Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3130303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3130303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          olGqfPfDCu4doebeZqIWOiRQylAyljZwE0W/ZjM1MG0=
Subject key identifier:   EB:D5:81:5C:28:04:DD:9E:1D:BC:38:D1:B1:37:F3:AA:C7:9F:A7:EA
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       258329C13DF452FAADAF41A67136A061FC2E7412
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3130303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 25 Jul 2025 02:26:38 +0000
ROA not before:           Fri 25 Jul 2025 02:21:38 +0000
ROA not after:            Fri 24 Jul 2026 02:26:38 +0000
asID:                     273883
IP address blocks:        2803:4350:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:83:29:c1:3d:f4:52:fa:ad:af:41:a6:71:36:a0:61:fc:2e:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul 25 02:21:38 2025 GMT
            Not After : Jul 24 02:26:38 2026 GMT
        Subject: CN=EBD5815C2804DD9E1DBC38D1B137F3AAC79FA7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:5e:d8:45:e3:6f:87:3e:25:38:bb:cd:71:
                    66:60:2c:cc:64:bc:e7:fc:16:7f:c3:3f:80:db:6d:
                    cf:7a:a7:fe:5b:14:d9:e0:c4:b6:b1:63:a4:81:99:
                    1d:47:ba:f2:ce:12:25:9e:02:45:0d:a4:c0:eb:54:
                    b4:82:42:38:76:13:66:dc:8d:bf:0f:dd:0b:70:9c:
                    1e:c7:e0:e4:f3:14:9f:66:a2:90:e6:7e:fa:5e:91:
                    cc:5b:00:3f:32:06:2b:5f:1c:29:c9:21:dd:d1:90:
                    3a:b4:3d:82:2a:17:9f:be:d0:c5:5f:33:e4:63:84:
                    b4:9c:fd:3f:cb:70:60:2b:a0:d9:c2:a1:82:a8:45:
                    13:1e:27:e6:30:1a:86:67:33:e9:e8:17:8e:bd:25:
                    96:0c:16:f6:25:0d:1e:4a:64:0b:25:87:7a:f9:c4:
                    17:79:81:1a:82:6f:ec:21:4b:48:56:92:a9:e7:06:
                    a9:22:59:62:c3:f2:7c:0c:41:43:ed:4c:a5:e8:d0:
                    cf:2b:cc:2b:13:eb:f3:6a:96:6e:aa:b3:ba:cb:4f:
                    54:34:3e:24:3c:57:d4:25:14:16:3e:fd:3b:49:8c:
                    78:42:27:a1:26:67:6d:2a:46:92:59:56:b8:58:bc:
                    a7:46:16:89:91:bb:4a:83:73:31:2f:82:a4:9d:60:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:81:5C:28:04:DD:9E:1D:BC:38:D1:B1:37:F3:AA:C7:9F:A7:EA
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3130303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:82:ac:7e:be:64:df:7d:d6:22:29:43:2c:e3:ef:bd:3a:
         b4:f5:a3:71:b8:ce:bd:33:a3:9a:e6:c1:29:3b:e5:fe:4a:09:
         ff:b5:2c:e0:91:58:4b:74:76:65:4c:03:a2:1a:4d:20:6d:25:
         a7:9e:51:28:12:a8:27:1d:14:55:e9:21:f7:60:a2:d0:73:04:
         8c:c1:02:1e:5e:82:3b:1c:d1:cc:c8:6e:4e:1a:f7:02:99:64:
         9e:6b:bc:3d:ca:92:8d:55:0a:35:69:e5:7e:a8:16:8e:f8:9a:
         a3:5b:dd:ac:79:e3:1a:c7:91:22:fa:b9:3f:e1:28:f5:fc:2e:
         5f:68:90:ce:48:50:34:65:b2:5e:b8:21:97:d2:f3:08:1d:ac:
         ff:98:df:58:d9:29:e4:9d:ec:e9:4b:3a:60:48:55:85:60:f7:
         13:00:17:e6:68:03:36:8f:6a:e2:e4:4b:bd:66:24:ab:cb:f3:
         24:00:a2:47:7c:74:5c:f3:27:75:c9:a9:a5:73:1d:3b:42:d9:
         d6:df:df:c1:9f:dd:df:fe:07:c9:f0:e5:9c:d4:82:e3:26:c2:
         3e:fb:06:c0:90:43:6a:14:2a:22:38:f2:02:ed:96:de:14:e0:
         7d:9d:94:46:59:e9:8f:6f:52:a8:cd:7e:90:69:f7:16:d2:34:
         8f:14:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:09:07 2025 by rpki-client