Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3630303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3630303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          X2ks0KUzWhqZJtuR/TLpsMGSLbD+oF11QjaNeJ5ymeY=
Subject key identifier:   AF:47:C0:23:C1:EA:AF:53:8F:50:84:BA:A4:0B:38:8D:FD:C6:90:CC
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       03B4D2DF5F23F23E6FE7ABC393AAC116D92BF253
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3630303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 26 Sep 2025 03:48:42 +0000
ROA not before:           Fri 26 Sep 2025 03:43:42 +0000
ROA not after:            Fri 25 Sep 2026 03:48:42 +0000
asID:                     273196
IP address blocks:        2803:2650:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b4:d2:df:5f:23:f2:3e:6f:e7:ab:c3:93:aa:c1:16:d9:2b:f2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Sep 26 03:43:42 2025 GMT
            Not After : Sep 25 03:48:42 2026 GMT
        Subject: CN=AF47C023C1EAAF538F5084BAA40B388DFDC690CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:3c:87:c1:52:f4:a7:45:31:e8:31:ca:c6:
                    35:e7:76:2d:3c:8a:c8:ce:33:fe:19:72:e2:d5:ad:
                    8a:8b:da:9b:3d:52:64:32:4f:75:1e:6f:be:7e:d9:
                    32:a2:bc:cb:c8:51:42:7c:93:3e:0a:ef:2f:03:18:
                    7b:7d:a5:c1:a9:c5:5b:17:79:7e:ab:db:3d:f9:bc:
                    e9:5a:42:41:25:9c:1b:d4:4c:37:2c:af:2f:29:86:
                    02:58:34:66:8e:25:61:fe:3a:f7:4d:95:bd:b5:18:
                    08:ca:48:c1:a1:bc:34:8a:45:c8:47:d5:27:a3:68:
                    a1:db:92:32:a2:62:62:c8:6c:b2:e3:cf:7c:81:0d:
                    6c:23:2d:49:4b:98:57:e0:40:ec:65:43:5c:17:30:
                    c9:54:ba:14:70:76:b0:e7:2f:e4:9a:84:59:47:95:
                    a7:d8:b6:5a:16:21:79:3a:dc:5f:a0:b0:8d:64:e9:
                    81:90:7f:34:8b:c1:2a:cb:60:6d:bd:27:be:6d:d0:
                    23:58:90:be:51:d3:ce:08:17:ee:63:fa:0e:b2:3b:
                    4b:76:aa:f3:08:e7:7b:b4:8f:6c:20:91:b8:8e:69:
                    2e:2b:e9:49:26:f4:14:bf:97:c7:40:95:00:12:a4:
                    c2:d5:a6:53:ef:f0:f0:c0:0e:10:7f:05:b6:57:7e:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:C0:23:C1:EA:AF:53:8F:50:84:BA:A4:0B:38:8D:FD:C6:90:CC
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3630303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:58:c9:c6:ee:3d:70:10:bf:79:1c:d7:0e:e0:62:3d:c8:
         e6:36:0c:03:30:2f:07:1c:49:13:50:4a:57:55:1c:f6:95:17:
         fa:35:85:ed:3d:54:1c:3a:3b:78:2d:99:0e:23:91:75:c3:1c:
         32:fe:47:c5:4d:ba:97:be:c7:e0:56:32:f4:e7:0e:bf:27:37:
         31:6b:dd:2b:ed:ac:33:ab:50:82:a1:64:91:e6:e4:88:95:7b:
         9e:0e:20:f4:f0:2d:d5:ef:41:e3:40:92:9c:c7:22:3a:3d:a6:
         e3:12:89:17:92:4b:7b:94:9c:7e:c1:3f:d6:14:8c:1d:d4:f3:
         f4:6d:c4:2a:80:30:7e:71:4a:d2:f9:2f:06:1c:8e:a4:a1:07:
         cc:4d:7f:ff:ac:16:4a:b5:9f:5b:1b:63:28:69:87:19:3b:c9:
         7e:08:09:0a:09:32:60:64:5b:d2:a4:92:da:de:c0:03:40:ef:
         32:05:36:92:08:9a:ce:88:3a:22:dc:a8:04:b4:53:1d:27:5d:
         50:c6:fd:99:12:63:3b:08:4f:d4:6e:8a:35:29:39:4f:bb:cc:
         a4:90:be:1d:c1:dd:3d:eb:52:0d:41:5f:5a:c3:80:f5:af:31:
         4e:83:33:71:2d:5a:9c:b7:58:84:97:57:0c:48:bf:e2:da:97:
         a2:bb:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:37:29 2025 by rpki-client