Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/323830333a333732303a3a2f33322d3438203d3e20323636373636.roa
File:                     323830333a333732303a3a2f33322d3438203d3e20323636373636.roa (raw, json)
Hash identifier:          ZQoklwXC2nG2ewll2EesIhbvcuq+xMzcTEJ7FG2QJAo=
Subject key identifier:   69:12:BD:E7:EB:6C:32:E3:13:06:0A:61:14:4E:6E:BC:82:31:6F:6D
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       2C8E03A6B58534732C54F920F8573381B925D810
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/323830333a333732303a3a2f33322d3438203d3e20323636373636.roa
Signing time:             Fri 08 Aug 2025 13:35:12 +0000
ROA not before:           Fri 08 Aug 2025 13:30:12 +0000
ROA not after:            Fri 07 Aug 2026 13:35:12 +0000
asID:                     266766
IP address blocks:        2803:3720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8e:03:a6:b5:85:34:73:2c:54:f9:20:f8:57:33:81:b9:25:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Aug  8 13:30:12 2025 GMT
            Not After : Aug  7 13:35:12 2026 GMT
        Subject: CN=6912BDE7EB6C32E313060A61144E6EBC82316F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:75:4a:e8:54:c7:b0:7e:8a:66:e3:5c:8f:
                    72:93:0e:10:6c:01:19:1b:ca:a0:6d:5a:45:31:c6:
                    6f:61:06:8a:d6:e3:7d:c2:a1:49:11:c8:6a:09:84:
                    d3:78:c4:3f:a1:6e:55:f8:dc:97:96:92:49:0a:ef:
                    c0:98:67:71:84:f0:e2:14:62:37:2c:b9:75:82:a8:
                    b1:fe:fc:38:63:0e:00:61:03:33:23:9d:8f:06:65:
                    c8:96:78:95:dd:47:a7:a0:5d:96:47:f5:39:3c:ac:
                    1b:fa:cc:76:09:4f:4f:dd:10:bb:43:2b:6e:c5:3e:
                    07:cf:01:e2:4a:8c:34:64:50:bb:81:41:7c:24:5b:
                    1b:e8:18:35:ed:7b:eb:aa:9e:39:dd:7b:d7:bd:92:
                    e1:a2:3f:78:cb:7c:aa:93:91:31:b8:47:78:f7:cf:
                    b6:ce:3c:1b:11:19:86:5e:c6:e1:17:07:a8:59:06:
                    c4:ed:16:b9:bd:89:7b:da:1c:7f:f7:f8:4d:d0:1b:
                    27:29:47:78:14:e4:13:07:4b:6e:04:ac:d7:c0:49:
                    15:5d:ab:41:cb:e2:89:59:2e:0d:2e:4e:97:f9:13:
                    43:27:c4:5f:99:9d:7f:78:ca:e3:7b:0d:4c:28:25:
                    5d:1b:03:7d:c3:13:04:39:8f:89:73:da:8b:99:0a:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:BD:E7:EB:6C:32:E3:13:06:0A:61:14:4E:6E:BC:82:31:6F:6D
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/323830333a333732303a3a2f33322d3438203d3e20323636373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:06:7e:af:72:0e:9c:89:a7:00:f6:c2:d4:88:55:69:af:
         b8:fc:dd:2d:be:02:86:42:e8:3f:27:a2:5c:08:0d:b3:3e:ce:
         b7:e6:08:48:0f:db:7e:0a:1e:16:4b:ec:99:65:6b:12:20:7a:
         ac:2a:29:b6:f4:fb:2d:74:81:5f:d8:da:8b:93:dd:61:c9:b9:
         9a:04:f1:77:82:dd:cd:53:a9:e3:16:0b:f9:68:54:99:69:87:
         c9:49:22:54:b6:50:df:22:c0:70:e3:45:bf:12:19:c9:25:31:
         5e:91:34:de:9a:06:4e:92:25:bb:47:71:ac:e8:9c:82:ae:89:
         24:2f:a6:3a:91:8f:7e:61:bc:a8:bd:f3:b3:a8:4e:db:6d:b0:
         d0:8a:f4:32:36:e9:a1:e2:0c:bb:11:2b:c6:42:f1:d3:0d:d6:
         c2:1e:7d:68:59:a0:e0:c5:9c:6c:f6:1b:57:2b:77:c6:98:94:
         0c:d8:71:2b:17:5e:59:ac:50:aa:ea:4d:bf:e0:14:b0:e9:89:
         4f:8e:ed:6d:68:ad:38:3b:aa:9e:40:f3:3c:ea:1e:90:cb:86:
         fd:9c:ed:dd:18:31:94:4b:f3:24:27:9f:ab:62:50:33:3b:ca:
         27:cd:6e:a2:9b:ba:0e:50:d8:00:67:c5:3b:24:af:3a:d4:8e:
         91:31:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:40 2025 by rpki-client