Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20323639383036.roa
File:                     323830333a366236303a3a2f33322d3438203d3e20323639383036.roa (raw, json)
Hash identifier:          c7gw1d0vhRM8LloUuRGMyT3uePBdjYeFaDMG5mC+AHM=
Subject key identifier:   9E:71:66:9A:E9:91:18:99:36:1D:FD:72:EE:92:CF:54:9C:63:95:C7
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       3A7DEA881840D6DCE172E4DF5A1F02FB565EFA2A
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20323639383036.roa
Signing time:             Tue 09 Sep 2025 18:44:05 +0000
ROA not before:           Tue 09 Sep 2025 18:39:05 +0000
ROA not after:            Tue 08 Sep 2026 18:44:05 +0000
asID:                     269806
IP address blocks:        2803:6b60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:ea:88:18:40:d6:dc:e1:72:e4:df:5a:1f:02:fb:56:5e:fa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Sep  9 18:39:05 2025 GMT
            Not After : Sep  8 18:44:05 2026 GMT
        Subject: CN=9E71669AE9911899361DFD72EE92CF549C6395C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:4a:5f:41:65:6f:e5:81:a3:94:93:c4:80:
                    02:44:a6:a0:08:6d:06:cc:03:43:ac:11:dd:7c:ca:
                    e9:5e:90:80:89:4e:83:9b:85:d8:1c:41:cf:d7:65:
                    22:fb:96:05:2e:ea:39:88:1a:67:39:90:c2:04:a7:
                    0d:5c:d8:82:87:ca:13:6b:a0:ac:ae:c0:95:eb:02:
                    1b:14:1f:6d:f3:67:49:bb:20:b7:01:0f:53:dc:25:
                    05:de:8c:45:1e:5f:86:3f:2f:16:65:46:08:34:27:
                    a3:28:3c:56:d3:e5:a0:83:95:4d:9b:6c:b7:ba:9a:
                    92:93:63:f7:48:60:0e:8d:d5:01:21:02:71:0c:70:
                    24:a5:2b:9c:b7:e7:37:c6:48:54:f2:3a:2f:d9:cd:
                    9c:db:7e:bf:29:11:29:90:07:9e:0f:a6:9a:80:b3:
                    10:4d:f9:2a:1a:83:ff:be:9b:01:29:a0:f3:90:f5:
                    42:d6:be:01:61:a0:c7:b8:cc:a1:e3:c7:01:ed:50:
                    6b:ec:ed:ee:ab:c4:fc:c4:72:ab:9e:d0:af:b3:5d:
                    18:1c:30:c7:65:96:f8:61:d6:97:66:26:27:57:4d:
                    62:a2:56:e5:e1:4a:0e:75:b9:a3:94:9c:06:c4:bc:
                    de:23:4f:78:03:8d:c2:8e:85:af:83:a2:0a:5b:20:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:66:9A:E9:91:18:99:36:1D:FD:72:EE:92:CF:54:9C:63:95:C7
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20323639383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:81:cf:4b:22:8b:4f:77:f7:db:08:c3:63:9a:81:c2:53:c0:
         7d:98:29:3d:ad:ae:99:ae:8e:93:0b:2f:07:4b:fc:75:db:f1:
         84:92:af:2e:d8:e4:eb:d8:54:72:ea:05:78:e6:36:26:91:0a:
         89:30:f0:da:b7:00:3e:33:ed:f7:1e:bc:b8:1e:cd:51:e6:8b:
         0d:dd:ad:17:8b:b1:68:51:1c:73:9c:02:b3:9d:66:e6:5e:03:
         50:e7:06:d3:ba:8d:c0:36:09:83:14:01:55:01:fe:5a:b2:50:
         76:9b:ce:37:95:e2:50:d9:ed:d7:de:d0:fa:98:d0:da:d7:7b:
         18:9d:fd:23:93:b8:54:11:fa:f7:d5:ae:27:c5:9c:bc:27:7e:
         b1:69:df:19:5a:b9:a2:7a:b1:8b:e2:e8:04:b2:95:07:0f:93:
         78:f4:9f:5b:99:a9:d2:c6:43:3b:2d:5d:a2:3f:8f:76:f1:f4:
         cc:7c:e4:8e:09:da:1f:60:68:13:e8:da:23:95:9f:3b:ca:ee:
         ae:e7:d7:77:f0:01:45:be:e9:ed:12:d6:a3:24:0a:18:3e:3d:
         f3:4f:45:93:dd:29:df:ec:1a:81:30:05:96:e9:42:44:f6:a7:
         0b:f8:14:f0:19:9d:00:6d:87:9a:7b:1d:bb:88:34:fc:80:1c:
         06:d1:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:47:44 2025 by rpki-client