:35:4f:
         ec:f7:60:d2:8e:b8:c3:ff:13:3b:7a:72:3b:17:ba:47:30:3b:
         df:d8:74:f2:70:ad:7d:e8:6c:4a:68:a3:47:9f:ce:3c:a8:77:
         4d:1d:47:22:01:bf:8e:44:ec:0a:b6:cc:a1:06:b5:18:8e:0e:
         5f:57:c6:16:91:c4:71:78:af:4f:13:8c:b4:dc:04:b6:ba:05:
         56:bd:f7:bc:c0:c7:c1:38:59:55:fd:20:5c:43:17:b3:98:0d:
         22:4b:89:9c:5d:ba:7e:c8:43:59:22:9f:29:fc:4c:84:43:7e:
         f3:01:bd:ff:7f:74:54:ef:dc:70:38:b9:44:a7:01:5d:c4:b6:
         04:ee:bb:9d:63:2f:b2:4f:c7:e2:8f:9f:1a:c2:0e:8d:3c:11:
         98:26:1f:0f:a8:76:4f:57:06:21:09:b6:08:7b:13:21:d3:80:
         db:4a:e9:2b:78:b1:65:63:4f:f8:f9:db:8b:b6:db:a7:2d:dc:
         04:ef:f0:b5:e5:79:c7:fb:17:ed:2d:7f:0f:3f:33:0c:be:69:
         09:5c:7b:c5:8f:f8:40:df:33:7e:59:a1:36:7c:97:bb:83:f1:
         ad:16:88:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:20 2025 by rpki-client