Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa
File:                     323830333a323061303a3a2f33322d3332203d3e20323636373838.roa (raw, json)
Hash identifier:          yekNO9y+NFXAD+1/cpes5dOylPIbwzhVRlO9YjQsC0s=
Subject key identifier:   95:5B:63:E8:35:C6:16:25:27:28:4E:28:AC:C6:4C:D2:A0:D9:8D:9A
Certificate issuer:       /CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
Certificate serial:       59CA92D37DC5F5482F39B05448F481A9CE3D53DC
Authority key identifier: 54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa
Signing time:             Mon 18 Aug 2025 16:00:00 +0000
ROA not before:           Mon 18 Aug 2025 15:55:00 +0000
ROA not after:            Mon 17 Aug 2026 16:00:00 +0000
asID:                     266788
IP address blocks:        2803:20a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ca:92:d3:7d:c5:f5:48:2f:39:b0:54:48:f4:81:a9:ce:3d:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
        Validity
            Not Before: Aug 18 15:55:00 2025 GMT
            Not After : Aug 17 16:00:00 2026 GMT
        Subject: CN=955B63E835C6162527284E28ACC64CD2A0D98D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:0c:c4:37:80:d0:fe:dd:ee:24:c2:72:e7:
                    93:02:69:40:2b:a5:25:e9:e4:6c:1c:34:d1:70:d7:
                    d0:37:5d:62:6b:05:73:53:6d:0a:70:92:0b:67:c0:
                    69:b0:0d:6c:24:40:7b:a4:40:52:c8:98:20:3f:2f:
                    b9:98:3a:a5:10:93:1e:c5:d4:bc:e4:92:b2:6f:65:
                    c1:0b:af:e3:16:8e:cf:b3:2e:0d:ce:ed:60:26:67:
                    cc:97:db:b9:d0:97:9d:3b:53:2a:4a:85:6d:28:d7:
                    7f:58:12:d4:54:fd:d3:60:ae:30:d7:8f:0e:5d:69:
                    f9:60:2c:46:4f:29:2e:d2:2c:fb:83:c9:66:c8:c4:
                    9b:05:b0:79:34:72:4f:1a:7d:10:4e:0d:2e:aa:32:
                    dd:11:69:c8:72:7f:e8:ed:5d:6b:96:f2:dc:c0:b4:
                    ba:bd:2a:3e:dd:1e:84:ea:22:47:23:1f:72:be:a6:
                    e2:2e:b7:5a:b9:a2:b1:c0:e6:6a:05:bc:c2:d4:49:
                    52:fd:67:2e:b2:3b:d7:6f:c0:2d:57:2e:76:b7:32:
                    2c:d5:19:d5:08:9d:b1:36:90:1f:25:18:07:61:fc:
                    bf:35:45:b5:56:48:3c:15:29:6d:50:13:ac:00:f6:
                    5e:33:27:65:16:f7:93:e4:e9:8b:89:74:9a:c3:af:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:63:E8:35:C6:16:25:27:28:4E:28:AC:C6:4C:D2:A0:D9:8D:9A
            X509v3 Authority Key Identifier:
                keyid:54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:95:98:96:aa:0d:98:df:74:1b:fd:84:07:db:69:34:06:
         24:a4:10:6b:71:d7:b7:62:72:65:5c:ba:fa:49:ab:45:0b:fb:
         26:6f:69:6d:12:1b:b5:74:ae:12:f0:b3:e3:d5:5c:f0:41:0e:
         7f:16:14:fb:89:b1:bd:36:3b:20:ab:aa:68:83:c4:b3:53:ed:
         1d:49:52:ae:e6:b4:5c:c9:6a:12:94:ae:ee:57:09:73:c4:6e:
         2b:90:b9:14:bc:02:6b:e7:64:bc:9c:14:d5:a2:07:27:43:2b:
         9f:ec:19:18:53:10:3f:59:03:6b:d9:c7:12:d2:3f:bf:0f:39:
         b9:6f:a0:f9:07:a3:40:db:3b:60:8d:1f:fb:ae:f9:02:6c:19:
         79:57:41:db:da:0b:36:97:1a:60:e1:1b:81:d5:bc:cb:c5:53:
         54:0e:87:ba:ca:16:08:4b:84:5e:66:73:ed:0f:dc:05:12:5e:
         07:9d:ab:fd:28:4c:9d:0d:4e:b1:b4:4d:08:00:3a:09:fe:2e:
         b4:c5:3d:e8:40:7b:9e:ae:d0:36:4f:b7:b9:73:4d:d0:64:56:
         6c:63:d7:a4:73:d2:d7:b4:63:14:91:4f:e1:44:b2:58:c7:95:
         b2:67:a2:86:3a:f9:8b:61:be:d6:f9:e8:ae:f2:21:54:97:73:
         e8:89:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:07 2025 by rpki-client