Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/323830333a656235303a3a2f33322d3438203d3e20323733393133.roa
File:                     323830333a656235303a3a2f33322d3438203d3e20323733393133.roa (raw, json)
Hash identifier:          34r7dOUKhUaVFtHvXqe1ruIi+t/OCGe3g9nSoPCp+g8=
Subject key identifier:   8D:47:4F:D2:26:C2:05:FA:E7:18:9B:14:CB:4D:29:14:D1:5B:5B:31
Certificate issuer:       /CN=3725764F280821B6DC11658D8F86A8F982C81BB9
Certificate serial:       38D030D51A9923D972BF8AA1B4A24D78F1C30180
Authority key identifier: 37:25:76:4F:28:08:21:B6:DC:11:65:8D:8F:86:A8:F9:82:C8:1B:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3725764F280821B6DC11658D8F86A8F982C81BB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/323830333a656235303a3a2f33322d3438203d3e20323733393133.roa
Signing time:             Sat 23 Aug 2025 07:40:28 +0000
ROA not before:           Sat 23 Aug 2025 07:35:28 +0000
ROA not after:            Sat 22 Aug 2026 07:40:28 +0000
asID:                     273913
IP address blocks:        2803:eb50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/3725764F280821B6DC11658D8F86A8F982C81BB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/3725764F280821B6DC11658D8F86A8F982C81BB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3725764F280821B6DC11658D8F86A8F982C81BB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d0:30:d5:1a:99:23:d9:72:bf:8a:a1:b4:a2:4d:78:f1:c3:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3725764F280821B6DC11658D8F86A8F982C81BB9
        Validity
            Not Before: Aug 23 07:35:28 2025 GMT
            Not After : Aug 22 07:40:28 2026 GMT
        Subject: CN=8D474FD226C205FAE7189B14CB4D2914D15B5B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:0f:05:29:5c:e0:fc:9d:9c:63:dd:a3:83:
                    94:e7:68:c9:81:ff:6e:8e:d3:93:99:41:53:4d:2c:
                    fd:03:ad:20:45:69:3f:3a:84:c4:21:43:41:d9:40:
                    5d:5f:7c:31:31:68:04:8a:22:21:c4:f9:7c:a3:8a:
                    3b:67:38:98:63:88:24:36:e4:f4:67:4e:60:37:6b:
                    05:96:7b:85:62:29:f3:9c:51:58:c7:85:59:ba:4e:
                    0a:dd:41:be:c1:85:44:54:66:30:02:c4:6b:3d:3f:
                    4a:fd:71:00:06:af:59:d1:d7:17:f2:6a:3a:aa:90:
                    20:33:24:f7:fd:4d:fe:56:64:31:5d:b4:18:1e:e7:
                    46:d9:0f:a3:fb:35:70:ba:6c:95:49:66:41:99:34:
                    a3:a8:d4:71:3a:26:21:2a:63:b2:2e:d6:7b:bc:d6:
                    29:20:d1:e8:5d:c6:c0:bd:6a:fa:97:cf:c9:b9:2b:
                    0b:e4:1e:eb:ac:f8:19:50:f8:1d:f0:77:32:c6:10:
                    ef:13:3e:2f:ca:6d:eb:0e:f8:68:db:39:5b:65:46:
                    96:bb:23:f0:c2:e8:ea:bf:64:e3:9e:94:e0:6c:8a:
                    43:5b:93:81:12:ed:6e:0f:a1:2a:8a:fe:04:0b:8a:
                    57:86:ca:3b:b1:60:61:79:de:a0:92:d5:d2:41:30:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:47:4F:D2:26:C2:05:FA:E7:18:9B:14:CB:4D:29:14:D1:5B:5B:31
            X509v3 Authority Key Identifier:
                keyid:37:25:76:4F:28:08:21:B6:DC:11:65:8D:8F:86:A8:F9:82:C8:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/3725764F280821B6DC11658D8F86A8F982C81BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3725764F280821B6DC11658D8F86A8F982C81BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE62B6A5A8E8D1AA9C597582C036C073E54566296E085EC2272CD24042577C88/0/323830333a656235303a3a2f33322d3438203d3e20323733393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:1c:ea:85:08:7b:60:ae:86:ef:28:49:8f:51:ed:7a:ff:
         4d:ea:f6:5b:f6:97:31:70:15:35:43:16:2f:63:b2:06:1f:4b:
         76:d7:56:59:f3:a9:ad:c2:13:3d:de:03:ad:f3:b3:3c:89:b4:
         7d:af:b4:0f:3a:10:0b:92:61:a9:5a:40:62:26:1d:61:04:bd:
         49:42:e9:02:f0:89:0d:1f:85:39:f4:30:29:64:7f:85:e6:20:
         f5:77:4b:52:3b:af:00:3b:c6:7a:ee:89:3e:5c:af:35:a3:ea:
         57:7f:29:19:54:fb:f5:53:83:d7:73:b9:62:40:d2:21:10:2c:
         fa:bd:65:55:38:e2:e1:39:d1:68:a7:bd:66:cd:63:5d:84:7c:
         1d:ad:a5:fc:7f:c3:fa:96:cf:33:99:72:3d:d7:96:00:72:e5:
         9b:96:ce:57:41:b4:e6:fa:db:de:bb:cb:99:05:29:f7:a0:e0:
         0f:18:00:83:e0:5e:f2:dc:10:ea:e9:54:4b:78:21:3b:a2:63:
         56:40:52:57:d6:ab:c3:b0:4c:9c:55:bd:1c:5f:64:2b:b8:40:
         7e:f7:52:72:98:62:09:da:42:53:09:5c:94:8c:ab:6b:73:24:
         46:88:9c:30:ec:c4:94:86:0f:d3:f8:e9:31:84:56:86:b2:b4:
         90:e0:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:32:24 2025 by rpki-client