Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/323030313a313232323a3a2f33322d3332203d3e20323732343033.roa
File:                     323030313a313232323a3a2f33322d3332203d3e20323732343033.roa (raw, json)
Hash identifier:          rd2Y/exBqD0MSXROKAXrLui6bAOr3UDPL+jgGwO7ts0=
Subject key identifier:   98:D6:7C:78:07:8C:78:C8:C2:5B:09:22:BF:81:9D:28:1A:78:50:72
Certificate issuer:       /CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
Certificate serial:       0759D6E6BC628E19D4260ED3BD559CAA02B1BA6B
Authority key identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/323030313a313232323a3a2f33322d3332203d3e20323732343033.roa
Signing time:             Wed 17 Sep 2025 20:47:11 +0000
ROA not before:           Wed 17 Sep 2025 20:42:11 +0000
ROA not after:            Wed 16 Sep 2026 20:47:11 +0000
asID:                     272403
IP address blocks:        2001:1222::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 02:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:59:d6:e6:bc:62:8e:19:d4:26:0e:d3:bd:55:9c:aa:02:b1:ba:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
        Validity
            Not Before: Sep 17 20:42:11 2025 GMT
            Not After : Sep 16 20:47:11 2026 GMT
        Subject: CN=98D67C78078C78C8C25B0922BF819D281A785072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:8b:fa:ad:00:01:8f:fc:5c:3c:ec:c0:ea:
                    48:96:26:44:d2:63:02:63:eb:16:0f:a4:76:75:95:
                    93:41:15:e0:33:1c:6d:84:67:d9:86:e7:a0:90:9d:
                    2d:27:a3:91:26:08:c6:92:6f:29:55:28:b8:17:64:
                    24:df:da:2c:7c:12:6f:95:26:74:98:40:fc:a0:86:
                    25:95:33:cf:c1:5f:0c:cf:33:f9:25:0c:d7:6f:74:
                    83:f8:19:65:12:0f:1c:39:f7:64:d7:87:5b:34:de:
                    1b:9d:cb:3d:84:45:03:e3:53:31:70:66:72:36:17:
                    44:e7:fb:7a:f0:bd:6e:46:5f:10:49:14:12:9f:2c:
                    9b:5d:e3:3b:3a:3e:6d:92:99:a5:4e:d7:a7:20:0e:
                    75:e1:41:e9:b7:6e:5e:60:63:22:61:6f:81:cd:24:
                    3a:5b:bb:d0:84:28:3c:db:41:d6:82:aa:a0:96:3f:
                    51:ae:22:76:f5:c4:63:e2:8a:5e:13:11:e6:73:aa:
                    e9:88:8f:4e:67:8b:14:c1:f4:40:8e:8c:4e:5a:c6:
                    b2:20:ab:f0:03:33:11:ed:01:3e:fd:c4:13:02:ae:
                    cc:9a:47:bc:d1:5a:7d:4d:c3:1b:06:42:48:9d:e0:
                    bf:86:40:4d:ff:9c:11:23:80:ef:63:0d:17:ac:ec:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:7C:78:07:8C:78:C8:C2:5B:09:22:BF:81:9D:28:1A:78:50:72
            X509v3 Authority Key Identifier:
                keyid:9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/323030313a313232323a3a2f33322d3332203d3e20323732343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1222::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:96:f6:b3:41:8d:8f:0c:e7:cd:d0:7c:4f:48:89:e4:2b:f1:
         84:93:16:59:41:f4:b0:f6:ad:96:5a:e5:de:51:a2:46:cf:55:
         9c:9c:b2:e0:9d:a6:5d:7d:f1:a6:8e:04:7c:66:56:85:b1:6a:
         39:6a:55:b9:75:5f:78:d9:db:7e:31:5d:e7:e5:86:7c:c4:4f:
         06:58:44:69:86:11:07:93:8e:2d:e0:91:af:17:d2:ee:26:9e:
         92:b5:07:c6:ca:18:fb:3a:ed:13:e5:20:f5:d6:cf:c9:d8:08:
         1e:62:79:90:05:f1:2b:76:62:30:37:78:39:5d:f9:f0:e0:18:
         d7:ea:7a:fb:ff:27:fd:13:c4:9c:4a:56:57:56:d8:d6:0d:7f:
         71:d4:1f:86:c0:82:c2:c0:51:38:fc:fe:70:37:a5:1d:5a:94:
         53:02:b3:73:a8:41:30:b8:ed:1e:a6:48:40:e4:73:2d:47:d3:
         b7:ff:aa:eb:c1:ca:1d:3d:86:9c:f7:b3:d1:ae:64:bc:91:d8:
         b8:de:b2:48:94:d3:d7:5e:e8:a1:e9:4d:56:5a:97:27:c6:79:
         b2:47:8b:84:b2:e2:9b:4f:04:dc:a9:76:1d:21:c5:98:b8:65:
         ad:8a:25:16:d0:b8:dc:f8:3b:67:fd:d4:55:cf:d9:4c:93:42:
         4c:cc:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:32:54 2025 by rpki-client