Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa
File:                     323830333a3364303a3a2f33322d3438203d3e20323734323030.roa (raw, json)
Hash identifier:          lE3GglL3z7ZY8Df/KLLlyHdAdn33C6RE8zoe/8oNcHE=
Subject key identifier:   65:49:1C:AD:10:CD:65:9B:CB:6E:FE:46:E4:0E:F7:6A:AC:8A:2B:3A
Certificate issuer:       /CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
Certificate serial:       135D3F79D800379FA80C811393F0385735390E9A
Authority key identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa
Signing time:             Thu 18 Sep 2025 13:10:00 +0000
ROA not before:           Thu 18 Sep 2025 13:05:00 +0000
ROA not after:            Thu 17 Sep 2026 13:10:00 +0000
asID:                     274200
IP address blocks:        2803:3d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:3f:79:d8:00:37:9f:a8:0c:81:13:93:f0:38:57:35:39:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
        Validity
            Not Before: Sep 18 13:05:00 2025 GMT
            Not After : Sep 17 13:10:00 2026 GMT
        Subject: CN=65491CAD10CD659BCB6EFE46E40EF76AAC8A2B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b3:61:a6:83:2c:a5:a5:c0:ce:95:56:18:bc:
                    aa:7f:4a:a8:85:e6:53:14:5b:c9:b6:af:2c:4d:13:
                    67:3f:f1:11:63:a0:84:fc:75:8d:af:81:8a:48:46:
                    ba:cf:4e:b4:b0:7a:7c:a9:40:78:45:d5:ed:c6:2a:
                    38:df:58:dc:e9:8b:58:7a:b7:db:97:1a:f6:24:8f:
                    87:37:df:16:5f:7c:04:f9:4e:90:b3:f2:61:89:a4:
                    ba:1e:e1:61:41:ae:ac:34:5a:0e:5a:53:e8:12:81:
                    37:c6:ef:f7:12:7d:47:8c:3b:bb:53:0b:5e:e0:54:
                    06:c1:95:6d:91:6a:dd:1f:0b:3a:93:7d:94:05:31:
                    22:4c:71:37:67:c9:05:ab:32:47:7c:15:20:71:4d:
                    86:94:7f:9e:0d:f8:7e:9b:5b:c0:0a:07:1e:54:87:
                    f1:27:25:4d:ac:24:98:e7:aa:30:e9:4f:82:9c:22:
                    bf:1f:c4:26:0b:77:06:21:a3:40:53:1a:50:1c:7e:
                    41:71:1f:87:d0:43:29:14:1d:36:f5:73:75:dc:a0:
                    6d:52:03:60:14:ee:f1:e1:3c:ab:a2:7d:83:89:6d:
                    bf:47:5d:43:d8:cd:26:af:af:f5:6b:4e:55:6f:32:
                    f3:92:7b:d0:b5:58:37:cf:8f:6b:15:9c:63:d2:93:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:49:1C:AD:10:CD:65:9B:CB:6E:FE:46:E4:0E:F7:6A:AC:8A:2B:3A
            X509v3 Authority Key Identifier:
                keyid:85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:a1:25:6b:b8:1d:c7:4a:b1:82:7e:e0:6f:08:07:e1:86:
         26:78:34:c7:b8:85:12:27:4b:ce:e6:fe:12:1c:05:71:3e:5a:
         c0:0b:99:de:33:51:09:56:07:27:fb:87:0e:f6:25:47:2b:ba:
         b5:9f:71:05:ec:73:5f:f5:48:fc:93:ff:8a:60:aa:a5:8a:a5:
         9a:8a:e5:ee:f9:2d:d2:24:33:46:39:da:23:f5:da:1f:9b:56:
         84:b6:8c:14:f8:e2:ba:96:75:7c:5d:d3:6b:d7:aa:1f:2a:03:
         5e:94:79:71:08:cd:c9:3d:dc:9e:cf:29:14:1f:1d:59:4a:4d:
         f4:7e:94:17:cb:df:dc:53:22:92:ed:2c:7d:d9:3f:c2:c7:63:
         25:c7:a4:1e:6a:51:61:bf:5f:f1:2e:a6:b0:cc:34:08:90:f7:
         44:85:64:6e:b2:c0:de:a3:ee:43:0c:ba:a2:f9:dc:4f:44:a0:
         8d:3a:37:31:d2:66:7d:d2:63:19:e2:33:e0:2a:fa:1e:55:82:
         f2:0e:c0:75:51:f9:d0:3e:f5:12:74:e5:77:a3:cd:cc:bc:06:
         38:64:06:b8:0d:68:10:e0:86:c8:e4:c5:d5:a2:a7:2b:1a:0b:
         23:8f:1f:2d:32:df:0e:a0:c0:47:a9:ce:d5:95:2e:5e:6d:ac:
         fa:35:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:34:14 2025 by rpki-client