Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3336203d3e20323633363939.roa
File:                     323830333a356238303a3a2f33322d3336203d3e20323633363939.roa (raw, json)
Hash identifier:          dIDnBspNq0PffWG+eXbLXiJ3TtIVJ66C+1nI5BEU1Lk=
Subject key identifier:   E4:20:9A:B5:48:DC:65:73:38:2F:55:EA:F3:CA:0D:17:D9:DD:D6:E9
Certificate issuer:       /CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
Certificate serial:       18F524A3F2151C32F6526A7794E1F0497327FB62
Authority key identifier: 5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3336203d3e20323633363939.roa
Signing time:             Fri 25 Jul 2025 11:50:00 +0000
ROA not before:           Fri 25 Jul 2025 11:45:00 +0000
ROA not after:            Fri 24 Jul 2026 11:50:00 +0000
asID:                     263699
IP address blocks:        2803:5b80::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f5:24:a3:f2:15:1c:32:f6:52:6a:77:94:e1:f0:49:73:27:fb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
        Validity
            Not Before: Jul 25 11:45:00 2025 GMT
            Not After : Jul 24 11:50:00 2026 GMT
        Subject: CN=E4209AB548DC6573382F55EAF3CA0D17D9DDD6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:6d:70:c4:ca:a0:bf:e2:3e:37:b1:9a:1a:
                    21:a7:e0:8e:55:06:c2:30:14:ef:d1:ab:7c:2e:28:
                    2b:c4:dd:7f:08:2e:8c:83:7a:8e:0d:ef:6c:d3:ac:
                    e7:da:15:9e:9e:7d:cc:97:68:ff:54:8a:8a:27:ec:
                    b2:76:7a:05:e9:7c:55:19:2f:06:eb:3a:9f:66:d6:
                    83:0d:21:dc:98:7c:e7:17:08:d5:c1:de:82:49:f7:
                    b7:9e:e5:80:9d:a2:1b:11:3f:59:f6:9f:4f:4d:0e:
                    e7:5e:b4:54:a9:bc:4a:38:67:33:9f:f6:72:a4:00:
                    e7:2e:11:68:fe:f3:58:52:f6:90:0f:69:5c:ad:05:
                    d2:75:9d:18:ad:b4:88:ab:5a:30:3c:49:a8:7f:47:
                    6f:67:d7:76:e8:90:ef:c4:a8:e2:1e:6d:19:81:f2:
                    9c:0b:55:e3:03:f0:32:d8:7b:9d:33:a2:1d:a2:f5:
                    1b:07:ba:94:1c:a1:12:14:4b:f1:07:ed:5e:17:81:
                    33:c9:84:49:8a:e4:71:3a:7e:c5:4c:ac:94:93:92:
                    18:8e:06:e6:5d:dd:ae:38:f5:d5:d9:c8:39:b0:06:
                    aa:32:bd:37:de:fd:ce:75:32:0c:55:c5:fd:7c:7c:
                    5d:af:ea:a6:eb:9c:4f:22:39:bf:a7:7b:6d:de:c0:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:20:9A:B5:48:DC:65:73:38:2F:55:EA:F3:CA:0D:17:D9:DD:D6:E9
            X509v3 Authority Key Identifier:
                keyid:5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3336203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:91:8c:5f:0a:a0:b0:09:5d:16:f5:71:56:c1:cd:bd:59:35:
         24:bd:79:fb:f5:a6:3d:50:89:2a:ed:83:20:ff:af:cc:14:4d:
         28:c6:fc:13:47:b1:89:5a:8d:d7:19:aa:81:11:e5:2b:8b:19:
         48:85:ac:fb:0d:31:54:15:97:03:7a:8b:5a:90:9c:5c:49:9a:
         9f:3f:54:e0:5b:b3:90:f8:37:22:47:3d:8c:02:e9:55:08:b1:
         5f:ec:3c:3d:fc:c7:4a:3b:b0:72:c1:72:b7:4b:23:04:3b:6e:
         f2:a6:a4:6c:34:19:ee:6d:62:62:19:27:0f:e2:c5:27:38:a8:
         8f:f6:f7:64:93:a3:f4:d5:d1:24:c0:31:bd:c4:ff:84:f4:ca:
         92:9c:95:39:c7:38:e2:4d:a4:ff:14:2b:a5:74:28:9d:29:03:
         88:a1:6c:fa:a2:03:99:23:e1:9d:3a:0a:89:9e:bf:f0:74:0a:
         0f:cc:33:87:8f:a2:32:ad:4d:f3:b3:29:77:82:5a:54:82:a1:
         d7:1c:b2:e2:c3:87:64:19:61:a3:11:98:88:a2:b2:17:5b:bb:
         79:9d:67:49:bc:b1:15:12:b8:e5:15:75:94:4e:05:ff:06:22:
         4e:1a:d2:8c:61:80:aa:23:ed:e2:ea:9d:bc:6a:f8:ca:3b:47:
         e5:3e:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:28 2025 by rpki-client