Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa
File:                     323830333a343664303a3a2f33322d3438203d3e20323734303837.roa (raw, json)
Hash identifier:          QwqL6dphLvdsSMBlpbzFHv0fJw1NCW2TYo0IqPR3OJo=
Subject key identifier:   D7:7B:F8:2B:23:72:0C:51:F3:11:6F:85:41:0E:18:4B:0F:E9:14:2B
Certificate issuer:       /CN=7B50A65728AA110017AC96AE7DC52D6F3E54A074
Certificate serial:       6E42FDB02B5E33CB35207797D6A8C6C9658E8EF0
Authority key identifier: 7B:50:A6:57:28:AA:11:00:17:AC:96:AE:7D:C5:2D:6F:3E:54:A0:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa
Signing time:             Wed 24 Sep 2025 13:30:00 +0000
ROA not before:           Wed 24 Sep 2025 13:25:00 +0000
ROA not after:            Wed 23 Sep 2026 13:30:00 +0000
asID:                     274087
IP address blocks:        2803:46d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:42:fd:b0:2b:5e:33:cb:35:20:77:97:d6:a8:c6:c9:65:8e:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B50A65728AA110017AC96AE7DC52D6F3E54A074
        Validity
            Not Before: Sep 24 13:25:00 2025 GMT
            Not After : Sep 23 13:30:00 2026 GMT
        Subject: CN=D77BF82B23720C51F3116F85410E184B0FE9142B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:e5:1f:44:74:a4:f0:53:3a:02:78:07:96:
                    cf:13:c4:b8:fb:c0:b1:25:07:fc:1a:f8:cc:fe:f3:
                    14:55:63:d4:3a:17:7f:6f:1a:a8:12:3c:4b:8b:7c:
                    4b:bb:6b:50:c4:32:2f:ad:3c:0c:dc:d7:65:ab:cd:
                    38:43:20:6b:be:2c:86:5d:7c:8f:de:38:40:c5:d3:
                    48:1e:56:5d:aa:3d:df:87:6e:c4:7c:b7:3a:a9:8d:
                    8a:1a:1c:eb:a7:fe:c5:8c:cc:d4:33:0d:25:33:19:
                    6e:7a:54:2f:cd:dc:23:cd:95:6a:c9:47:da:2a:c5:
                    d5:e0:7b:5b:99:52:ed:a2:5e:64:23:98:20:56:33:
                    d3:28:e1:68:09:2e:bd:4b:d6:90:cd:fb:11:e4:a8:
                    d3:70:66:e8:db:77:3b:1a:88:8f:d6:78:a3:23:e7:
                    37:75:0b:28:ba:e1:c1:c4:8c:be:d7:d0:e9:ab:b8:
                    20:cf:81:64:62:b9:08:7b:75:92:29:84:9c:b4:b5:
                    6d:4a:23:2b:d6:65:d1:73:b6:74:6f:24:3b:50:89:
                    94:19:76:ce:a4:80:a0:b5:be:ad:2b:3b:6d:92:41:
                    c1:44:91:24:9b:70:d0:d6:ca:17:ff:fd:f0:1d:17:
                    65:d7:6c:83:4e:bb:a7:31:c6:e6:45:76:f6:ad:b2:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:F8:2B:23:72:0C:51:F3:11:6F:85:41:0E:18:4B:0F:E9:14:2B
            X509v3 Authority Key Identifier:
                keyid:7B:50:A6:57:28:AA:11:00:17:AC:96:AE:7D:C5:2D:6F:3E:54:A0:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:35:fd:6f:cd:96:43:fa:eb:4c:1c:ac:40:40:3d:96:a4:ab:
         b5:9f:95:91:b1:a4:fd:5c:1a:a4:61:1a:74:ba:c0:57:6d:ec:
         06:84:30:b0:b9:45:23:09:c8:e8:c7:4a:46:8a:a5:b1:c2:c4:
         c5:5a:9d:08:e9:6c:5a:b6:8f:2d:80:d6:32:43:a7:35:37:eb:
         c6:ae:f1:5b:6b:a5:2a:bf:70:93:22:60:d1:02:de:1d:8d:59:
         b9:48:9b:11:1a:c8:6f:5e:93:08:79:ca:3e:82:c5:f1:aa:e3:
         eb:09:6d:6b:22:3c:88:6d:29:d4:5f:ba:bb:be:d5:53:d4:f6:
         fe:be:0b:44:8b:48:43:8b:c6:31:ce:f8:2c:c0:c0:5b:72:bb:
         00:60:51:6e:98:c2:66:65:cc:be:af:27:48:64:64:cd:22:28:
         59:b6:9c:c1:af:a5:6c:34:28:a6:ca:be:f7:8c:98:7a:b6:20:
         e4:c6:06:73:aa:b6:21:86:e1:3f:55:96:2f:23:62:bd:42:69:
         ea:ac:8a:7c:88:a0:af:e4:25:f0:b5:9c:3e:36:5e:9a:12:a8:
         ef:b4:6d:fb:9a:d4:4c:d7:d9:52:39:15:20:67:90:f0:b7:77:
         52:95:2f:53:12:6e:4f:9d:2e:1c:ef:9e:14:59:0c:e5:31:e9:
         2f:ff:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:29:22 2025 by rpki-client