Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3438203d3e20323634383336.roa
File:                     323830333a633263303a3a2f33322d3438203d3e20323634383336.roa (raw, json)
Hash identifier:          nE0cyZggtZ2dkOGNljTmG74nGUMlmS/r+vrcvij7aws=
Subject key identifier:   77:E1:88:32:9D:32:F8:CF:92:30:F9:E7:B8:02:BE:84:6B:C4:38:B8
Certificate issuer:       /CN=D8907C24B083798F60D6D27B4273976C3AF83A69
Certificate serial:       2D8B066523A757918D69061EC2C1F612FEDF451B
Authority key identifier: D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3438203d3e20323634383336.roa
Signing time:             Thu 07 Aug 2025 15:35:02 +0000
ROA not before:           Thu 07 Aug 2025 15:30:02 +0000
ROA not after:            Thu 06 Aug 2026 15:35:02 +0000
asID:                     264836
IP address blocks:        2803:c2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8b:06:65:23:a7:57:91:8d:69:06:1e:c2:c1:f6:12:fe:df:45:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8907C24B083798F60D6D27B4273976C3AF83A69
        Validity
            Not Before: Aug  7 15:30:02 2025 GMT
            Not After : Aug  6 15:35:02 2026 GMT
        Subject: CN=77E188329D32F8CF9230F9E7B802BE846BC438B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:40:a4:17:fe:9b:49:a9:d8:82:26:08:44:
                    e9:70:0c:08:53:f6:2b:0d:b1:7b:25:39:1c:2c:b3:
                    21:80:8b:df:ab:27:b7:1c:95:44:85:e2:0c:f5:cc:
                    15:52:0d:74:f8:f1:a1:10:e2:4a:a3:f6:b3:7b:df:
                    be:3f:5f:bf:b8:80:be:a5:03:45:3f:eb:f2:5a:95:
                    ea:94:2c:5b:b9:ab:31:e4:cf:e4:a5:a3:35:51:34:
                    6a:47:c6:9c:f4:7c:7d:d3:a7:92:09:b5:e8:77:a1:
                    42:4a:98:0f:03:5d:aa:43:e0:3d:82:a4:99:23:62:
                    46:e7:9e:11:ca:b2:00:34:1f:0b:0e:84:1f:bb:b4:
                    40:d4:2c:5c:54:92:9e:db:e5:11:c8:f4:0b:a4:e8:
                    8b:e5:fa:c5:b6:6e:d3:53:84:a5:a8:af:6b:ca:d4:
                    e7:83:c9:42:ed:4a:35:e6:0b:b1:f8:1f:ec:6b:0e:
                    8f:82:3a:84:55:ad:5e:48:97:78:19:0e:14:1e:3e:
                    13:41:bb:14:e0:1d:94:6d:b2:8d:6e:7f:be:86:e1:
                    e7:0a:ba:2a:1c:dc:28:cb:a4:9a:17:19:62:8f:7c:
                    eb:45:6c:1d:7d:91:ed:fa:99:26:ad:38:53:e5:2f:
                    f5:a4:df:7e:8a:24:c8:5d:84:e6:fa:13:c9:fc:90:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:88:32:9D:32:F8:CF:92:30:F9:E7:B8:02:BE:84:6B:C4:38:B8
            X509v3 Authority Key Identifier:
                keyid:D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3438203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:23:ec:92:99:32:40:27:e5:9d:76:d9:09:91:82:ce:a3:
         ea:85:3f:3b:7e:86:56:e5:ea:7e:2b:d0:33:07:36:d1:2a:7a:
         af:b5:ff:6c:8f:b0:c3:a1:5f:f1:b6:eb:2d:c6:0b:2e:76:0c:
         c9:ca:80:b4:ea:83:73:00:5a:f6:21:38:00:8b:3b:87:fe:dc:
         57:42:4b:80:ca:6a:44:eb:7c:e8:cb:e1:b3:39:dc:62:86:4c:
         1f:da:9e:2e:75:0d:f0:40:74:81:17:fb:00:3b:d7:c3:f3:b0:
         1f:83:62:89:21:3d:82:01:2e:9d:10:2c:7f:53:c3:89:65:ba:
         ab:10:4f:8c:9d:07:fb:60:3d:67:8e:24:63:05:7f:57:70:08:
         74:7c:91:a8:51:0b:8a:07:37:85:d3:d0:14:9f:38:94:f2:7e:
         12:10:8c:68:04:79:f4:cd:a1:57:90:d0:5c:db:8d:0a:a2:6d:
         27:a9:f1:9f:22:5b:09:43:9d:ea:6a:b3:ec:b7:e7:e2:6c:b4:
         e1:b7:6f:a4:cf:16:a0:42:a8:6f:1d:78:54:79:bd:e3:82:dd:
         1d:3d:06:94:03:38:79:2a:d3:64:78:c5:11:15:4b:cb:19:0e:
         35:30:0e:b4:bc:d1:ab:1e:cd:63:d3:e3:bd:44:13:42:de:76:
         aa:98:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:44:25 2025 by rpki-client