Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa
File:                     323830333a656334303a3a2f33322d3438203d3e20323633373932.roa (raw, json)
Hash identifier:          hIxH3bGG04NAQNDIKwdtq6eae8vKsZYDnn3ejPtCA1w=
Subject key identifier:   0E:08:D6:E7:5A:B7:EA:35:FA:BD:D6:E7:FD:BF:42:8B:9D:D1:29:09
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       6243E9D06EC409AABF45EE86CFB2288559D6A650
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa
Signing time:             Wed 11 Jun 2025 15:21:43 +0000
ROA not before:           Wed 11 Jun 2025 15:16:43 +0000
ROA not after:            Wed 10 Jun 2026 15:21:43 +0000
asID:                     263792
IP address blocks:        2803:ec40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:43:e9:d0:6e:c4:09:aa:bf:45:ee:86:cf:b2:28:85:59:d6:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Jun 11 15:16:43 2025 GMT
            Not After : Jun 10 15:21:43 2026 GMT
        Subject: CN=0E08D6E75AB7EA35FABDD6E7FDBF428B9DD12909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:1c:94:2d:c8:30:3a:3a:21:e1:8e:43:04:
                    bb:5e:f0:87:c8:e6:8e:27:50:6c:fc:00:17:96:95:
                    12:40:14:dd:98:4e:bd:8e:8e:3d:f7:2d:9d:dc:bc:
                    dd:7d:fb:35:7c:aa:f9:e0:cd:99:6a:04:5c:6e:e4:
                    05:8a:17:81:02:24:c3:39:36:a1:d8:88:1b:9d:f0:
                    ec:6b:ac:b5:95:d0:25:7e:51:0a:dc:00:ef:81:80:
                    a0:67:a1:8f:27:fd:72:6b:70:73:3b:ab:e0:7c:b6:
                    64:3f:67:45:41:1d:4b:91:43:80:12:63:af:27:81:
                    dd:f5:3b:b9:26:d2:4f:83:92:c4:bc:61:3f:45:f9:
                    08:70:7c:0a:24:c0:0b:49:0a:5b:d6:ce:4c:a1:65:
                    e5:85:2d:3b:b7:c0:a0:01:1d:7a:7d:86:af:fa:3e:
                    b6:d0:84:82:09:57:db:14:cc:38:4a:61:29:bc:02:
                    e8:16:99:a0:7e:4d:85:cc:6b:bb:7c:a3:65:6f:30:
                    ea:bd:11:64:ab:f6:75:b7:73:22:a8:33:ae:2b:89:
                    d2:75:48:dd:d4:ba:11:ef:de:2f:6b:4b:2a:65:e7:
                    44:da:88:df:f3:70:45:bf:78:02:98:3a:09:01:53:
                    29:8d:60:3f:80:c7:c9:b6:44:68:1b:4b:6c:37:8f:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:D6:E7:5A:B7:EA:35:FA:BD:D6:E7:FD:BF:42:8B:9D:D1:29:09
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec40::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:21:a1:f1:27:95:39:01:c6:66:22:5b:ea:36:d7:3c:c0:
         02:c6:8f:57:9c:3c:cb:86:de:00:f5:f5:16:fe:8d:dc:5b:c7:
         5e:4e:66:b5:e4:59:8a:54:3f:45:ef:e9:67:e6:e9:d3:41:9e:
         a7:c5:ce:55:94:c5:3a:8b:c5:4f:14:5f:7e:52:9b:b5:11:41:
         57:6c:05:32:7d:35:68:b5:77:35:93:9e:96:0c:fd:3a:9d:38:
         18:a1:31:f8:60:88:be:bc:0e:b0:32:2a:f6:89:5a:7a:e1:fa:
         58:28:6c:c6:96:21:4b:07:fa:16:26:94:b9:5e:0a:5f:f9:d9:
         e3:6f:a3:14:b9:82:c1:db:94:19:4a:39:32:d8:5b:6f:03:42:
         e3:a6:83:4c:74:25:b0:ba:e8:a0:dd:a5:c5:15:aa:21:c1:bd:
         e3:26:b8:1a:53:5b:6f:dd:f8:6a:58:55:1e:27:19:96:67:9c:
         20:45:a5:65:ac:08:9d:ac:29:f2:cb:c1:1d:06:e6:80:bd:46:
         11:15:b7:ba:b1:ac:dc:10:e2:28:7c:0e:e7:09:14:97:01:2c:
         b5:ab:55:16:a5:be:45:cc:a8:47:55:72:6f:a8:bb:c3:e5:dd:
         da:37:80:d9:f2:fb:3b:7a:a3:18:b7:ca:08:fa:da:30:a5:dc:
         19:ad:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:31:33 2025 by rpki-client