Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393031323a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a333434303a393031323a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          lenTQKaiZJy1FHKI+0uFwhOeT4uRsj/EbthSQGOZ618=
Subject key identifier:   4A:3C:9A:7A:4B:5C:BA:9E:9C:45:BB:74:B0:CC:71:B2:FB:5F:5A:AF
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       58DA5E08948A721DF34294A41C805AF8709C8341
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393031323a3a2f34382d3438203d3e203634313132.roa
Signing time:             Mon 21 Jul 2025 20:26:00 +0000
ROA not before:           Mon 21 Jul 2025 20:21:00 +0000
ROA not after:            Mon 20 Jul 2026 20:26:00 +0000
asID:                     64112
IP address blocks:        2803:3440:9012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:da:5e:08:94:8a:72:1d:f3:42:94:a4:1c:80:5a:f8:70:9c:83:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Jul 21 20:21:00 2025 GMT
            Not After : Jul 20 20:26:00 2026 GMT
        Subject: CN=4A3C9A7A4B5CBA9E9C45BB74B0CC71B2FB5F5AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:bb:b7:92:17:a4:6a:f4:bb:42:68:e8:d1:
                    c3:8c:7c:83:44:71:a5:02:ff:74:ea:d4:fe:88:42:
                    6d:a3:16:9c:03:4f:47:37:68:cc:b9:4d:7c:41:27:
                    42:1c:e9:0d:14:87:d3:8b:a8:98:e5:d6:ce:57:27:
                    6a:d5:c5:30:30:2b:10:f6:c6:4a:a6:bd:99:9c:4b:
                    89:16:5f:58:a6:8f:58:03:49:a2:fa:41:54:65:13:
                    24:a5:52:e1:c9:6d:4d:b0:79:db:c7:0f:55:b0:08:
                    a4:ad:32:ef:45:e9:1d:0f:68:3d:14:91:0d:35:a0:
                    c6:3c:b1:0c:96:8d:df:f0:2e:2f:75:76:df:b0:8f:
                    90:0f:41:62:c6:8f:b1:0a:be:33:3d:12:3f:b9:37:
                    bf:df:0d:26:c2:68:ff:c1:5e:56:0b:fa:2b:61:5a:
                    18:ff:30:0c:4a:eb:39:98:64:b4:10:7d:a3:91:1e:
                    00:de:0d:d7:3f:8c:89:f9:5b:22:f6:5f:8b:1d:31:
                    a4:64:6a:d8:56:94:1c:e2:72:46:53:4b:e4:51:59:
                    f7:90:1d:9a:00:6a:6f:9b:93:47:28:79:9d:e9:02:
                    16:41:42:39:f0:ad:40:c9:7d:70:18:cd:55:b4:4c:
                    d7:0b:3b:31:94:85:c2:82:f4:b8:b8:2a:de:0d:e6:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:9A:7A:4B:5C:BA:9E:9C:45:BB:74:B0:CC:71:B2:FB:5F:5A:AF
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393031323a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9012::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:6c:1c:57:e5:6b:b0:bf:e3:18:16:64:6f:3b:88:7d:ba:
         85:20:85:33:e1:cf:6e:3e:91:87:4b:77:fa:0e:7e:8a:6b:77:
         79:97:a5:9f:ce:e2:1d:97:09:54:b8:08:42:8d:2a:db:5e:17:
         57:16:36:59:0e:15:b1:cb:e8:ec:3b:27:66:00:e3:3c:ff:4e:
         9e:75:c2:d0:a0:64:f7:06:fd:9b:2d:7c:6c:09:2d:06:06:b2:
         89:8f:af:70:d1:fa:a6:1b:c7:ce:88:6e:0f:74:83:b7:8d:9e:
         2d:41:fd:c2:0b:4d:4b:64:ac:48:b2:fe:9a:db:ec:cc:95:6c:
         48:50:79:8c:f6:5c:ae:26:94:63:43:3f:f6:05:70:25:b9:00:
         82:ee:3d:bd:88:29:ce:2b:00:16:89:9a:08:50:61:8d:10:c9:
         f0:f6:ed:01:92:b3:4a:9f:1f:c5:de:9d:c1:7d:e2:3c:e5:8f:
         2a:10:2a:43:a2:3b:7d:71:c5:79:1a:15:0b:23:c1:e0:54:67:
         89:5f:0a:d7:9d:26:23:18:f0:5f:8b:0d:ab:e6:9f:18:81:37:
         c2:65:77:8d:1d:d8:cf:b5:34:b6:93:fd:b9:cc:e8:a6:f1:4f:
         0b:32:4b:3b:83:74:6c:a2:e9:a8:a4:5d:f0:6c:82:04:14:a5:
         50:4a:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:01 2025 by rpki-client