Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa
File:                     323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa (raw, json)
Hash identifier:          oYljaO0LPmxAIquLiYMmqUilwBnNGEbSo+fPawmsi9g=
Subject key identifier:   5A:30:27:CE:8F:7C:FA:2E:88:2E:8F:2D:09:3D:40:FD:3B:1B:F0:21
Certificate issuer:       /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
Certificate serial:       0BDC9B36F8B8251772D24E47D5F54D9A50BBAC0B
Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa
Signing time:             Mon 15 Sep 2025 22:05:00 +0000
ROA not before:           Mon 15 Sep 2025 22:00:00 +0000
ROA not after:            Mon 14 Sep 2026 22:05:00 +0000
asID:                     272816
IP address blocks:        2803:7f90:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dc:9b:36:f8:b8:25:17:72:d2:4e:47:d5:f5:4d:9a:50:bb:ac:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
        Validity
            Not Before: Sep 15 22:00:00 2025 GMT
            Not After : Sep 14 22:05:00 2026 GMT
        Subject: CN=5A3027CE8F7CFA2E882E8F2D093D40FD3B1BF021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:37:2f:63:99:31:e5:e8:15:08:ef:bd:ed:
                    12:d9:70:65:30:aa:33:d4:39:62:04:56:bc:24:48:
                    26:fc:c4:f2:6b:c9:99:88:06:7f:1b:f4:3e:b4:1c:
                    f6:d7:ac:5b:97:08:17:64:14:03:7f:de:cc:3c:61:
                    27:3e:1d:07:ec:52:66:f3:be:8a:25:5d:a3:3f:c3:
                    6d:73:50:b7:69:34:93:e4:3c:6f:29:44:a5:62:b8:
                    c8:af:c9:36:3b:d5:23:a3:09:d5:23:04:0b:5a:e1:
                    68:57:66:2c:bb:e5:7b:8d:89:ea:9b:7a:2f:ba:48:
                    da:af:63:2e:ef:d5:13:b8:8f:5c:6b:f4:c9:35:39:
                    98:5b:c6:f0:68:60:4b:9a:fa:6a:a5:b6:5c:b5:ff:
                    96:10:d2:6d:fd:e3:22:97:33:e5:47:e3:0a:3b:15:
                    2e:c5:49:20:dc:97:06:eb:5e:b8:2d:7d:ee:90:9e:
                    3e:20:95:7f:ef:a9:31:1d:8e:ea:95:cb:d7:80:bb:
                    83:9a:19:29:4d:04:eb:17:4a:2a:f4:3b:57:29:5e:
                    53:6c:be:3f:81:e7:cb:7e:7e:f4:ae:fe:82:3f:f0:
                    03:af:42:e6:a8:98:63:34:b1:51:e6:69:40:3b:a6:
                    5c:66:c3:89:2f:f1:bf:81:f1:92:76:17:c4:42:22:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:27:CE:8F:7C:FA:2E:88:2E:8F:2D:09:3D:40:FD:3B:1B:F0:21
            X509v3 Authority Key Identifier:
                keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f90:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:e0:fc:02:3b:8e:4a:e8:df:5c:c7:01:fb:f7:b5:22:4f:8b:
         ea:34:cb:bf:77:c6:3e:ec:b0:b0:e2:c7:a8:fa:bf:56:fa:fa:
         27:18:83:ff:19:4e:86:ab:36:1d:35:a9:11:79:d9:bf:1f:3e:
         6c:97:04:91:47:99:0e:32:e9:00:3b:70:2b:59:03:be:3a:81:
         51:b5:57:78:5c:48:9b:8c:b1:81:84:88:d1:cd:e1:29:94:98:
         d9:68:a6:f0:74:c8:cb:00:9a:28:6b:9c:a7:45:6e:98:02:d0:
         1f:4b:f2:6d:b6:8e:b2:19:67:23:07:8d:e1:f6:86:4c:df:49:
         3d:e4:c9:6e:24:4a:d6:f7:37:38:8a:00:3e:c0:ae:8b:af:b9:
         8f:0f:f5:74:41:c6:aa:c1:e9:bd:87:5c:93:a3:30:d5:ec:9c:
         94:40:89:0e:6b:b7:a6:64:be:39:b1:81:30:fe:55:be:83:a1:
         7b:4b:8d:ac:dc:b2:95:a5:d0:30:1e:02:a3:e8:a4:8c:ff:f8:
         08:e7:bc:fa:56:db:5f:2a:69:31:8e:0b:82:a1:49:0d:3e:bf:
         14:9f:92:ac:cd:23:b5:c6:e0:70:4d:46:81:04:99:16:4e:98:
         49:a0:6e:9a:df:b8:7f:a9:99:2b:03:f1:e0:9c:e2:6d:be:a3:
         51:56:8f:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:42:49 2025 by rpki-client