Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa
File:                     323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa (raw, json)
Hash identifier:          AGq16ochLwYcwnQ5z4PXvB8M3jPhzKd+VUntYPGzBcI=
Subject key identifier:   0B:01:66:C3:F5:1B:80:39:14:09:DE:FD:A1:04:D9:84:39:E6:12:BE
Certificate issuer:       /CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Certificate serial:       4B7AF2493F4DB20619B684E5F7A84C39500C4458
Authority key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa
Signing time:             Mon 04 Aug 2025 17:25:00 +0000
ROA not before:           Mon 04 Aug 2025 17:20:00 +0000
ROA not after:            Mon 03 Aug 2026 17:25:00 +0000
asID:                     274166
IP address blocks:        2803:85d0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 03:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7a:f2:49:3f:4d:b2:06:19:b6:84:e5:f7:a8:4c:39:50:0c:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
        Validity
            Not Before: Aug  4 17:20:00 2025 GMT
            Not After : Aug  3 17:25:00 2026 GMT
        Subject: CN=0B0166C3F51B80391409DEFDA104D98439E612BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:83:e6:e1:72:1e:f8:ed:59:eb:77:1a:de:
                    20:91:e9:a1:45:dc:2f:c7:15:71:53:c1:a2:a3:0e:
                    81:6d:a3:de:92:c4:8c:0f:fa:75:1c:62:be:ba:7a:
                    cd:4b:5b:46:b7:83:ae:b9:38:15:41:b1:3f:da:46:
                    28:2f:b1:99:b4:74:cd:a2:84:b3:c4:4e:a4:84:ad:
                    15:39:73:63:50:e6:7c:0d:78:d7:0a:de:f5:2c:56:
                    5f:8b:54:73:3b:7b:bb:e1:e6:3d:00:7e:d8:2f:0a:
                    50:41:eb:73:1f:ed:94:98:0c:ce:fa:ae:d7:c1:f1:
                    7a:c0:ad:54:e6:d1:ca:94:eb:bc:a5:7e:8b:dd:68:
                    05:24:3b:2f:f5:3a:ea:3f:b2:ec:16:57:1a:da:02:
                    81:4f:89:ba:4a:8f:18:07:3f:79:46:49:f4:a4:e4:
                    bf:2a:ac:90:f5:8b:4d:74:d1:a1:00:7d:be:72:59:
                    40:58:b8:62:3e:48:02:35:13:51:48:20:08:15:8c:
                    ab:91:d7:26:84:37:a1:ce:0e:49:26:2f:41:86:5d:
                    de:ae:b5:e7:d9:e5:16:4c:82:3c:58:d5:f4:28:35:
                    70:1b:ae:ee:68:06:97:d9:d7:58:07:32:54:4c:86:
                    aa:2c:f3:94:1f:65:d3:46:ec:6e:2f:ca:c1:37:fb:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:66:C3:F5:1B:80:39:14:09:DE:FD:A1:04:D9:84:39:E6:12:BE
            X509v3 Authority Key Identifier:
                keyid:38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:85d0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:3d:e5:f0:01:ee:c3:3a:e5:3e:30:25:16:89:f8:ed:4c:03:
         cd:9b:e1:e0:34:f5:a0:3d:d7:4b:43:87:95:c8:2e:90:3e:b9:
         e7:08:a8:bb:2a:6d:34:a4:85:e3:ab:19:11:2c:b5:6e:62:06:
         51:e2:59:c7:fa:cd:62:8f:c3:17:1c:4e:a6:2d:3e:c8:9a:67:
         30:c7:99:5c:24:97:4a:84:1a:1e:f5:11:f9:b4:a8:c0:4d:42:
         d2:56:36:8b:bd:2a:3f:57:86:a6:99:0d:6f:99:17:4f:e5:1f:
         fe:3c:79:ec:50:79:f4:1c:f4:ba:da:86:df:ef:44:44:41:bf:
         e4:0e:7d:9a:58:78:71:fe:8c:a3:4d:51:b2:a1:4d:ce:74:5e:
         28:4c:62:2e:59:84:14:16:a8:db:13:33:17:5d:21:48:b9:3d:
         93:e1:ce:f2:fd:b3:b0:9c:8d:83:2a:02:0f:6d:74:35:5f:33:
         b9:62:24:27:e9:ab:a7:dc:12:f7:27:19:0d:8c:33:82:75:b4:
         d2:bd:78:0f:cc:ab:9a:87:91:04:97:ca:02:8f:f1:4a:de:26:
         b0:25:a1:ca:97:8a:6f:ab:34:ea:b3:8d:36:9e:12:65:23:60:
         c9:d0:9a:be:9f:28:75:1a:b4:67:7b:12:35:9d:1a:53:9b:04:
         e7:9a:82:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:13 2025 by rpki-client