Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/323830333a626434303a3a2f33322d3438203d3e20323634363932.roa
File:                     323830333a626434303a3a2f33322d3438203d3e20323634363932.roa (raw, json)
Hash identifier:          wmQH0WhvNzAFVcsC6WDB95X1l0Hs7OB5SrtcfQLiyrI=
Subject key identifier:   02:7C:0F:A4:EA:19:A1:71:2C:84:A5:08:D7:4E:FE:EC:07:86:59:2E
Certificate issuer:       /CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
Certificate serial:       11987B8C0702502A322BBEE52CF1C2C14C8A6DCA
Authority key identifier: 77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/323830333a626434303a3a2f33322d3438203d3e20323634363932.roa
Signing time:             Tue 07 Oct 2025 13:35:02 +0000
ROA not before:           Tue 07 Oct 2025 13:30:02 +0000
ROA not after:            Tue 06 Oct 2026 13:35:02 +0000
asID:                     264692
IP address blocks:        2803:bd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:98:7b:8c:07:02:50:2a:32:2b:be:e5:2c:f1:c2:c1:4c:8a:6d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
        Validity
            Not Before: Oct  7 13:30:02 2025 GMT
            Not After : Oct  6 13:35:02 2026 GMT
        Subject: CN=027C0FA4EA19A1712C84A508D74EFEEC0786592E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:ed:2c:fc:bb:22:e8:88:49:53:e2:b4:9b:
                    67:a3:39:eb:44:88:1b:d4:40:69:66:fb:da:5b:68:
                    75:7d:92:97:ef:9b:79:1d:4c:75:9e:e4:01:0e:ee:
                    00:ac:4f:cb:56:93:f0:ef:81:aa:50:2c:ae:05:ca:
                    76:e3:9e:63:94:29:14:ca:aa:3d:51:7f:11:ac:da:
                    83:d7:09:54:6a:a2:ff:d2:14:b7:af:7f:b8:db:32:
                    d9:19:bf:cb:60:d0:d7:a5:e8:e4:b3:57:80:ea:ad:
                    d5:34:aa:19:78:fa:74:a0:d0:4b:f7:d1:c8:d8:15:
                    02:ff:32:b6:c3:4f:eb:e9:43:d5:7b:23:27:d7:f9:
                    75:a0:c7:0e:a1:fc:e9:37:e3:81:94:f6:d6:70:f4:
                    9e:e3:db:d3:73:f9:b0:c2:b9:86:60:c0:55:6f:0a:
                    41:d1:74:fc:63:d1:ef:6a:58:d2:a0:bf:e0:a3:35:
                    a8:50:15:d2:43:0c:e3:c9:a6:0c:fb:f6:ab:5e:e4:
                    07:6b:c6:c6:01:01:56:56:8c:47:7d:c6:28:cf:7f:
                    4f:dd:c1:4c:43:29:4b:27:5a:4f:26:e4:d7:e3:da:
                    07:b7:1e:cc:66:a3:ff:f7:d3:61:2d:31:48:d4:49:
                    9f:d2:ed:01:57:bd:f7:63:5d:c8:2f:97:08:bd:27:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:0F:A4:EA:19:A1:71:2C:84:A5:08:D7:4E:FE:EC:07:86:59:2E
            X509v3 Authority Key Identifier:
                keyid:77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/323830333a626434303a3a2f33322d3438203d3e20323634363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:a3:90:50:e0:37:36:22:5c:0f:5a:a5:23:cb:28:a6:6d:
         3c:c0:91:de:f6:11:4c:b9:69:13:f0:1d:c6:05:7f:b4:55:fe:
         ef:a2:18:45:42:b2:74:2f:70:10:51:00:26:c8:08:19:54:0a:
         ac:b4:07:c7:d4:c9:1a:a6:70:09:6d:96:48:86:b9:76:61:e5:
         9c:ec:5d:a9:60:cb:d0:b8:28:e6:e6:12:09:00:68:33:dc:39:
         8a:84:2d:45:c6:1d:4b:f3:f1:4e:ce:a6:a0:04:c3:70:c2:ba:
         44:bb:41:aa:ba:7f:18:9d:28:5b:c0:49:9e:31:a5:95:81:c7:
         49:e3:3f:cb:b3:15:fd:41:5e:61:4c:dc:ef:d0:fe:a6:55:03:
         7c:0f:93:e3:4c:93:d1:11:8e:da:f8:e9:20:9e:81:5a:24:ed:
         b4:90:df:f6:ac:8c:8b:b1:f7:9a:f0:62:c2:30:f8:46:c5:e9:
         fd:e1:9c:1f:36:79:93:6a:10:74:c7:b2:50:96:05:54:3d:00:
         4c:9c:b0:e7:ca:27:1f:25:02:39:76:f7:a6:0f:53:0a:e6:b4:
         49:a0:81:69:07:73:1a:aa:de:70:84:9f:c2:93:66:51:ff:9d:
         e8:08:23:da:ab:20:61:d5:cc:d6:f5:9d:ab:9c:f6:ce:b6:1e:
         19:da:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:33:19 2025 by rpki-client