Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa
File:                     323830333a363438303a3a2f33322d3438203d3e20323633313837.roa (raw, json)
Hash identifier:          6MYDJ7z9evLtKKDM6r1u8aK5o8QPAMIe4JO3O0eH0uM=
Subject key identifier:   26:0A:58:5A:5A:53:74:05:B7:39:5C:7B:F9:03:F2:8A:34:79:89:BE
Certificate issuer:       /CN=C04EFD48DA63435D08F4B7AF822A64775EF20818
Certificate serial:       1F4DDC58ABCE4AE86F8710C25566E8FF5F3CB63E
Authority key identifier: C0:4E:FD:48:DA:63:43:5D:08:F4:B7:AF:82:2A:64:77:5E:F2:08:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa
Signing time:             Wed 03 Sep 2025 16:00:00 +0000
ROA not before:           Wed 03 Sep 2025 15:55:00 +0000
ROA not after:            Wed 02 Sep 2026 16:00:00 +0000
asID:                     263187
IP address blocks:        2803:6480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4d:dc:58:ab:ce:4a:e8:6f:87:10:c2:55:66:e8:ff:5f:3c:b6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C04EFD48DA63435D08F4B7AF822A64775EF20818
        Validity
            Not Before: Sep  3 15:55:00 2025 GMT
            Not After : Sep  2 16:00:00 2026 GMT
        Subject: CN=260A585A5A537405B7395C7BF903F28A347989BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:3f:ae:66:a9:fe:f3:45:24:db:c3:e9:89:
                    a0:e8:7c:4d:cf:32:16:ff:be:eb:eb:62:91:71:04:
                    3e:32:00:ee:ad:42:64:6c:7a:b5:4f:6e:4a:e8:62:
                    d1:df:21:6a:56:a5:34:3f:67:fa:02:bf:32:73:41:
                    59:67:db:b5:56:0f:49:48:82:fd:b3:d0:ab:97:91:
                    73:3f:8f:b9:e9:0a:de:a4:3f:6a:74:58:ac:34:72:
                    2f:ad:ea:74:a1:38:00:26:1f:a7:9d:2e:e8:2c:8c:
                    fc:50:73:54:bd:11:f4:b2:09:83:42:e7:07:fe:44:
                    04:cf:39:39:4c:b3:b5:da:33:30:c9:59:1e:09:a3:
                    5b:ec:89:30:f5:ac:be:6c:6e:7c:6a:a3:ec:d5:38:
                    d8:30:fc:3e:24:e3:88:4d:ed:8c:e6:01:aa:f2:51:
                    a5:d9:3e:02:f4:0f:37:da:4a:bc:32:b2:42:ef:95:
                    3c:f2:2c:15:8f:70:de:6e:dc:e2:96:be:46:55:ac:
                    d9:ac:45:7a:47:6c:f0:7b:e5:0b:ad:5f:72:1a:a8:
                    1b:51:a9:2e:f5:2b:67:44:82:fc:d9:d9:31:83:72:
                    d1:3c:7a:fb:63:f6:b8:dd:19:99:73:b8:da:79:8c:
                    16:2e:3b:fc:e0:45:5c:6c:16:f9:ce:84:a9:ea:01:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:58:5A:5A:53:74:05:B7:39:5C:7B:F9:03:F2:8A:34:79:89:BE
            X509v3 Authority Key Identifier:
                keyid:C0:4E:FD:48:DA:63:43:5D:08:F4:B7:AF:82:2A:64:77:5E:F2:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6480::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:09:c2:e0:39:ba:03:d9:fe:6d:f4:0c:94:b4:16:78:04:
         73:b3:19:fb:71:67:4c:70:36:19:62:e1:ed:c3:18:42:f7:74:
         17:c2:25:76:46:c5:f2:eb:2c:86:92:81:1c:bb:d6:dd:a9:0f:
         49:15:04:85:43:88:7c:2c:fa:91:7d:9f:4e:63:0c:e7:91:a0:
         a0:31:57:35:c1:61:be:12:a3:3d:a5:b7:1c:92:b2:d9:fb:3f:
         f1:39:6c:a9:0e:c3:ff:fc:8a:28:08:5f:ad:7a:0b:39:59:cc:
         6b:aa:de:e9:1f:fa:bb:56:aa:18:fd:a3:b1:3a:b4:74:12:77:
         e9:8c:d7:c5:20:fb:f7:f1:8f:7c:97:f7:09:46:fa:80:69:93:
         bb:aa:77:09:66:46:76:ce:d2:3e:6a:13:1e:3f:76:cb:78:3d:
         62:c1:67:61:74:e4:b6:f8:70:32:80:47:55:85:d3:b9:a5:38:
         85:1c:fa:8c:28:f6:79:40:d2:c6:91:cc:af:b8:7a:09:36:85:
         95:52:68:f2:0c:0c:54:90:93:7c:37:71:21:3b:85:d9:a5:60:
         a6:06:8f:43:c6:1f:4b:33:7f:1e:b4:e5:a6:93:3f:db:95:34:
         06:4f:4c:e7:b9:ec:eb:d7:46:08:d4:57:33:01:1d:2b:ea:b7:
         bb:3f:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:12:29 2025 by rpki-client