Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa
File:                     323830333a613736303a3a2f33322d3438203d3e20323639383535.roa (raw, json)
Hash identifier:          25QobNTjf5OSL8FxaDrPnzp81PkqtLU6RM4hQ1HTLP4=
Subject key identifier:   03:D7:77:F9:D6:E2:70:4D:33:07:72:3D:F2:60:9A:38:0D:3C:07:F9
Certificate issuer:       /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
Certificate serial:       147A7C372C3214E68514F95F0B1328FE3E5FDDC2
Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa
Signing time:             Mon 25 Aug 2025 01:15:00 +0000
ROA not before:           Mon 25 Aug 2025 01:10:00 +0000
ROA not after:            Mon 24 Aug 2026 01:15:00 +0000
asID:                     269855
IP address blocks:        2803:a760::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7a:7c:37:2c:32:14:e6:85:14:f9:5f:0b:13:28:fe:3e:5f:dd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
        Validity
            Not Before: Aug 25 01:10:00 2025 GMT
            Not After : Aug 24 01:15:00 2026 GMT
        Subject: CN=03D777F9D6E2704D3307723DF2609A380D3C07F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:7e:de:43:33:b3:64:70:9b:cf:3f:38:04:
                    ca:49:08:0f:d5:92:33:10:62:0a:9f:c1:c7:df:ad:
                    ed:40:15:8b:4f:d7:a4:e6:46:fa:b8:a0:6e:f0:b8:
                    1b:61:21:58:3d:c3:cf:a4:aa:01:24:9b:c2:50:1c:
                    0a:17:e3:97:1a:91:87:72:af:29:4f:e8:64:5a:d7:
                    ee:e5:a9:50:f3:2c:bd:64:a4:00:bf:26:35:dc:94:
                    40:c8:50:82:5f:1c:d4:a4:2a:5c:22:33:06:13:c5:
                    96:41:a8:72:1a:73:7d:4c:27:90:ec:eb:da:b5:5d:
                    ac:b3:ed:1e:6f:3c:ec:5e:1f:ff:87:5f:3e:45:0f:
                    7f:1d:bb:bd:6e:83:67:0e:eb:b8:5e:87:71:f7:2f:
                    ef:fa:02:73:17:b8:5c:57:85:37:af:96:89:95:bd:
                    04:46:2e:52:c6:44:75:9f:62:38:4a:b7:f2:2c:6e:
                    40:71:ea:12:c7:77:86:48:6a:dd:e2:ca:be:ea:8a:
                    0f:1a:4e:a0:a7:95:0a:52:95:75:63:9c:d5:9a:f2:
                    5e:36:b0:b5:44:33:40:f4:af:8c:b4:5f:da:11:f0:
                    e7:72:4e:21:b5:59:88:56:8f:44:06:c2:5f:71:83:
                    08:14:2e:a2:84:55:ee:42:97:dd:04:44:2d:36:ce:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:77:F9:D6:E2:70:4D:33:07:72:3D:F2:60:9A:38:0D:3C:07:F9
            X509v3 Authority Key Identifier:
                keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a760::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:71:b9:35:ae:7e:3e:40:11:08:3f:45:2b:46:49:b5:10:
         f0:86:67:c4:86:19:52:f1:0d:f8:53:f5:94:e8:c7:d1:45:43:
         2d:d4:bd:b8:24:b5:ea:98:c6:bb:6d:4b:fb:78:a9:23:ff:a3:
         fb:55:cc:0f:23:84:5c:d4:89:d9:63:3d:a9:73:b6:31:d8:83:
         c4:14:ef:f4:4a:70:54:21:ca:c9:37:dd:11:41:0f:30:c8:fa:
         f2:d1:8a:98:38:8c:4f:7a:31:fb:b2:c5:19:72:b9:f0:36:6e:
         8f:dd:fd:4e:3e:f3:a1:2c:55:ba:5c:97:f3:97:80:b1:55:b7:
         09:5d:b4:6f:90:0c:1f:03:4e:d6:e8:4d:7a:1a:16:ef:01:3e:
         e8:3b:44:3e:3b:e3:9a:50:75:ca:11:da:e0:9a:8d:a2:93:2e:
         0e:00:2d:93:a0:d8:3f:a5:8f:15:db:d0:5b:93:c0:e8:fb:39:
         4a:a0:88:b6:56:57:2e:7e:92:74:36:d4:3e:dc:65:69:8f:b7:
         09:75:09:e8:42:c2:d9:bc:33:0c:7c:68:fa:9a:7a:85:b4:e1:
         fb:fd:0f:31:65:77:c6:06:d9:ec:ff:e5:93:00:0f:99:f2:44:
         40:64:bb:60:72:fe:6f:e5:d3:7b:27:25:da:04:bf:f1:f4:cf:
         65:74:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:31:41 2025 by rpki-client