Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa
File:                     323830303a3530303a3a2f33322d3438203d3e203237383839.roa (raw, json)
Hash identifier:          yZ7A+3E9IIRiDRDR6ywByorkVI0oRAWOF24WdGH5zsQ=
Subject key identifier:   C3:F1:FA:70:BD:B7:93:94:10:34:13:07:3A:65:FB:D2:FF:42:18:26
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       72D9F5CA533B4DB8CECA03F2309C0D3EE70D827E
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa
Signing time:             Wed 09 Jul 2025 19:00:00 +0000
ROA not before:           Wed 09 Jul 2025 18:55:00 +0000
ROA not after:            Wed 08 Jul 2026 19:00:00 +0000
asID:                     27889
IP address blocks:        2800:500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d9:f5:ca:53:3b:4d:b8:ce:ca:03:f2:30:9c:0d:3e:e7:0d:82:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jul  9 18:55:00 2025 GMT
            Not After : Jul  8 19:00:00 2026 GMT
        Subject: CN=C3F1FA70BDB79394103413073A65FBD2FF421826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:c5:09:38:5d:45:a9:cc:43:68:d5:5c:7d:
                    2d:49:80:8e:71:a8:20:65:43:8f:80:c6:22:68:78:
                    75:d8:e0:9b:12:df:b9:05:c0:3c:32:0d:f8:21:ec:
                    05:7c:a4:a9:23:67:82:3d:aa:ec:e5:f9:e5:30:fb:
                    58:77:c0:80:b3:aa:fc:3c:b5:fe:4b:1a:28:03:94:
                    3d:c6:11:cf:6f:de:c4:8f:cf:01:15:08:f7:3a:2a:
                    d6:0e:3d:0c:e3:9b:86:41:b5:e0:55:b7:32:cb:78:
                    b5:d9:21:15:b4:94:a5:42:88:f7:e3:53:90:6d:d7:
                    76:53:be:5d:2c:67:c7:ac:6d:bc:b7:42:62:b8:de:
                    57:30:ab:f0:f8:3a:82:21:35:5d:14:bf:97:f8:ba:
                    02:34:5e:d0:8b:69:09:d8:da:e3:ad:6f:69:43:7b:
                    d1:10:d1:15:ba:98:77:f2:1e:c5:ca:5c:ab:71:8c:
                    4d:d6:8e:ae:4c:31:f8:18:6d:1b:12:55:af:70:06:
                    ee:fb:65:d8:3b:9d:8c:d1:f8:6d:5f:a2:17:4f:f1:
                    bc:5f:a3:3c:07:e9:71:f6:0c:d5:12:84:69:a5:5b:
                    fc:c2:8c:1d:10:29:ed:01:9c:3d:7e:7d:4b:04:77:
                    c9:1d:30:fe:cb:e4:ab:65:d3:93:5e:c3:72:d5:6f:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:FA:70:BD:B7:93:94:10:34:13:07:3A:65:FB:D2:FF:42:18:26
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:6f:27:af:de:f3:73:db:d6:8c:44:d9:99:b9:e3:24:61:
         73:73:46:a0:99:fa:07:6f:82:a2:e1:c1:ef:f5:fd:c9:d3:00:
         7b:47:6e:6d:15:15:d0:82:be:bb:c9:1c:f8:83:a7:82:95:75:
         34:09:92:14:ab:72:75:cf:a7:25:85:31:83:58:eb:c1:b3:37:
         b7:3b:4e:2a:2c:69:9e:d8:94:fa:f4:2b:7a:0e:7d:18:bf:4a:
         10:cd:8a:27:79:23:a4:0f:5e:c6:77:fd:a0:a4:13:76:94:94:
         17:df:c5:37:8f:5d:b6:88:75:09:ed:2f:b6:c1:78:0a:80:6e:
         4f:29:17:a4:46:ab:2b:db:19:ab:be:9b:a6:c8:d2:4d:2f:b1:
         04:09:7f:fd:a5:00:02:38:9f:b4:d2:70:ee:d9:fc:98:a3:66:
         82:c0:8f:44:7e:e6:f0:4f:56:b6:d4:b6:83:32:cc:2d:0d:4d:
         96:30:41:5a:a8:7c:b7:ed:75:4e:09:fd:da:6a:ec:c6:d6:89:
         57:98:a7:87:43:be:1f:e5:a6:39:fc:d5:9e:cd:3f:32:77:3f:
         84:b0:a3:20:d3:30:9c:e7:aa:9f:23:95:36:51:9f:70:50:8b:
         70:29:3b:07:bf:5a:29:7e:30:28:fe:1d:a8:ea:92:63:c3:5a:
         42:7e:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:07:48 2025 by rpki-client