Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3630303a3a2f34302d3430203d3e20323732383839.roa
File:                     323830333a383639303a3630303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier:          S+SH/2SNtrQopPwgWbCxa720QHEaB1fBhShlXrnhCIM=
Subject key identifier:   F9:A2:F1:5F:09:70:51:6F:9C:F3:1C:8C:EC:EF:5E:B1:E9:FB:10:8F
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       64172EAAE1A2A1CD61EEE858F0C3D1B2D9B7FB25
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3630303a3a2f34302d3430203d3e20323732383839.roa
Signing time:             Mon 15 Sep 2025 02:46:35 +0000
ROA not before:           Mon 15 Sep 2025 02:41:35 +0000
ROA not after:            Mon 14 Sep 2026 02:46:35 +0000
asID:                     272889
IP address blocks:        2803:8690:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:17:2e:aa:e1:a2:a1:cd:61:ee:e8:58:f0:c3:d1:b2:d9:b7:fb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Sep 15 02:41:35 2025 GMT
            Not After : Sep 14 02:46:35 2026 GMT
        Subject: CN=F9A2F15F0970516F9CF31C8CECEF5EB1E9FB108F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:90:f4:2a:28:b1:5b:c9:2d:3d:5b:a2:1b:
                    df:b7:50:1f:2b:7d:c3:91:74:b8:6c:ad:b6:c6:4b:
                    3b:57:c0:0a:71:d8:a5:f6:3b:23:91:5d:36:55:22:
                    bb:c7:b2:fe:0d:1c:2e:a8:6f:46:a1:55:36:31:5d:
                    61:e4:5c:36:3c:89:4e:a0:ef:16:a0:95:b5:22:b2:
                    6b:c6:4c:a8:11:a6:1b:35:28:06:1b:f6:4c:a1:26:
                    78:23:c9:e6:e2:37:52:17:82:ad:b5:4b:77:c7:a9:
                    ee:dc:b6:61:84:ee:91:44:2a:7d:cc:b2:70:6a:38:
                    61:d2:c8:af:3c:8d:08:a4:07:a8:a0:06:b0:7e:f0:
                    2e:9f:87:8d:be:a0:c7:d7:45:9f:ca:90:e1:6b:95:
                    e1:d1:af:8e:fa:f1:5b:aa:ea:27:a8:1c:2e:f2:c8:
                    54:7c:0c:05:33:88:c6:08:0b:93:aa:2b:3c:3b:df:
                    0b:c8:30:20:ed:dd:9c:af:98:36:ec:61:80:1b:66:
                    a4:f1:d9:93:b6:14:ae:b2:61:a6:14:c6:0f:e4:29:
                    10:4e:f7:8b:05:6e:dc:4a:49:f1:17:db:f3:f6:c5:
                    19:de:bd:aa:62:dc:49:80:06:f2:6d:d5:74:b5:88:
                    94:9c:6c:e5:f9:c3:51:d4:ea:d2:a9:ca:62:7e:a6:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A2:F1:5F:09:70:51:6F:9C:F3:1C:8C:EC:EF:5E:B1:E9:FB:10:8F
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3630303a3a2f34302d3430203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:75:7f:4b:52:76:73:71:8f:bf:07:e9:d9:53:7e:9e:b5:cb:
         49:54:1b:f9:3a:f5:74:f2:4f:4f:63:86:b8:2c:86:7a:39:37:
         e4:9d:ec:a6:66:c3:c2:fa:1f:aa:9b:96:b9:42:ec:e5:fe:9e:
         65:25:7b:28:59:b9:ac:c6:80:e2:de:90:c6:7b:71:b3:1f:11:
         48:a5:26:a4:92:6d:be:f6:9e:13:9a:a5:e2:8c:e6:99:f9:08:
         fc:ec:23:b5:71:ef:f9:b1:eb:8e:96:f4:a4:de:13:65:05:01:
         59:20:ec:c7:90:94:ca:9e:c0:ae:24:42:e6:7d:7e:87:59:06:
         7d:31:fd:a0:e5:8b:3f:19:15:9e:96:f0:14:dc:e9:e5:ee:91:
         21:2d:62:61:e6:d6:98:0b:07:9a:71:37:42:12:23:ca:1b:f6:
         76:15:a7:c2:54:51:d9:13:45:cd:7e:5d:b2:a7:60:57:dc:25:
         6e:c1:a0:d8:99:58:7a:cf:c1:66:ec:95:72:e0:20:b4:0c:85:
         08:0d:82:c7:b1:a3:0c:37:cf:a9:97:51:cd:cf:a6:88:36:d6:
         ae:9e:1b:42:14:9d:92:d5:c0:45:f1:cd:d5:86:9f:f2:4d:88:
         e7:f1:de:83:d8:55:ec:70:81:8f:47:f0:cd:4c:b3:92:3e:1e:
         f4:da:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:34 2025 by rpki-client