Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3438203d3e203233333833.roa
File:                     323830333a336138303a3a2f33322d3438203d3e203233333833.roa (raw, json)
Hash identifier:          1lkMqjCShdHCw7q/+qA0iLQMqk2RSmWAMpRYVJI7Vw0=
Subject key identifier:   07:82:95:AC:20:33:24:E8:3A:B9:E7:F5:11:C4:43:71:7F:38:94:75
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       12CBD2BDBF107947EEE0C3CAF83B54FA33C4650F
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3438203d3e203233333833.roa
Signing time:             Thu 14 Aug 2025 22:40:00 +0000
ROA not before:           Thu 14 Aug 2025 22:35:00 +0000
ROA not after:            Thu 13 Aug 2026 22:40:00 +0000
asID:                     23383
IP address blocks:        2803:3a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cb:d2:bd:bf:10:79:47:ee:e0:c3:ca:f8:3b:54:fa:33:c4:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Aug 14 22:35:00 2025 GMT
            Not After : Aug 13 22:40:00 2026 GMT
        Subject: CN=078295AC203324E83AB9E7F511C443717F389475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:b1:82:d9:a6:c6:6e:2d:85:1c:a3:d3:cc:
                    61:ff:2b:ba:81:53:57:d9:04:62:d0:16:80:61:8f:
                    47:0e:99:57:d9:cb:aa:4f:09:e4:a4:8c:09:3a:71:
                    67:3b:c5:83:6e:a4:f6:69:3c:a4:81:3c:95:f1:f8:
                    d5:b2:d5:b4:3b:9b:99:73:1c:a7:c3:5f:c2:ba:35:
                    6e:57:36:19:bf:dc:ab:2d:dc:84:63:a7:12:71:8e:
                    4b:bf:4a:69:6b:2b:1b:97:5e:63:5f:20:2d:2d:79:
                    ee:7a:33:5f:c9:42:93:a3:9f:08:34:38:84:52:ff:
                    9e:13:cd:ab:35:9e:1a:88:74:bb:fa:16:44:5b:67:
                    32:b2:96:e2:22:79:03:38:96:3e:e6:23:8a:00:e6:
                    fb:09:7f:46:69:e1:bd:b7:da:b5:1c:8c:f3:f4:d1:
                    0d:31:78:4c:90:73:61:c3:4c:06:a0:bf:7b:36:7e:
                    61:45:5a:90:3b:59:97:2e:ef:1a:6c:8f:b1:40:5b:
                    75:b2:44:63:fc:11:08:65:28:be:c6:0c:d8:9b:d8:
                    e4:71:24:5c:d8:29:44:88:98:4e:20:5a:5c:63:91:
                    2e:20:3a:e7:5c:ae:8c:2b:5d:1e:2b:dd:60:94:7f:
                    be:98:b3:54:d5:12:83:32:46:5f:90:0d:0e:43:e4:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:82:95:AC:20:33:24:E8:3A:B9:E7:F5:11:C4:43:71:7F:38:94:75
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3438203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:4f:15:78:3f:e6:6c:3d:af:7d:9f:1e:98:18:44:88:88:
         79:e8:2c:de:9c:ce:d1:48:46:c5:c0:2b:e8:aa:52:c8:ad:12:
         7e:66:6d:dd:e7:84:96:bd:4c:b9:9c:7e:b0:11:20:21:c1:48:
         f5:7a:a3:4f:62:70:9b:bc:5e:e4:76:19:44:2b:d4:4f:0f:b7:
         c2:0b:db:ee:c8:52:1a:13:a4:aa:65:a3:d2:83:d4:1f:99:88:
         45:42:da:d1:b5:86:aa:33:10:0c:06:19:34:13:f5:14:cd:dd:
         d1:ae:95:ba:5b:63:aa:0a:25:83:04:ae:14:cd:01:be:5c:b1:
         f7:86:33:f7:ce:c2:2e:26:4d:06:fe:8c:b8:6f:33:e3:bd:a0:
         f4:89:92:a1:4f:79:7f:d7:2d:aa:5b:3b:d1:5b:cc:3d:96:ca:
         41:1f:65:dc:a6:96:97:f9:7f:06:f7:4d:60:4d:d9:32:f6:13:
         58:a3:fa:c0:b6:0d:d5:cf:69:a6:33:b2:b2:86:93:38:7c:d6:
         7f:9c:e0:54:99:b0:c0:99:05:f2:a4:a4:99:14:9e:04:25:5d:
         b3:5b:1e:6e:8d:b2:1e:e6:06:63:dd:ca:21:24:64:0b:f6:28:
         79:27:11:ad:86:7b:24:af:6a:e8:51:32:32:5f:89:e9:a6:ec:
         30:a8:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:42:20 2025 by rpki-client