Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa
File:                     323830333a613034303a3a2f33332d3333203d3e20323633373530.roa (raw, json)
Hash identifier:          XxvbhkYsVTun5Qe7p4lGu+1VdvziYD95yt/AWvPmbNk=
Subject key identifier:   40:40:BC:EA:36:FF:E0:9F:B7:42:D1:A9:B3:3C:D7:13:8B:C2:5F:3F
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       1771BB2071C679D1E9A9E62171EF3BD947676096
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa
Signing time:             Tue 09 Sep 2025 13:44:02 +0000
ROA not before:           Tue 09 Sep 2025 13:39:02 +0000
ROA not after:            Tue 08 Sep 2026 13:44:02 +0000
asID:                     263750
IP address blocks:        2803:a040::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:71:bb:20:71:c6:79:d1:e9:a9:e6:21:71:ef:3b:d9:47:67:60:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Sep  9 13:39:02 2025 GMT
            Not After : Sep  8 13:44:02 2026 GMT
        Subject: CN=4040BCEA36FFE09FB742D1A9B33CD7138BC25F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:06:26:f4:65:36:89:08:e9:fd:e1:1c:b2:
                    27:6c:a2:66:e6:2d:4a:b8:2f:a8:09:56:ce:2b:e5:
                    c7:88:8f:24:6a:80:c2:e2:af:a1:98:d7:79:16:2d:
                    e0:81:48:6d:1b:d6:7d:2f:18:d4:d7:67:fa:42:25:
                    a2:43:d8:88:4b:cd:1c:3a:0f:4e:50:2c:78:d8:08:
                    4e:81:cc:ee:c2:ff:82:93:7f:f5:b9:f1:b0:06:f3:
                    64:1b:fe:12:cc:28:6c:84:bd:dd:25:89:69:5b:62:
                    f5:00:fe:80:62:fe:34:85:da:9f:2f:62:35:bb:ba:
                    48:18:93:47:f6:2c:5e:40:e6:01:1c:51:b7:2f:21:
                    84:bd:82:12:49:4d:36:d1:ca:17:e8:25:c6:ea:84:
                    9a:bf:97:56:09:bc:e2:f2:20:7d:b9:69:08:59:50:
                    33:33:89:22:14:a2:61:4f:2c:4f:be:ee:1b:38:90:
                    6a:d0:5b:65:56:dd:e2:b6:0e:c2:0b:3a:18:8d:bc:
                    27:e3:47:97:a2:2e:a0:77:a5:5c:dc:b8:c9:5d:e3:
                    45:c0:89:ed:ca:21:b7:42:03:b0:60:a5:cd:35:1a:
                    65:56:41:d8:49:85:aa:cc:7d:93:fc:8d:60:e8:2c:
                    43:93:de:8f:9c:ad:e5:b3:d9:45:90:bb:62:b5:e9:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:BC:EA:36:FF:E0:9F:B7:42:D1:A9:B3:3C:D7:13:8B:C2:5F:3F
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:c6:c2:22:bf:a5:8a:8b:d3:e2:ff:6f:eb:11:47:6c:bf:
         59:96:2a:5d:7e:33:dd:16:24:9a:27:5d:f7:b5:58:c9:e2:a2:
         bd:00:d1:63:15:75:b4:35:bb:65:ae:d8:93:8f:11:04:57:77:
         f1:a3:32:a7:3c:fb:83:a0:0a:cc:4b:f0:b5:01:9f:6d:f3:c0:
         79:13:ea:9d:0a:6a:f4:13:47:f8:5c:93:b7:46:a9:30:08:31:
         81:ee:ce:50:b1:af:c8:8f:7d:ba:01:fc:05:b8:f9:89:7c:18:
         c4:94:97:f0:20:af:d5:c5:79:62:df:c9:c9:f7:c4:a6:fb:1a:
         c4:63:3c:90:c3:50:fa:44:07:cb:13:1e:54:d5:fc:75:da:92:
         bf:69:91:a9:a9:11:c0:eb:33:e5:4e:75:81:70:87:78:7a:32:
         ac:b9:de:94:26:39:5d:28:2f:bb:ed:18:ab:92:7b:75:ef:d0:
         d8:8a:d3:6c:50:73:4d:61:7e:c1:f6:62:15:f9:76:0d:a3:26:
         88:99:cc:91:58:e6:75:e3:d7:ea:c3:6a:a7:d7:f6:8e:9a:36:
         de:c1:26:54:6a:04:83:be:93:ff:9a:02:2e:ff:53:4b:24:c3:
         f1:c3:fd:b4:47:1f:22:d9:ee:1d:e5:ac:42:46:82:4b:46:9c:
         a3:e3:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:20:57 2025 by rpki-client