Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          2N80NKTQlVIeB0PSuKkSLFGsnKFKnl+cp9tKdcoKpkU=
Subject key identifier:   F8:18:7E:92:DF:37:30:7A:37:E5:C1:42:EB:60:02:CF:EB:6C:62:63
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       0CA170379AE775CA9753CBC46E0D2302630A8F5F
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 25 Jul 2025 02:26:38 +0000
ROA not before:           Fri 25 Jul 2025 02:21:38 +0000
ROA not after:            Fri 24 Jul 2026 02:26:38 +0000
asID:                     273883
IP address blocks:        2803:4350:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a1:70:37:9a:e7:75:ca:97:53:cb:c4:6e:0d:23:02:63:0a:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul 25 02:21:38 2025 GMT
            Not After : Jul 24 02:26:38 2026 GMT
        Subject: CN=F8187E92DF37307A37E5C142EB6002CFEB6C6263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:a5:9c:8f:09:9f:16:28:8d:60:09:23:e3:
                    34:49:e4:b2:8e:7f:7d:09:c5:b9:9a:fd:c0:3e:57:
                    7e:f5:dd:30:6a:b2:81:70:e5:49:a4:73:b8:01:2b:
                    ee:03:90:85:17:ba:b8:fb:ab:7c:2a:5e:ea:f7:f0:
                    97:1a:07:00:2f:a6:8b:5d:ab:c5:e6:ed:38:27:47:
                    0f:6c:e8:00:f9:2a:af:60:84:d6:95:e6:61:a8:1d:
                    01:98:a9:6a:09:bf:5f:c8:6a:90:59:dd:33:f9:bc:
                    26:af:de:75:30:7d:c5:c3:5a:0e:ed:e8:ea:a7:aa:
                    ed:bc:95:39:a0:aa:e0:60:ee:6a:b6:a3:09:84:9d:
                    52:f9:9a:a9:53:cd:04:2a:af:15:7f:e1:36:ce:4f:
                    8b:5d:7e:8a:a9:30:96:aa:1c:7d:39:9d:f1:dc:25:
                    9f:d2:d7:a2:4e:3f:12:92:a6:29:87:38:dd:43:d1:
                    20:44:9b:36:75:47:d3:17:78:06:66:98:98:72:12:
                    bc:4f:3f:91:f9:83:75:ac:a9:d3:49:f1:ce:fa:8c:
                    6a:c1:9d:1c:78:d2:0f:65:6f:70:ae:a3:5a:28:10:
                    7b:35:bc:23:3e:d4:bb:a7:19:11:82:e6:49:99:eb:
                    89:63:eb:73:bf:ae:5e:6f:f0:38:28:3a:4a:47:50:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:7E:92:DF:37:30:7A:37:E5:C1:42:EB:60:02:CF:EB:6C:62:63
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:63:6e:a4:e6:9d:b7:01:7a:37:a4:92:46:f8:04:38:32:
         db:c3:a4:d4:2e:98:75:f6:86:53:d0:0f:0d:a0:e0:12:b8:af:
         7c:66:ce:b8:57:80:a6:df:0a:db:e4:8d:c7:a7:8d:e1:b2:71:
         58:94:e7:0e:b3:f4:8e:34:9d:14:26:ec:69:da:42:68:76:a2:
         02:ed:cd:4e:e1:b4:ed:c5:03:7c:c8:2a:c7:9d:c5:1c:06:70:
         f7:a8:e4:7e:78:9d:ef:3c:d7:e9:4c:ca:59:22:67:9c:7d:1a:
         5a:9c:e7:9d:ad:0b:1a:27:d3:48:50:dc:f6:8b:5a:83:e1:ba:
         19:0d:3c:aa:97:b2:a9:94:e1:cc:40:d3:87:86:37:6b:44:d6:
         98:29:19:c7:13:46:85:2c:40:cf:ad:80:c1:ad:9b:15:64:35:
         7b:15:d7:63:28:cf:97:7b:49:57:da:9d:d4:14:6f:8d:0a:38:
         24:54:da:73:25:5b:5c:5c:1b:25:be:7e:a9:d1:ef:f3:d1:c6:
         12:cc:f3:f1:ac:9a:aa:0a:fc:54:92:2f:05:4c:bf:86:fb:06:
         09:7c:e9:03:e5:a2:37:d4:9c:1a:3f:f9:50:c2:e6:e1:84:a5:
         42:32:fb:2b:b6:ee:3f:f4:b3:e8:ff:a6:9c:0c:a0:42:56:8e:
         2f:66:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:09:07 2025 by rpki-client