Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa
File:                     323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa (raw, json)
Hash identifier:          96zoZL7jhu/sRAC0WqGVvJT7xy+JZ3y/qUqhCKebN2w=
Subject key identifier:   7D:A2:F5:E3:BC:B3:EF:4D:93:E0:4C:A6:7D:7D:88:CB:A4:4F:EB:65
Certificate issuer:       /CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
Certificate serial:       59DD1EC64DA727408076A47E4F2C64509611CEED
Authority key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa
Signing time:             Mon 06 Oct 2025 15:20:00 +0000
ROA not before:           Mon 06 Oct 2025 15:15:00 +0000
ROA not after:            Mon 05 Oct 2026 15:20:00 +0000
asID:                     274217
IP address blocks:        2803:bd0:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:1e:c6:4d:a7:27:40:80:76:a4:7e:4f:2c:64:50:96:11:ce:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
        Validity
            Not Before: Oct  6 15:15:00 2025 GMT
            Not After : Oct  5 15:20:00 2026 GMT
        Subject: CN=7DA2F5E3BCB3EF4D93E04CA67D7D88CBA44FEB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:69:21:4b:63:5d:98:e6:90:f1:73:7f:5c:
                    18:e0:1c:08:c1:a9:05:af:ac:88:25:ba:6f:19:15:
                    f8:b7:3e:c2:c5:70:2b:d2:07:f5:99:83:18:fc:b7:
                    78:ea:9a:c7:1f:db:6c:ef:12:0b:f9:93:ef:e4:71:
                    5b:63:9e:e1:c7:14:4f:82:6a:4d:8d:a9:90:00:3a:
                    8a:e1:5b:77:12:fa:96:5f:4e:60:e6:48:66:ed:ac:
                    c6:cd:0f:12:ed:ea:ac:37:c1:df:c1:18:b1:d4:ec:
                    8b:e0:6f:76:de:4a:5b:44:d8:1b:8f:77:f9:fc:53:
                    b1:b2:39:96:65:ed:bf:63:db:d7:48:08:fb:75:7a:
                    ef:16:a8:c4:c3:95:13:6e:73:7b:c9:96:7b:60:8c:
                    8c:96:d4:fd:f7:22:a5:c8:1f:2b:fe:08:c1:5e:94:
                    08:e1:51:72:b7:f5:69:67:48:2c:ee:47:41:7a:a2:
                    57:c0:f3:39:d8:44:21:ec:84:ac:c4:07:74:a0:70:
                    7d:b1:d4:41:ae:bd:31:5f:5c:8b:d7:6b:cb:95:f1:
                    8a:f1:db:f6:b8:c7:00:bb:6e:9e:38:0d:7f:93:9b:
                    24:bb:06:5b:8f:60:3c:11:53:3b:8f:64:3d:56:37:
                    cf:ae:9a:fb:0b:9e:e0:e7:96:6f:a0:8a:3c:d0:96:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A2:F5:E3:BC:B3:EF:4D:93:E0:4C:A6:7D:7D:88:CB:A4:4F:EB:65
            X509v3 Authority Key Identifier:
                keyid:6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd0:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:aa:60:c3:a6:6a:33:44:d4:a9:76:12:04:4e:1a:a2:6f:
         08:c2:65:10:8f:32:59:75:72:fa:df:bb:19:67:f0:7d:77:3c:
         af:91:e4:59:36:f7:d8:98:e6:6a:98:a4:92:66:06:cb:c0:e4:
         7c:c8:46:c6:c8:f9:2b:0d:85:54:5b:5b:34:95:af:1f:d3:94:
         f6:c8:21:51:a0:1d:cd:74:bf:a6:19:5e:74:2d:e1:36:f1:7b:
         31:24:3c:88:54:02:b7:b2:5c:26:98:ae:70:45:f4:6d:5a:00:
         e5:d0:77:e3:82:9e:a0:4e:67:c9:8a:b2:07:0c:ea:7b:7f:22:
         8c:95:61:5b:aa:dc:5b:32:85:4c:5c:87:a9:af:5d:95:cd:42:
         5f:4c:01:39:6b:2d:99:e0:6b:06:84:bd:07:2a:b7:aa:40:d5:
         1b:ba:85:fe:bf:fd:2f:c8:92:f8:19:05:53:b3:df:66:ab:e4:
         43:77:d1:98:86:97:5e:d7:bc:c7:e8:82:99:a7:e6:a4:66:1f:
         e9:50:94:48:35:9d:ac:8a:b5:df:6e:a3:3c:70:fd:7f:06:f3:
         c2:31:9e:de:33:4d:e3:bd:35:93:c2:6d:86:5c:ac:20:0c:c0:
         a8:cf:7f:85:4d:5c:c9:b1:1c:cd:df:be:d6:fa:9b:de:15:6b:
         8d:f6:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:57 2025 by rpki-client