Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a346630313a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a346630313a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          cf8fjQgt+AeUNjjxJpH5LI963IPW43OavL/6crXnlU0=
Subject key identifier:   20:A1:67:CF:9D:64:8F:58:4D:CF:3D:08:60:B7:E2:E5:FF:73:1B:F9
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       45889396B1A7F530290D595383080A7A6BE11A2E
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a346630313a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Thu 18 Sep 2025 15:40:00 +0000
ROA not before:           Thu 18 Sep 2025 15:35:00 +0000
ROA not after:            Thu 17 Sep 2026 15:40:00 +0000
asID:                     273177
IP address blocks:        2803:ca50:4f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:88:93:96:b1:a7:f5:30:29:0d:59:53:83:08:0a:7a:6b:e1:1a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Sep 18 15:35:00 2025 GMT
            Not After : Sep 17 15:40:00 2026 GMT
        Subject: CN=20A167CF9D648F584DCF3D0860B7E2E5FF731BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:26:a1:12:c2:2b:8f:df:0f:56:e3:80:98:
                    5e:f7:b5:4c:22:7e:e5:6e:e9:fa:e4:70:dc:27:ef:
                    e6:51:26:fa:80:a3:e0:c6:3e:83:7f:ff:af:94:8b:
                    e9:c9:71:d9:0d:12:05:f1:7c:2a:fd:03:77:e3:c2:
                    db:33:62:f6:f5:f1:b8:30:a0:c0:11:b1:4d:9b:38:
                    5b:b4:ed:44:45:11:6a:51:2c:28:a8:70:b6:26:f7:
                    07:d2:b9:f2:b8:14:b6:3c:e1:0e:e7:51:93:0b:b8:
                    ae:2f:f5:3c:f0:11:ce:e1:18:d7:a9:f1:ff:84:bd:
                    93:47:1f:54:67:ed:ff:b3:b1:dd:81:5b:0b:e7:c2:
                    be:54:76:6a:21:ea:12:4d:d0:eb:93:9d:b9:41:29:
                    db:29:82:fb:d6:f1:c9:99:92:8e:c3:56:05:11:3b:
                    46:1b:a2:4d:18:b0:f2:60:99:37:21:67:91:ed:50:
                    fa:ae:71:df:7f:35:31:8d:6d:ff:d7:f8:47:5f:93:
                    5d:2e:2c:d0:f3:0e:e7:73:67:2e:b0:17:5f:db:94:
                    57:8d:87:4e:04:45:bd:f9:ec:44:1f:0d:3e:29:49:
                    71:21:71:3b:76:e9:d0:23:48:35:99:e0:91:ca:27:
                    8f:50:5f:76:18:8d:7c:2c:4e:a6:48:69:6f:f3:cd:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:67:CF:9D:64:8F:58:4D:CF:3D:08:60:B7:E2:E5:FF:73:1B:F9
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a346630313a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:4f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:ea:03:cb:8d:24:ec:2f:46:72:ee:df:44:b8:f9:31:9b:9c:
         91:a3:9f:e5:93:0e:bc:d1:ea:6e:0b:b4:9e:c8:44:d6:1d:81:
         4b:87:17:b8:00:a3:d4:68:c7:69:81:ba:ef:c2:47:01:c7:0c:
         43:39:21:d2:7f:6d:91:ec:82:9e:e8:5f:32:80:28:2f:8b:a1:
         71:d6:22:c3:6e:a5:8d:a4:1b:df:14:3d:66:e6:84:39:63:77:
         5b:b7:4d:d1:cc:29:60:a4:16:0a:21:9f:11:f5:bd:3c:7c:2c:
         b1:11:9b:29:50:04:27:da:4b:63:3f:14:34:54:b9:78:92:7c:
         99:99:6c:26:3b:32:06:15:ed:17:e7:af:5a:78:e1:55:a9:b3:
         1b:7a:b3:6e:c1:51:c6:fc:49:04:a2:5e:34:2f:cb:cf:0a:0e:
         b7:12:2d:1e:be:de:9c:f7:d4:68:87:d0:27:58:49:22:ff:57:
         0b:d9:fc:da:e9:45:32:11:a6:99:4d:c7:7a:75:e7:cf:d7:22:
         b6:f4:51:8f:f7:cb:6f:26:fe:47:4f:ae:64:30:6c:1d:ce:5a:
         10:b6:c5:1b:2a:64:36:3a:b1:5d:99:13:ba:71:94:3b:01:01:
         89:e2:21:6e:f5:5d:8a:95:20:7e:ae:5e:09:da:c5:a5:95:47:
         12:44:27:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:32:24 2025 by rpki-client