Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323132303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323132303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          utW0zqJnX97LSxUbd26ExgW1bW7PiBSQHuiTLxwf43o=
Subject key identifier:   9F:59:E7:68:C8:09:11:52:E6:D4:56:73:48:33:4B:80:DA:A2:2C:07
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       1B1492D64CA091B9FE3E702CB77B2E0B34D08D3E
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323132303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Sat 16 Aug 2025 17:45:00 +0000
ROA not before:           Sat 16 Aug 2025 17:40:00 +0000
ROA not after:            Sat 15 Aug 2026 17:45:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2120::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:92:d6:4c:a0:91:b9:fe:3e:70:2c:b7:7b:2e:0b:34:d0:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Aug 16 17:40:00 2025 GMT
            Not After : Aug 15 17:45:00 2026 GMT
        Subject: CN=9F59E768C8091152E6D4567348334B80DAA22C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:e5:79:8f:f1:06:1b:65:00:60:95:61:5f:
                    32:16:fc:f6:df:df:4e:ad:e9:51:7b:fe:c1:01:d1:
                    0f:f2:7d:e0:cb:83:8d:6d:4a:e7:fc:49:a2:ce:5e:
                    b0:a8:2b:1c:31:e3:c4:86:04:d4:29:7e:41:8b:2a:
                    f8:51:f8:82:96:74:5f:fd:2a:20:b3:7b:ea:fe:c8:
                    68:8a:71:23:bc:07:45:28:30:c3:6b:8b:0a:17:35:
                    2e:c4:50:df:7b:11:d0:4b:41:c0:dd:02:83:46:4b:
                    ef:5b:0d:c1:a9:61:7b:06:b3:c5:4f:fe:36:ff:6d:
                    68:ea:4d:a1:78:3e:be:1e:5e:c6:05:1f:a8:1b:20:
                    5f:6f:9a:68:4c:38:e6:68:34:a9:ea:d7:2b:7e:a4:
                    b1:fb:c3:f1:45:f2:38:a7:5e:42:58:d4:7c:82:77:
                    99:b9:e3:20:ee:ca:2e:79:ae:a4:74:41:12:72:36:
                    f4:a2:65:3c:5e:51:94:b5:c7:5c:0e:74:27:19:95:
                    3b:f2:73:6d:8e:71:61:3f:28:72:57:a5:ad:a6:5a:
                    e2:ee:31:ed:86:d3:b6:74:9e:4f:ad:22:b1:c2:a5:
                    bf:9f:1b:ff:8c:bc:bf:ff:23:ea:8b:69:12:79:ea:
                    cd:3f:f8:39:d4:b5:56:80:76:10:33:de:fb:34:3b:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:E7:68:C8:09:11:52:E6:D4:56:73:48:33:4B:80:DA:A2:2C:07
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323132303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2120::/43

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:ca:54:a6:21:96:9b:fc:6e:a6:46:26:c5:71:73:a0:c0:
         98:b6:8e:2c:e6:7c:99:e4:ba:14:6e:61:53:9d:37:30:0a:33:
         dc:a2:57:e7:a1:64:93:bc:3f:d0:e5:d8:42:1d:76:f6:9a:16:
         07:89:da:da:b6:8d:4b:f6:ec:82:e5:dc:75:c6:85:d3:f2:b8:
         41:e4:41:61:58:8d:a2:d5:e6:32:95:19:d1:34:bd:4c:76:d1:
         38:03:5f:c3:8f:70:1e:c8:b3:11:78:80:d4:f8:b3:a7:5f:52:
         cb:1b:0f:fe:84:2b:2b:4a:e5:77:d1:82:69:da:c6:9c:d2:44:
         0a:2d:df:d7:c1:65:b7:08:56:6b:c7:5a:a5:a5:d2:77:8f:d4:
         ca:a7:3c:5e:85:da:d2:31:ad:19:4e:3a:0d:b6:eb:cc:c0:de:
         26:86:f9:c8:95:85:de:fe:33:56:0f:d4:59:88:ad:c2:88:be:
         3f:b1:24:2c:62:d6:e6:28:7b:f5:5c:f8:6b:4f:29:69:41:90:
         0b:a9:ca:8e:58:56:62:b9:9f:07:4b:02:fa:30:4a:be:c4:e2:
         f5:c5:fb:78:53:85:8b:94:f6:b1:d1:3f:24:1c:22:2e:2f:10:
         a6:41:5d:63:b7:09:10:3c:c4:0b:e6:86:ed:e8:f2:fa:f7:9c:
         f4:3b:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:01:54 2025 by rpki-client