Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3530303a3a2f34302d3430203d3e20323733383337.roa
File:                     323830333a363935303a3530303a3a2f34302d3430203d3e20323733383337.roa (raw, json)
Hash identifier:          P+bbF4Fei5u9xcqqjsTUf7F+oAderKWwYE0GHchWNbw=
Subject key identifier:   2B:91:41:E9:9C:1F:24:EC:AC:2B:95:CA:E4:58:25:FC:FB:A4:A8:6B
Certificate issuer:       /CN=8B3641D8012C1A22F326467848DB2095ED4A79F6
Certificate serial:       53561733711F3A709B669EA2D051DAD53481171A
Authority key identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3530303a3a2f34302d3430203d3e20323733383337.roa
Signing time:             Tue 15 Jul 2025 23:00:00 +0000
ROA not before:           Tue 15 Jul 2025 22:55:00 +0000
ROA not after:            Tue 14 Jul 2026 23:00:00 +0000
asID:                     273837
IP address blocks:        2803:6950:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:17:33:71:1f:3a:70:9b:66:9e:a2:d0:51:da:d5:34:81:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B3641D8012C1A22F326467848DB2095ED4A79F6
        Validity
            Not Before: Jul 15 22:55:00 2025 GMT
            Not After : Jul 14 23:00:00 2026 GMT
        Subject: CN=2B9141E99C1F24ECAC2B95CAE45825FCFBA4A86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:7c:b8:00:e4:84:0b:6d:3e:a4:21:d7:ed:
                    57:93:d6:d5:b2:e8:e2:0a:2d:b2:15:10:96:54:28:
                    4f:71:06:3d:7f:89:34:35:b3:fa:de:ff:91:02:84:
                    7a:35:0f:3c:9b:90:59:1b:86:c3:62:a6:d9:b1:ea:
                    70:61:78:c9:5b:91:49:ef:48:87:bf:c6:71:36:5c:
                    4c:c7:8e:c7:16:7d:d7:ec:55:84:22:ad:2a:6b:b8:
                    d4:e9:56:e5:76:65:ab:d9:f9:73:2d:ec:2e:8d:9c:
                    cc:b6:cd:ac:4c:4c:40:61:09:cd:b2:35:69:9c:d4:
                    c0:30:2e:7d:42:9f:8b:8e:fb:f0:d1:7c:5e:9f:e6:
                    4a:97:fa:79:41:d5:3c:7d:7c:a2:41:0e:e6:44:50:
                    67:39:4e:ea:ab:cb:88:92:09:82:3e:2f:69:7f:e7:
                    f0:76:2a:83:a8:ba:55:10:03:da:3e:72:94:c6:8d:
                    46:40:b0:c8:de:5d:4e:89:cc:41:c2:04:0e:76:1d:
                    d1:b4:6d:25:34:7c:78:9f:82:1d:8a:1d:34:be:87:
                    d3:ad:52:55:a2:48:1f:02:c3:68:de:ea:94:c9:27:
                    97:a9:1c:37:51:eb:9f:0d:90:ce:55:d5:ab:52:ca:
                    2f:80:ca:2e:87:fe:46:a6:64:ba:21:9a:b8:c3:1d:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:91:41:E9:9C:1F:24:EC:AC:2B:95:CA:E4:58:25:FC:FB:A4:A8:6B
            X509v3 Authority Key Identifier:
                keyid:8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3530303a3a2f34302d3430203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6950:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:d0:7b:5d:3c:d1:07:5f:1e:d1:24:f6:15:03:ac:63:ef:ec:
         ec:7d:65:80:f3:91:38:d1:ec:e3:37:0a:01:43:08:cb:61:ce:
         97:22:11:b5:6a:b8:01:2d:04:c1:7b:a5:dd:0f:c3:6a:35:e8:
         9e:ce:b1:20:e2:30:e7:00:d8:e0:8c:42:71:ab:55:4d:80:e2:
         6a:4d:a3:af:91:21:4f:de:49:cb:35:54:46:0d:ae:ce:21:77:
         74:45:8d:33:2d:5a:8d:c5:d9:47:65:1e:e6:26:08:13:7e:55:
         bd:4c:aa:b2:b1:03:ac:3c:94:68:7e:ba:d7:5c:95:84:a7:28:
         d4:c5:01:96:88:67:7c:61:9b:5a:f8:67:b6:bc:05:4b:64:fc:
         92:80:ff:74:56:30:9d:71:c6:bf:43:ef:00:be:ef:10:7e:43:
         aa:1a:9a:81:7c:ec:aa:46:75:3e:0a:78:67:da:c1:30:e9:99:
         e9:6b:18:26:7d:e8:61:f4:4e:85:30:0d:13:0f:aa:81:0e:5e:
         64:5c:64:03:72:4f:22:36:ea:78:f9:de:2e:de:40:16:40:4c:
         b5:8a:71:60:75:c0:33:78:74:bb:ab:e9:dd:33:91:00:d0:55:
         5b:ff:0e:2d:b2:df:1d:59:e9:16:77:5a:a7:38:f2:d4:5a:69:
         88:87:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:22:35 2025 by rpki-client