Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a3a2f33332d3333203d3e20323734313636.roa
File:                     323830333a383564303a3a2f33332d3333203d3e20323734313636.roa (raw, json)
Hash identifier:          3WKUs360iJpPsWYIDuAJlBKVJpyd2CoEQ7JdzuILhjU=
Subject key identifier:   29:48:E1:5E:36:CD:60:AE:63:F3:E1:FF:6D:62:D2:6C:B3:D8:4B:42
Certificate issuer:       /CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Certificate serial:       4D9FAC6DC0B04472B1CB82D325A105BA35054522
Authority key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a3a2f33332d3333203d3e20323734313636.roa
Signing time:             Mon 04 Aug 2025 17:25:00 +0000
ROA not before:           Mon 04 Aug 2025 17:20:00 +0000
ROA not after:            Mon 03 Aug 2026 17:25:00 +0000
asID:                     274166
IP address blocks:        2803:85d0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 03:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9f:ac:6d:c0:b0:44:72:b1:cb:82:d3:25:a1:05:ba:35:05:45:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
        Validity
            Not Before: Aug  4 17:20:00 2025 GMT
            Not After : Aug  3 17:25:00 2026 GMT
        Subject: CN=2948E15E36CD60AE63F3E1FF6D62D26CB3D84B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:1a:3b:34:6f:4b:5e:65:5b:63:36:86:5d:
                    86:83:ba:b4:36:a0:62:87:26:f6:1c:77:47:91:24:
                    f6:a5:71:df:af:24:a3:95:f8:2c:dc:7e:10:16:33:
                    4d:bc:e5:a6:71:00:3d:14:54:20:da:74:71:86:e7:
                    18:45:46:57:8b:62:45:ab:bb:0b:9e:dd:05:f9:f4:
                    3c:5f:12:0e:32:fa:47:07:2d:d7:06:f4:ee:36:45:
                    08:21:bf:62:71:d2:b7:c3:ee:72:3e:cf:13:70:b0:
                    12:33:b3:67:6b:34:35:a7:82:d0:e9:ae:a4:3f:8b:
                    b7:f5:de:bd:84:b0:37:92:4f:69:9e:e1:06:cc:b6:
                    0d:4f:d4:c2:ac:bd:3f:f3:a5:c2:31:c3:73:d8:25:
                    15:a2:70:ed:87:5b:f7:7d:95:4a:9a:a7:ab:83:60:
                    a1:2e:4c:78:81:7f:83:22:30:78:ba:c5:b8:88:73:
                    67:f6:0e:8f:d1:b7:d0:91:79:fc:e3:83:43:1f:3d:
                    78:ad:47:9d:d0:18:7a:39:5a:74:1e:e6:5e:a8:2d:
                    a8:cd:3a:e6:70:d7:de:29:d3:33:44:e6:f6:65:49:
                    81:f6:ee:67:e9:6d:a4:46:d2:74:b3:e2:9b:5c:02:
                    06:fa:94:ad:99:49:c8:70:fb:cb:dc:dc:e6:88:c4:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:E1:5E:36:CD:60:AE:63:F3:E1:FF:6D:62:D2:6C:B3:D8:4B:42
            X509v3 Authority Key Identifier:
                keyid:38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a3a2f33332d3333203d3e20323734313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:85d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:73:33:d6:1a:b0:bf:e4:aa:bb:ff:4d:51:ef:4e:09:62:ab:
         d9:ad:34:d9:c2:83:45:3a:3f:47:a7:9c:76:13:73:dd:20:b5:
         f5:9a:f0:74:e8:5c:58:70:62:1b:bf:7f:c4:f2:25:89:ee:5d:
         05:2f:35:e8:34:16:ef:70:3f:72:dd:5e:73:ec:5f:41:d9:59:
         8a:81:c5:f6:ad:93:52:23:55:78:37:cd:8f:4b:ba:b2:3b:56:
         58:b2:df:9a:3d:70:09:05:e9:99:81:69:a6:b6:ee:72:a4:07:
         05:0d:dd:f2:3c:d0:f5:a6:c9:45:82:42:ed:60:70:fe:5e:5e:
         97:16:be:02:d3:1f:84:30:a7:55:42:03:59:36:47:48:6e:ba:
         f9:7b:f7:95:34:5d:53:20:a2:fe:00:e8:1b:e5:a3:0f:b2:98:
         72:e0:11:94:57:0e:b6:fc:6a:66:db:ea:de:13:27:ef:fd:4c:
         02:28:a8:8e:75:b8:2f:f1:03:75:b8:b3:7c:43:ab:45:73:f6:
         7c:52:36:99:27:2b:bc:02:54:12:fd:54:ff:39:6a:6f:90:d6:
         2d:d7:b4:92:c8:0c:7e:d2:a3:2b:8a:34:96:e6:06:e0:18:5c:
         11:c8:da:0c:ca:fb:a2:8f:92:6f:fb:b7:ec:72:02:09:b5:6a:
         e0:99:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:00 2025 by rpki-client