Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f33322d3438203d3e20323732393938.roa
File:                     323830333a316439303a3a2f33322d3438203d3e20323732393938.roa (raw, json)
Hash identifier:          HI0xjNcfIoUOiz8YnR1DpnMVYS3m0Z5OnPWFUUrSsG0=
Subject key identifier:   67:93:E7:A9:F5:C2:40:98:BE:0B:B9:18:C2:07:4F:00:60:5F:AE:4C
Certificate issuer:       /CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
Certificate serial:       54C7E013A8A81BAA7548CEAD1A346D81B5E0EC21
Authority key identifier: 36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f33322d3438203d3e20323732393938.roa
Signing time:             Mon 11 Aug 2025 20:35:27 +0000
ROA not before:           Mon 11 Aug 2025 20:30:27 +0000
ROA not after:            Mon 10 Aug 2026 20:35:27 +0000
asID:                     272998
IP address blocks:        2803:1d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:e0:13:a8:a8:1b:aa:75:48:ce:ad:1a:34:6d:81:b5:e0:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
        Validity
            Not Before: Aug 11 20:30:27 2025 GMT
            Not After : Aug 10 20:35:27 2026 GMT
        Subject: CN=6793E7A9F5C24098BE0BB918C2074F00605FAE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:51:78:2a:44:fe:08:25:4e:b8:58:25:6c:
                    bc:2b:3c:80:e8:8c:77:b2:bc:d1:3e:67:ce:ab:13:
                    4b:f4:47:a9:d6:d9:ef:57:21:61:81:4e:cb:0c:ad:
                    f2:31:e1:70:de:18:3a:0d:ea:ea:b3:10:c8:55:51:
                    df:15:ca:12:fd:dd:83:a9:47:b4:65:ae:5f:26:c3:
                    fd:54:73:f7:9e:4c:92:05:a6:a4:ca:c4:01:bb:96:
                    52:8a:b9:14:00:c2:51:16:34:b2:e5:80:c6:11:82:
                    93:63:81:ab:2b:9d:c2:8d:fe:40:59:72:3b:8e:14:
                    d3:da:06:98:db:b6:c2:b0:cd:81:d9:02:61:0c:73:
                    c6:92:95:36:18:44:44:13:60:16:79:e5:58:34:2e:
                    e9:4b:01:9b:1e:5a:28:c7:8f:b6:a7:ad:8c:f3:9a:
                    3f:67:bb:e3:8f:29:f1:c3:8e:be:77:d7:7b:5b:35:
                    de:0f:24:53:74:6f:99:da:17:f9:84:5e:f4:ad:6e:
                    e8:57:72:0f:09:d3:8e:75:dc:0c:7a:ce:2e:50:ea:
                    a7:f6:35:88:07:78:17:ce:6f:26:4c:30:0d:0a:68:
                    7c:a0:14:86:2a:57:c4:d7:af:13:91:cb:31:8d:00:
                    52:0c:7e:34:a0:77:03:a0:ff:09:d1:f5:fc:20:bf:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:E7:A9:F5:C2:40:98:BE:0B:B9:18:C2:07:4F:00:60:5F:AE:4C
            X509v3 Authority Key Identifier:
                keyid:36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f33322d3438203d3e20323732393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:0b:89:1b:ff:a1:62:fb:53:b3:fd:6d:30:6b:d6:6b:ba:
         cc:49:e5:3a:62:2d:52:d5:c6:43:88:b6:ee:40:7c:3c:d0:31:
         cf:2c:f7:16:aa:e9:b7:27:36:5e:cc:e5:7d:8c:9e:31:09:00:
         da:5a:41:56:21:4e:b9:6d:37:16:39:8e:76:26:71:dc:02:8b:
         30:eb:45:ba:b0:6d:93:01:86:fd:df:9c:07:8b:d2:2c:72:6e:
         9e:e7:e1:7c:16:31:b3:a8:82:70:34:bf:70:d2:b1:ec:25:f9:
         ca:a4:42:10:25:6c:39:09:a5:cf:d7:32:6b:b9:68:4e:71:1e:
         30:70:f2:c1:ef:fe:28:12:a3:ab:0d:f8:34:4d:ab:6e:61:00:
         02:5e:57:d3:dd:45:ba:17:95:06:c7:4f:10:7a:88:53:7c:11:
         55:df:db:78:f1:4e:10:5e:ea:db:87:b4:2a:78:55:2a:fd:ce:
         15:b9:04:59:68:54:85:f6:74:50:30:a4:83:33:d0:87:02:b8:
         15:a3:d7:f0:13:89:58:ad:af:a1:72:0a:b8:21:19:f2:54:24:
         02:89:01:60:bc:69:b7:bf:6a:28:23:7f:96:aa:1d:ef:8c:07:
         c6:0d:b1:e1:3c:17:7a:d6:71:52:40:7e:68:a6:03:0b:30:55:
         0c:cf:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:13 2025 by rpki-client