Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa
File:                     323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa (raw, json)
Hash identifier:          l/7mQK5pf7z+li0n42dqWGRCX/T6V9U0lK0UjPHclgA=
Subject key identifier:   09:12:34:43:4F:4E:7B:62:3B:57:6B:D7:CD:81:72:63:4B:65:63:BE
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       51BF23BEAE2D794227EB785971BFE419628F381F
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa
Signing time:             Wed 22 Oct 2025 02:50:43 +0000
ROA not before:           Wed 22 Oct 2025 02:45:43 +0000
ROA not after:            Wed 21 Oct 2026 02:50:43 +0000
asID:                     264784
IP address blocks:        2803:a920:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:23:be:ae:2d:79:42:27:eb:78:59:71:bf:e4:19:62:8f:38:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: Oct 22 02:45:43 2025 GMT
            Not After : Oct 21 02:50:43 2026 GMT
        Subject: CN=091234434F4E7B623B576BD7CD8172634B6563BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:fe:ec:2b:76:91:7c:38:e6:bc:9a:1b:22:
                    ee:32:7f:87:cb:dd:30:2b:0e:a8:ee:03:75:35:27:
                    94:88:7d:6b:60:31:80:64:77:5d:e6:af:24:4a:f0:
                    9e:55:84:46:86:54:88:c5:d0:cb:5b:b5:02:f6:46:
                    54:72:f8:0b:82:8d:75:06:79:66:22:dc:cd:b3:13:
                    14:1a:71:e7:25:fb:f6:43:98:5c:98:88:fd:56:af:
                    ec:c2:c7:d0:9c:f9:99:ce:4d:41:bd:85:e0:04:ba:
                    61:92:16:27:d3:47:33:02:2d:f6:3c:bb:0c:8a:79:
                    47:ee:bf:35:38:ac:fa:1e:3f:2b:33:3b:98:1e:d2:
                    9e:2b:43:9a:56:5d:f2:dd:bf:8a:1c:17:34:ef:ab:
                    0c:d5:ad:fd:1e:4c:ea:c0:1f:a6:32:49:b7:97:65:
                    b9:ef:05:0e:f5:54:e0:b8:d5:c9:36:03:29:a5:ed:
                    8e:2a:89:60:df:64:be:1c:c3:cd:5a:ba:b3:1e:09:
                    87:f9:16:43:02:38:12:36:56:1b:c6:63:d6:62:db:
                    09:0a:97:e3:62:42:04:03:e5:b2:0c:6c:13:6d:fb:
                    43:94:4a:c0:d0:dd:a9:84:30:2f:e4:f2:f0:b2:b8:
                    c6:80:45:d0:68:9d:61:57:1d:6a:c2:f6:4d:42:ea:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:34:43:4F:4E:7B:62:3B:57:6B:D7:CD:81:72:63:4B:65:63:BE
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e6:8e:c3:9d:f4:de:f8:a9:c1:ed:6b:cc:c1:7f:e0:0e:64:c1:
         c2:ea:d3:a5:94:19:31:92:b0:0f:8f:03:f9:b7:8c:88:06:98:
         1f:5d:32:7f:24:1e:84:57:ec:d0:8f:07:29:14:18:bd:ec:b2:
         81:ef:bf:bc:62:20:9f:48:7f:16:0a:f4:ba:81:e5:85:81:79:
         74:e9:e7:c7:e4:dc:d1:a2:0d:50:c2:45:15:95:c0:a3:04:fe:
         58:00:af:e4:f3:eb:37:fa:f9:d4:84:36:5d:79:9e:c0:bc:1f:
         ff:0a:a6:5f:02:49:60:4c:f5:bf:77:96:db:fb:b0:f1:f7:d2:
         94:68:e2:17:5d:d9:c2:78:cb:16:90:7a:75:d6:00:3b:46:e2:
         04:ef:ab:90:14:6b:8b:7e:ed:c5:86:bb:e7:62:43:7e:cd:f1:
         37:10:ac:cd:fc:2f:2c:fb:67:e7:22:1a:13:67:78:49:52:23:
         57:ac:80:91:08:7a:81:85:03:bf:b9:fa:d8:52:e4:87:86:af:
         05:b5:19:81:b6:2c:07:ea:ee:d1:70:5b:e5:27:a0:e3:8d:07:
         10:b4:bd:07:be:18:f0:af:af:d5:80:8f:22:b2:30:70:e3:4a:
         e8:6d:f7:a4:2d:12:55:4b:08:c3:bc:43:b1:73:94:27:f4:0a:
         41:13:d3:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 1 21:22:54 2025 by rpki-client