Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3438203d3e20323639393436.roa
File:                     323830333a333835303a3a2f33322d3438203d3e20323639393436.roa (raw, json)
Hash identifier:          ymr/wS0o7gifw1r2SBC5TwvcnrnxbBYKhOlLa2pKkCE=
Subject key identifier:   B3:2A:C4:93:E7:87:6F:30:1D:37:71:7F:54:D8:4C:56:46:A8:8F:2E
Certificate issuer:       /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial:       32A83B9210BC006C427EFEB92DB9D18D23A062AA
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3438203d3e20323639393436.roa
Signing time:             Sat 16 Aug 2025 02:35:49 +0000
ROA not before:           Sat 16 Aug 2025 02:30:49 +0000
ROA not after:            Sat 15 Aug 2026 02:35:49 +0000
asID:                     269946
IP address blocks:        2803:3850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:3b:92:10:bc:00:6c:42:7e:fe:b9:2d:b9:d1:8d:23:a0:62:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
        Validity
            Not Before: Aug 16 02:30:49 2025 GMT
            Not After : Aug 15 02:35:49 2026 GMT
        Subject: CN=B32AC493E7876F301D37717F54D84C5646A88F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:01:55:3e:f7:f5:65:52:1b:af:03:f2:d9:
                    69:de:de:e5:d9:52:3e:74:a1:67:94:6c:35:43:8e:
                    77:3d:5a:03:f5:40:b5:c9:27:68:d6:99:ea:90:8c:
                    72:c8:58:07:97:a6:9b:d4:00:fe:06:36:75:ce:76:
                    27:34:f9:3b:19:f5:05:98:f1:a5:2d:dd:f3:fc:e2:
                    0a:18:09:db:86:78:3e:7b:a8:d9:da:60:9c:d6:4d:
                    db:fe:8d:36:a1:c4:a2:54:b8:5a:6b:7d:b4:25:ab:
                    6e:46:82:6f:ba:e1:7a:65:43:ae:cc:7a:bb:70:f7:
                    56:29:94:cf:1e:33:22:c2:15:54:d4:3c:cf:bc:a6:
                    d1:be:8b:5e:63:f8:c6:91:e3:50:6b:c8:08:89:d6:
                    44:63:01:66:b1:f6:c5:3d:00:27:15:50:36:f6:86:
                    7d:6c:45:8b:17:54:e2:66:17:43:f4:ef:98:91:30:
                    1d:1b:4d:30:51:78:a2:1a:f8:c5:8d:10:81:73:54:
                    a4:7b:f8:cf:2f:ef:21:c9:38:56:0c:a4:37:6f:bf:
                    40:d8:1e:39:76:43:c3:a7:33:9d:97:2c:ba:5c:75:
                    94:a2:96:7c:2f:35:f5:f4:15:68:00:29:73:84:cd:
                    76:94:be:a1:cf:f2:1d:99:d2:c9:f6:de:26:67:03:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:C4:93:E7:87:6F:30:1D:37:71:7F:54:D8:4C:56:46:A8:8F:2E
            X509v3 Authority Key Identifier:
                keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3438203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3850::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:d4:2e:b8:8d:70:20:77:6c:bf:ff:30:e3:78:df:9b:d0:
         02:76:1e:ea:a4:f6:26:f8:cd:b4:af:69:95:91:ce:b6:12:ea:
         71:b9:e7:ae:09:eb:ab:27:9c:80:35:94:81:1e:c3:20:00:40:
         32:3c:29:64:96:31:21:a5:3e:ca:b6:cd:3f:be:9d:67:c7:a2:
         1a:26:24:f5:62:50:c5:ba:f2:d9:1e:d1:0f:1c:c4:50:b7:05:
         fd:9a:cf:d8:e0:ee:7f:b0:e2:2b:59:e5:d4:ab:53:06:5d:cc:
         f7:d9:09:be:b2:4f:1e:00:8c:7f:77:32:7e:c8:60:d0:41:20:
         cf:34:0c:10:6b:b7:40:15:8a:63:7d:69:33:34:84:1d:53:10:
         b3:9f:3f:e8:b2:5a:88:d5:e3:63:3a:d0:47:25:5b:81:03:6b:
         48:3f:ff:24:e7:c4:6a:9c:2d:91:ca:89:5e:9e:e5:93:aa:77:
         79:3c:8c:a4:4e:bd:cc:79:4d:3d:8e:b8:8d:a4:b8:c7:53:8e:
         06:81:f6:d9:d6:6a:db:1e:7d:f6:05:b0:43:76:37:88:97:78:
         5a:1c:31:8b:23:65:ae:60:f4:d1:42:d0:58:9a:88:ce:37:cd:
         45:46:82:7f:27:d8:ce:0b:fa:f2:6e:b7:67:ca:40:0a:6b:a6:
         a9:be:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:32 2025 by rpki-client