Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/323830333a336464303a3a2f33322d3438203d3e20323734313936.roa
File:                     323830333a336464303a3a2f33322d3438203d3e20323734313936.roa (raw, json)
Hash identifier:          bl597jA0ivQpnrHny3lAmAIzHbVTOZK+M1MezeOjBZY=
Subject key identifier:   E6:5D:50:F2:65:58:13:AE:26:D7:0F:70:D7:8D:04:E7:91:53:6B:86
Certificate issuer:       /CN=6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930
Certificate serial:       7814D6980399D9872BD41AC14D2EEEAD1764B43D
Authority key identifier: 6A:D7:FC:7F:AE:B4:02:F6:B1:4B:CD:FA:54:EA:96:94:E7:41:69:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/323830333a336464303a3a2f33322d3438203d3e20323734313936.roa
Signing time:             Wed 24 Sep 2025 14:35:00 +0000
ROA not before:           Wed 24 Sep 2025 14:30:00 +0000
ROA not after:            Wed 23 Sep 2026 14:35:00 +0000
asID:                     274196
IP address blocks:        2803:3dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:d6:98:03:99:d9:87:2b:d4:1a:c1:4d:2e:ee:ad:17:64:b4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930
        Validity
            Not Before: Sep 24 14:30:00 2025 GMT
            Not After : Sep 23 14:35:00 2026 GMT
        Subject: CN=E65D50F2655813AE26D70F70D78D04E791536B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6d:3f:a1:14:95:4c:a9:90:df:ff:27:14:fc:
                    4b:f6:ab:f6:8d:47:76:cd:4b:60:dc:c0:66:40:e6:
                    41:5e:e4:2f:ac:56:6c:d2:9e:d3:8d:1f:3d:b7:f3:
                    de:18:f1:74:fa:31:da:b3:37:7a:d6:52:b2:8e:5b:
                    fc:b4:41:d3:5f:22:58:b8:ea:bc:b9:b2:bb:96:01:
                    62:55:89:c2:90:82:0b:8f:86:f2:8e:52:e9:22:db:
                    44:b0:36:1c:4b:f1:3d:92:79:78:6d:72:4a:45:9e:
                    53:e5:fe:31:a2:71:7f:6b:5f:3a:31:8b:24:c8:06:
                    25:5c:4c:3d:01:e7:f9:9a:7c:21:5d:d6:3e:e9:b6:
                    d3:83:7a:8c:db:58:e1:18:76:30:94:aa:9c:ec:48:
                    e4:d7:7c:2f:1d:8d:64:91:bd:65:83:7a:bd:b6:ad:
                    68:45:b1:29:35:76:12:ac:06:69:86:db:ad:bc:36:
                    48:f2:c1:1b:a1:53:d3:33:1b:9a:d3:fa:16:0d:11:
                    aa:e0:4b:f8:21:98:8b:d4:67:08:2a:7a:77:1b:3b:
                    7d:ae:2f:97:d7:23:12:3a:d3:1e:42:e4:46:55:bd:
                    9e:98:54:74:5d:4a:c7:f5:5d:c8:6d:92:8c:28:0b:
                    15:15:c0:1e:5d:17:5f:13:83:d4:fe:94:38:74:43:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5D:50:F2:65:58:13:AE:26:D7:0F:70:D7:8D:04:E7:91:53:6B:86
            X509v3 Authority Key Identifier:
                keyid:6A:D7:FC:7F:AE:B4:02:F6:B1:4B:CD:FA:54:EA:96:94:E7:41:69:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AD7FC7FAEB402F6B14BCDFA54EA9694E7416930.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B9D1399A524927CE09F82D9166DE0F6AFD3AC26FD4902D18DD236E604EF111/0/323830333a336464303a3a2f33322d3438203d3e20323734313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:ca:29:b1:f6:91:36:20:1f:72:65:3a:3c:2b:96:77:94:
         f8:e9:c8:f8:88:54:f3:a2:aa:fa:a6:a4:40:e8:0b:7f:1d:df:
         5d:a4:54:d1:c4:42:fc:e0:55:76:a8:40:bc:11:fc:49:95:51:
         9a:b4:0d:c7:51:8d:e8:a8:f7:90:79:69:ac:b3:89:2c:4c:97:
         f4:ea:ba:29:fa:82:e8:95:9f:92:f1:b8:bc:a6:fb:86:d6:d2:
         ec:38:d7:22:55:cd:f5:8b:e2:35:75:29:b4:9f:38:d5:4c:5d:
         34:77:97:bd:99:d4:e9:50:4a:89:c0:e9:87:7f:97:d7:13:71:
         bb:18:53:4b:54:a9:8e:2c:7b:18:e9:27:97:7d:7a:ae:35:39:
         70:44:74:61:8e:12:a6:8a:99:eb:8a:80:81:96:e7:bf:5c:04:
         9b:e6:0a:99:92:49:60:22:8b:30:c5:37:db:c9:1a:1f:a9:5c:
         6c:4b:0a:17:46:d1:f7:bc:4a:1a:5c:9e:f2:67:19:d6:ee:3d:
         b4:4a:8e:8d:45:44:e6:fb:52:50:f9:12:4a:5c:e3:a8:a2:10:
         37:37:55:0a:4a:eb:65:2c:50:9c:14:fc:e7:79:0a:a7:a0:84:
         bc:ec:2c:c8:f0:96:4e:37:b8:b7:bb:60:76:79:04:cc:ec:e4:
         c5:e7:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:23 2025 by rpki-client