Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31653a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a31653a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          XfsGEaZOUPj9fnwWrkKGP2/z/C9d2UIQKZb9sU04Nk4=
Subject key identifier:   6F:B3:67:FD:A6:A1:FE:FB:90:3F:16:46:37:5E:29:F2:08:08:8F:08
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       5060AD3DB598DF5CB7833198DF64ED2D52E6D35D
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31653a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:01 +0000
ROA not before:           Wed 09 Jul 2025 02:55:01 +0000
ROA not after:            Wed 08 Jul 2026 03:00:01 +0000
asID:                     274079
IP address blocks:        2803:5ad0:1e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:60:ad:3d:b5:98:df:5c:b7:83:31:98:df:64:ed:2d:52:e6:d3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:01 2025 GMT
            Not After : Jul  8 03:00:01 2026 GMT
        Subject: CN=6FB367FDA6A1FEFB903F1646375E29F208088F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:df:be:80:d5:1a:75:1f:bf:3a:49:22:1d:
                    4f:6f:15:dd:4b:73:cb:2d:f4:aa:cf:a0:20:9d:fa:
                    f4:7b:7a:69:7d:5c:eb:87:41:24:b4:e7:23:b3:54:
                    83:7b:33:fe:8a:77:89:d0:33:96:b3:a7:7e:b0:93:
                    09:70:63:28:1d:42:cb:23:cb:a4:d7:38:ba:6e:12:
                    d6:7c:cb:ea:e4:09:55:3f:4d:c4:98:ef:c9:b6:32:
                    40:98:05:4a:dc:ce:a3:a0:99:b8:f6:3d:71:26:84:
                    aa:c0:36:fc:4c:90:a5:f2:38:ee:e0:23:b8:c9:21:
                    7d:17:91:c3:de:0d:f1:10:57:03:e6:cb:27:b3:64:
                    76:1d:66:1c:49:c5:ee:35:a8:ff:63:25:e7:f1:1d:
                    f8:fd:ea:a7:98:bb:9e:68:26:81:56:eb:6d:5d:88:
                    0d:17:26:1d:17:00:f3:65:95:ba:06:92:21:48:79:
                    ae:12:d5:c1:47:4c:0b:f6:a0:b9:4b:5d:79:50:ee:
                    7c:03:b7:85:45:e8:f2:20:2d:42:35:b9:c2:33:75:
                    04:27:96:88:23:65:85:53:d2:8b:42:f5:fb:56:a5:
                    ba:3d:35:1f:3c:b1:d0:46:61:6b:fe:ea:c9:f6:0b:
                    d5:32:bc:92:da:59:8e:bc:dd:34:bd:ba:7d:7d:39:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:67:FD:A6:A1:FE:FB:90:3F:16:46:37:5E:29:F2:08:08:8F:08
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31653a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:1e::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:22:db:52:d2:6a:3a:20:1d:af:36:8b:8a:28:66:9a:5b:
         84:ed:57:7e:2d:35:2d:f2:d2:b6:4b:c0:85:20:b4:fc:37:4d:
         9c:d0:7b:c7:b3:a5:a0:7d:1c:dc:43:0f:a0:da:61:cd:55:55:
         19:27:28:c1:b2:42:a7:33:02:d8:46:ab:59:25:dc:dd:67:84:
         30:bf:a9:58:e6:a7:30:8f:9e:4f:f9:25:4c:da:42:7c:c8:fe:
         c5:82:76:b3:8a:e5:f9:b6:2e:4b:6c:9a:2d:20:0c:d8:1c:00:
         b4:12:04:a3:31:bf:0b:cc:7a:b6:40:6a:71:fa:56:ac:c2:c3:
         2b:bb:c9:8a:f4:d7:b9:fd:63:fd:84:36:eb:c3:3b:32:04:92:
         b1:0d:10:59:7b:b2:0f:40:e1:d0:78:31:04:2b:04:33:69:a1:
         d7:43:a7:4c:0a:aa:08:72:ef:4a:bc:c3:69:95:e7:d8:c9:59:
         82:8a:e8:25:63:e8:19:11:be:03:72:02:fa:96:63:df:ad:bc:
         08:d6:e6:e6:3f:9e:a8:b7:7a:7c:94:ce:24:b2:1a:00:c0:1b:
         a7:07:db:4d:b8:cf:e3:ff:53:ae:da:68:73:d7:ac:5f:1e:ea:
         d9:d6:0c:f2:a4:c1:9a:fc:2a:ae:f0:ba:d1:c5:0d:62:4d:31:
         d6:28:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:09:57 2025 by rpki-client