Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa
File:                     323830333a376435303a3a2f33322d3332203d3e20323733383739.roa (raw, json)
Hash identifier:          gzSC2D7O692wiyR6GMXy+7RzrosHCQ5eG9qU0D/BQhI=
Subject key identifier:   1C:1E:A2:CF:8D:0A:A4:BB:C8:33:12:40:49:01:21:6E:B9:6E:E3:DD
Certificate issuer:       /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial:       401BE7BCD6ACBB3C1C0445D417DEA67776CBD301
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa
Signing time:             Wed 13 Aug 2025 23:20:00 +0000
ROA not before:           Wed 13 Aug 2025 23:15:00 +0000
ROA not after:            Wed 12 Aug 2026 23:20:00 +0000
asID:                     273879
IP address blocks:        2803:7d50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1b:e7:bc:d6:ac:bb:3c:1c:04:45:d4:17:de:a6:77:76:cb:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
        Validity
            Not Before: Aug 13 23:15:00 2025 GMT
            Not After : Aug 12 23:20:00 2026 GMT
        Subject: CN=1C1EA2CF8D0AA4BBC83312404901216EB96EE3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:86:75:09:4b:3b:06:9c:b6:5e:db:e1:e9:
                    f3:89:11:f9:43:bb:60:87:5c:21:9a:d2:32:c7:30:
                    50:cf:85:e8:f7:22:57:71:b0:9e:d3:f4:c0:5c:5d:
                    66:be:09:28:14:74:81:6c:de:00:55:cd:e8:eb:a4:
                    a7:da:dc:7e:0a:29:fd:a9:f4:b3:c3:91:be:66:4c:
                    31:67:a5:1b:ae:bb:a1:7d:65:7c:01:4e:9a:17:fa:
                    82:db:5c:5e:ad:7b:77:67:3e:75:34:d3:7e:d6:4e:
                    7c:8f:46:40:fd:bb:36:6e:50:33:80:0c:2b:d3:3e:
                    34:28:58:9f:5d:91:dc:2a:1a:99:f7:c5:b0:7d:a5:
                    e6:be:b0:ad:1e:26:41:e5:57:68:ce:74:fe:1b:4d:
                    1e:0c:00:b8:d3:0d:9c:f3:30:ab:0f:e5:08:bc:e9:
                    21:d6:40:d2:92:3e:75:fa:af:91:ae:6d:9d:d3:f7:
                    4a:cb:4c:ba:f8:4c:c1:93:52:48:bc:11:77:58:b7:
                    0e:68:58:79:e7:85:69:bc:e1:01:9e:77:0f:a6:a2:
                    f3:0c:3d:64:ce:49:ca:43:bc:58:4d:23:72:c4:96:
                    5d:b0:41:20:0e:e0:da:a4:52:71:94:3a:38:9b:30:
                    c7:14:69:e1:8f:97:ed:e4:21:16:50:c9:cb:13:2b:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:A2:CF:8D:0A:A4:BB:C8:33:12:40:49:01:21:6E:B9:6E:E3:DD
            X509v3 Authority Key Identifier:
                keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/323830333a376435303a3a2f33322d3332203d3e20323733383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:ac:60:d9:89:28:1a:f7:65:78:e3:0c:3b:e4:7b:1f:81:
         b3:c4:69:46:2a:0d:09:e0:44:74:a1:0d:a4:23:b6:0e:b7:2e:
         ef:fc:a4:13:ef:11:92:f6:26:5a:fe:f0:66:ae:b8:36:04:70:
         1d:b0:c3:d4:22:e9:1c:1c:74:dd:fd:f9:c9:ad:62:c0:58:5a:
         c8:0b:d1:03:15:78:2f:3c:5a:cd:d3:70:32:86:8c:c3:04:90:
         fb:9d:ed:e6:27:a9:49:01:5e:50:d2:68:53:16:ce:c1:bc:46:
         c7:fd:c5:83:82:31:81:de:54:9b:61:12:96:1c:81:d0:de:8b:
         c7:06:bd:8f:54:0f:e1:b2:f0:3b:fd:d6:01:2c:27:d3:c9:a9:
         d6:7b:d7:5a:61:b6:52:63:7e:1c:fa:a0:00:b4:07:e2:1d:e8:
         d2:80:ad:13:d4:8d:f9:ef:58:42:33:9a:ae:85:90:84:8c:2d:
         ef:52:68:b0:92:d8:e8:5e:a2:42:61:e8:21:c2:5d:73:bb:4f:
         64:36:ae:5c:0b:a3:a2:7f:54:b6:63:e8:58:69:97:95:b7:65:
         80:b4:19:a9:a9:65:7a:a6:82:7a:1b:3d:56:58:1b:39:5c:be:
         3b:2b:44:94:a8:08:70:0c:50:33:80:cc:65:0e:6d:fe:0d:e3:
         ed:d6:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:08 2025 by rpki-client