Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a333a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a333a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          dZ+jLFiBwJbr9sQsNE09OpwClLqdbrH0A6V+eBqcDvE=
Subject key identifier:   48:4C:F3:B8:AB:C6:90:F0:8C:61:E7:75:CD:E4:82:F3:2B:6F:A4:9F
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       37527751EE31BA74B6ED2EE851840C8B0F74DF16
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a333a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 08 Aug 2025 17:35:14 +0000
ROA not before:           Fri 08 Aug 2025 17:30:14 +0000
ROA not after:            Fri 07 Aug 2026 17:35:14 +0000
asID:                     272966
IP address blocks:        2803:8590:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 21:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:52:77:51:ee:31:ba:74:b6:ed:2e:e8:51:84:0c:8b:0f:74:df:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Aug  8 17:30:14 2025 GMT
            Not After : Aug  7 17:35:14 2026 GMT
        Subject: CN=484CF3B8ABC690F08C61E775CDE482F32B6FA49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:16:31:60:99:cb:b4:b0:bb:af:57:d5:52:
                    81:3f:53:f3:9d:2a:36:f6:34:de:c9:85:e5:23:54:
                    5d:8b:2a:87:bc:ce:4f:78:3b:35:7c:0b:3c:60:ae:
                    da:a2:5b:b9:7f:5a:2c:50:c0:9d:fb:67:ed:1a:85:
                    98:a7:a7:d2:b5:19:89:c3:56:54:6a:e8:39:5f:03:
                    e3:06:17:79:38:88:01:02:f0:d8:06:9b:25:09:17:
                    8b:ac:4f:eb:03:1e:d2:95:57:d2:c9:f6:ff:51:25:
                    1a:22:7c:c9:4f:92:6f:da:ce:4e:97:8e:4b:9c:19:
                    ee:d8:08:aa:88:51:a8:2e:fa:c3:3d:ad:36:a8:f6:
                    21:8b:29:38:b7:29:4f:e7:56:fc:72:34:b1:74:c4:
                    89:1f:d3:47:54:85:92:fb:e3:cb:d0:3a:bb:18:8f:
                    e8:7a:e6:12:ed:16:b0:6f:d9:02:c6:5d:f1:86:79:
                    e6:02:89:7e:06:1d:f0:08:0c:15:7a:79:5b:ea:d3:
                    33:66:89:5a:8f:14:7d:cb:38:89:36:40:d6:85:e4:
                    96:f6:d5:59:98:ed:f1:8e:a7:0b:7a:c2:2b:e6:0b:
                    27:f6:40:5a:cf:6e:84:9b:b9:af:50:38:70:69:50:
                    ce:51:e5:ab:ba:d2:fc:c2:9f:d7:a0:3b:b0:f9:03:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4C:F3:B8:AB:C6:90:F0:8C:61:E7:75:CD:E4:82:F3:2B:6F:A4:9F
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a333a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:98:e9:44:61:52:1e:21:59:56:8a:75:94:84:32:9a:90:62:
         8d:ea:c7:24:47:6e:7b:b2:41:bf:fa:36:a4:de:be:d5:4d:41:
         84:a7:7c:21:36:9c:62:f4:b6:07:dc:6f:a0:34:45:43:ba:bf:
         31:63:df:a8:0f:3f:ae:82:c7:10:6e:e4:ef:59:11:5c:3c:07:
         9b:1e:9e:45:64:e7:fd:f7:73:c3:45:e0:fb:7a:bc:35:c5:9f:
         ed:3d:80:9b:0c:5f:22:24:22:b8:2f:76:0a:1b:2c:e8:b6:30:
         80:00:cb:a1:50:93:09:be:18:e2:5a:5f:6d:f9:49:56:d3:2c:
         ba:fa:c7:78:32:26:8b:f6:95:e1:c2:a4:cf:68:69:d3:2b:bb:
         bc:d5:a8:c6:30:3e:78:c8:2d:d8:2a:04:2f:48:26:b2:c5:59:
         3b:27:39:64:38:a9:ab:f1:9c:70:1e:36:47:6f:7d:f2:f0:4b:
         82:c0:39:a3:b1:4d:28:73:73:dc:61:b7:b8:a5:a5:5e:25:4d:
         58:b6:b1:c7:58:74:23:7d:e5:a6:2c:8c:bc:3b:ed:ac:06:72:
         83:66:4d:88:cc:95:1c:db:7f:86:42:17:c0:da:8a:af:33:5b:
         70:db:c2:32:73:b5:3a:9e:27:5c:69:5e:f1:49:22:de:2a:9d:
         5c:83:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:11 2025 by rpki-client