Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3438203d3e20323730303133.roa
File:                     323830333a323965303a3a2f33322d3438203d3e20323730303133.roa (raw, json)
Hash identifier:          YUvgUQrJ//Rxj7JVHm65Mt6juFuAcPo7Di3twPdq7ww=
Subject key identifier:   8B:D0:06:67:46:7E:1A:C0:E1:09:50:10:44:63:6B:23:21:3C:3B:57
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       09F56EF36629A4CAFC3BBC6DDF3CAC07C6E98601
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3438203d3e20323730303133.roa
Signing time:             Sun 06 Jul 2025 01:50:00 +0000
ROA not before:           Sun 06 Jul 2025 01:45:00 +0000
ROA not after:            Sun 05 Jul 2026 01:50:00 +0000
asID:                     270013
IP address blocks:        2803:29e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 13:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f5:6e:f3:66:29:a4:ca:fc:3b:bc:6d:df:3c:ac:07:c6:e9:86:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Jul  6 01:45:00 2025 GMT
            Not After : Jul  5 01:50:00 2026 GMT
        Subject: CN=8BD00667467E1AC0E109501044636B23213C3B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:ea:ff:b4:c7:62:cf:b9:03:68:fe:66:d0:
                    1b:b4:27:7c:c3:94:ff:bb:b6:50:1e:25:65:7f:1f:
                    ae:a2:07:5d:4f:42:3a:8d:f2:8b:dd:dd:bc:16:1c:
                    b3:2f:7c:ab:0c:16:73:00:46:cd:73:10:1f:da:37:
                    fc:bb:35:03:b9:be:76:95:82:27:29:f7:85:48:1c:
                    16:4c:1b:bd:a4:b3:a5:fa:88:50:6e:a9:c6:41:7b:
                    77:2c:a1:20:95:16:b4:7d:7c:d1:38:cc:64:db:39:
                    0d:80:b8:5e:ea:35:80:a9:ed:66:3f:06:b5:81:4a:
                    44:e8:2e:de:7c:04:7a:9c:ad:21:69:3c:a2:17:b3:
                    fb:ee:25:6b:05:06:17:9d:15:4e:20:e7:07:61:90:
                    c6:75:c0:e6:47:45:14:30:48:81:39:c3:c9:d1:bd:
                    33:cc:16:52:62:e2:ea:15:a9:b4:5f:79:ca:de:da:
                    a9:87:94:76:ee:f0:da:27:fc:57:de:7d:06:91:86:
                    b1:f1:3d:7b:f1:a3:dd:e0:45:ea:2b:39:c5:55:6d:
                    08:3c:38:b8:ee:7e:e0:7c:16:9c:9b:7e:68:13:ff:
                    e3:e7:1c:46:6a:7c:e6:17:e1:8d:1c:6b:1c:82:94:
                    83:85:3e:97:d5:6a:cc:28:47:cb:99:47:20:a2:77:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D0:06:67:46:7E:1A:C0:E1:09:50:10:44:63:6B:23:21:3C:3B:57
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3438203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:29e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:19:0b:b4:9c:9c:8b:bd:60:3e:81:04:dd:c3:35:61:28:
         c4:58:f8:ce:40:95:bc:81:d9:14:80:bb:c2:1e:5b:5a:2f:8e:
         b6:61:2a:71:3a:eb:8c:0c:bf:68:2d:b8:89:11:f0:d5:65:ff:
         67:68:aa:59:c0:53:f7:92:2f:28:b3:bf:ae:68:e9:b8:b7:c4:
         d0:16:c1:84:0a:cc:d3:f8:0c:ca:1d:77:8a:68:5c:86:60:1f:
         5c:37:d9:dd:41:89:19:68:04:5b:85:4a:e8:81:27:c8:2a:83:
         82:d0:b2:92:ae:64:34:4f:4d:9e:0d:e4:32:d8:68:4b:dc:f5:
         55:da:80:09:28:89:53:19:b0:53:97:2a:9f:14:ac:03:38:3a:
         2e:67:cf:18:93:fe:21:0b:50:6a:d0:31:57:87:38:31:f0:61:
         1a:43:f9:94:f4:18:00:c6:0f:fc:2a:a5:af:f7:f0:aa:4e:6e:
         ac:f4:8d:79:bd:65:89:35:4e:68:0a:92:d2:13:cb:dc:81:45:
         71:89:35:d8:10:8c:0e:4f:2d:8f:d4:5a:cf:06:97:64:cb:33:
         46:63:9b:5d:f7:8a:3a:f0:9b:7d:cd:d9:9e:dc:5c:24:59:b9:
         f8:74:59:07:cb:6f:da:3c:f4:a3:3e:c6:0b:85:86:11:43:66:
         b6:ab:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 05:10:30 2025 by rpki-client