Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          BgeV4bBPSPY6eCwp/IaUkhV0tZ90Q8fXllFYo6AvRt8=
Subject key identifier:   B5:2D:99:BD:CF:2B:00:F2:DD:D9:4B:E4:0B:50:CA:FF:FB:6F:B1:59
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       5A36348EEDFD012EAC5B0F167B00FA2A1BEEBE12
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 08 Aug 2025 17:35:14 +0000
ROA not before:           Fri 08 Aug 2025 17:30:14 +0000
ROA not after:            Fri 07 Aug 2026 17:35:14 +0000
asID:                     272966
IP address blocks:        2803:8590:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 21:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:36:34:8e:ed:fd:01:2e:ac:5b:0f:16:7b:00:fa:2a:1b:ee:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Aug  8 17:30:14 2025 GMT
            Not After : Aug  7 17:35:14 2026 GMT
        Subject: CN=B52D99BDCF2B00F2DDD94BE40B50CAFFFB6FB159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:3d:42:ca:24:6f:36:a5:b5:26:b5:71:88:
                    4a:59:18:f2:c1:1b:0e:7a:f5:f7:e1:c3:9a:9d:0d:
                    34:0a:f7:c1:87:f1:be:73:f5:50:ba:22:07:1e:3f:
                    3a:cd:6f:81:26:21:56:c6:1c:ae:08:ba:0d:88:32:
                    4c:bd:57:0a:09:d4:68:17:9f:a5:07:1b:16:1c:96:
                    c6:bc:bf:68:5e:58:b3:dd:89:23:56:15:20:69:71:
                    2c:58:1e:99:0f:c5:8f:ac:5d:5a:18:f4:2c:00:84:
                    e6:cf:03:55:e5:e8:4c:4e:25:20:d1:e8:01:6d:ac:
                    70:da:ca:d6:17:95:14:4b:14:c1:cd:d3:0a:c0:e1:
                    10:e3:04:42:43:8b:11:f6:f2:92:94:d0:1a:f0:3f:
                    f6:47:e4:8c:45:60:64:67:4c:17:a3:b7:33:46:1f:
                    2c:39:d6:73:07:bf:14:85:13:d2:89:bb:d0:01:81:
                    3a:d6:f5:a1:f3:a5:5a:fb:e3:8e:cd:cc:48:b8:96:
                    45:3e:54:95:d3:40:c1:7b:23:f5:b4:f0:c6:da:25:
                    0c:5f:58:6e:77:31:09:41:62:21:63:40:0e:dd:28:
                    a8:dc:e3:21:43:2d:b6:f9:f0:bf:24:db:3b:0a:49:
                    c4:0a:4b:34:0a:c6:a9:b4:30:5e:82:2a:26:e8:d8:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:99:BD:CF:2B:00:F2:DD:D9:4B:E4:0B:50:CA:FF:FB:6F:B1:59
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:ff:89:f1:de:be:9e:d1:f9:65:17:cd:ce:a2:35:e2:69:e7:
         69:7e:4f:2d:bc:b3:8e:17:14:d9:88:20:6c:88:0b:e0:14:41:
         0c:75:7f:c3:7c:af:71:85:b2:39:1e:fe:de:09:67:6e:28:17:
         38:c7:d4:c7:ac:ab:d7:16:1f:3c:d1:d2:24:a9:1c:fd:62:75:
         23:a6:4f:95:a1:29:f6:00:17:65:2a:a9:b9:05:13:2d:21:f7:
         e8:61:57:d8:bb:a5:19:59:0c:a1:de:b2:c4:58:89:27:f8:07:
         aa:24:5a:94:61:fa:88:d5:68:d2:9f:19:a8:db:76:f4:34:e4:
         2b:df:04:bd:1f:e2:f1:73:50:96:91:a9:f4:6e:c5:80:60:69:
         05:36:7a:77:77:1f:e4:13:eb:02:f2:97:00:c7:db:42:8e:ec:
         c6:7f:39:98:c6:2b:78:1b:83:69:20:03:55:a9:1c:9a:7b:75:
         af:bd:b0:79:e7:86:b1:13:f5:5c:e0:e8:2f:ce:30:b6:0e:e8:
         fa:da:65:84:e8:68:4e:05:20:62:9d:9b:b8:b4:66:cb:da:29:
         04:2e:35:5a:f2:0d:93:c5:5f:9c:6e:a2:d7:76:49:6a:d5:79:
         98:87:3b:fd:24:aa:c8:12:64:07:77:09:f9:20:7a:84:a9:ee:
         d1:67:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:25 2025 by rpki-client