Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          e3S4ewKNFKulS9gmrWIHueWFwD+kptIaYIAkCqyF3i8=
Subject key identifier:   B4:91:18:DC:57:18:C8:3D:2C:5F:21:E3:14:8B:14:B0:6D:F9:77:44
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       4759F48F1D94DC399500C2CCC1763E460EA9AD1A
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Sun 03 Aug 2025 01:34:35 +0000
ROA not before:           Sun 03 Aug 2025 01:29:35 +0000
ROA not after:            Sun 02 Aug 2026 01:34:35 +0000
asID:                     64120
IP address blocks:        2803:f080:20a0::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 23:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:59:f4:8f:1d:94:dc:39:95:00:c2:cc:c1:76:3e:46:0e:a9:ad:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Aug  3 01:29:35 2025 GMT
            Not After : Aug  2 01:34:35 2026 GMT
        Subject: CN=B49118DC5718C83D2C5F21E3148B14B06DF97744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:ee:f5:55:c1:27:be:8d:51:dc:be:6e:cd:
                    7c:af:bb:41:ff:6c:25:e0:05:c7:ce:6c:0e:1f:8b:
                    12:f7:06:98:2d:15:19:c4:26:4d:39:f6:d6:c3:aa:
                    9e:ea:ab:65:a0:19:88:dc:9c:29:90:d1:79:22:99:
                    43:aa:6d:a5:7e:5b:d1:9c:a2:19:de:a9:2d:5f:ea:
                    47:f7:e3:40:09:22:52:29:c1:5d:27:c7:75:de:b7:
                    b9:0b:68:03:d5:69:71:a8:94:a0:da:90:83:52:da:
                    d0:5f:6d:1a:d0:2d:e6:b7:4e:70:40:21:4a:8c:6b:
                    c1:a2:ea:6f:2d:4c:ee:8e:74:72:5c:9b:cf:c8:b4:
                    3e:47:36:22:41:18:17:69:28:9f:00:41:6f:3b:44:
                    e3:aa:ed:5d:8c:d0:f6:e3:28:62:c9:d0:53:34:06:
                    f9:24:58:9b:a1:e5:e6:1f:c1:f8:c4:b6:44:55:8d:
                    26:a8:56:7e:34:51:56:14:a9:78:bf:73:c2:2c:7d:
                    39:4c:23:4b:9f:11:f1:38:0a:5b:7e:cb:39:6d:b2:
                    a0:10:fd:c5:ec:80:f3:08:48:38:e1:ee:ce:ed:7a:
                    5b:56:b7:14:2b:c1:90:5b:fa:7d:40:57:ed:57:6d:
                    0e:c4:dd:2c:27:66:14:50:3e:e5:42:bf:b2:29:18:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:91:18:DC:57:18:C8:3D:2C:5F:21:E3:14:8B:14:B0:6D:F9:77:44
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:20a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         38:35:21:64:2e:d8:33:1c:91:08:14:60:28:09:42:96:dc:d4:
         54:bb:f2:16:00:9b:d1:a0:98:c2:38:da:1e:5f:da:ce:3c:0a:
         1c:6e:ab:98:98:74:f0:69:47:1d:8f:7f:7b:63:47:1f:02:da:
         f5:be:ea:e0:be:ed:16:36:4b:37:1c:da:bb:66:96:3f:9c:aa:
         fe:eb:98:df:fb:80:1a:0c:fa:3c:e1:32:20:e0:d3:02:30:d5:
         81:bc:62:41:66:7c:8b:f2:56:3e:02:dc:50:42:57:24:89:79:
         19:1a:38:4a:d2:24:17:26:eb:6c:21:9c:bc:2f:46:ce:a2:58:
         ed:26:c2:41:9f:36:c9:74:7d:04:90:f9:fc:83:6a:82:ea:a1:
         c9:e1:e3:cc:a1:61:86:42:64:63:fd:5f:b4:4e:35:e8:43:3f:
         46:10:97:98:1e:cb:18:78:cb:d2:b9:1e:25:88:3d:8b:43:16:
         18:5c:74:cb:de:af:f7:88:83:9c:c3:f0:f4:76:65:dd:a0:65:
         6f:f1:24:4f:49:fd:6f:8a:85:18:7f:9a:a0:dc:57:6a:bb:3a:
         ff:12:e3:9d:fd:e7:e3:70:5b:0d:0d:e7:98:81:60:51:cf:9d:
         ed:03:8b:ee:07:68:4f:df:1b:f6:81:79:26:14:b6:ef:b8:be:
         4a:9d:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:14 2025 by rpki-client