Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a383a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a383a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          DLdmF8oCq4UuBMmxwq5ff90Qixwo+RyXfB4N5V0e+sQ=
Subject key identifier:   9A:C1:FA:24:FD:F0:94:C8:A8:07:98:08:AD:20:F2:A7:FC:2E:6A:8B
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       1688CFB311C87CB3FAB9135A7CED9A887C9C2725
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a383a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:00 +0000
ROA not before:           Wed 09 Jul 2025 02:55:00 +0000
ROA not after:            Wed 08 Jul 2026 03:00:00 +0000
asID:                     274079
IP address blocks:        2803:5ad0:8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:cf:b3:11:c8:7c:b3:fa:b9:13:5a:7c:ed:9a:88:7c:9c:27:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:00 2025 GMT
            Not After : Jul  8 03:00:00 2026 GMT
        Subject: CN=9AC1FA24FDF094C8A8079808AD20F2A7FC2E6A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:db:57:a9:c5:48:39:17:cf:aa:8c:de:d1:
                    c1:b1:1e:81:c8:f7:c7:65:a4:d7:85:2c:5a:e0:99:
                    a4:1a:c2:1b:75:17:11:97:be:c4:dd:1b:9c:c2:93:
                    8b:93:6c:16:b5:bd:c6:fb:3c:94:3f:2e:02:69:49:
                    21:05:3c:d5:07:09:93:39:12:b3:cd:11:9a:0c:f3:
                    aa:72:2e:82:0a:41:c8:f0:28:42:dc:3a:91:58:13:
                    cd:0c:14:58:52:5a:43:82:50:6f:a3:33:71:77:34:
                    7a:60:34:f1:67:fa:06:2d:88:9d:2b:62:d8:35:99:
                    7a:f6:21:fb:24:01:25:42:a1:2a:66:ae:98:e2:1d:
                    03:ec:7a:73:2f:20:cb:f5:46:ac:a2:50:2a:b9:39:
                    b4:cb:44:4c:7d:c9:14:ef:90:cf:a5:88:1d:39:62:
                    12:d9:92:28:ee:99:00:b3:2c:fd:83:14:cc:12:57:
                    db:01:f8:83:a3:0c:8d:e8:75:8b:a5:fb:99:c3:50:
                    69:f8:12:0a:87:50:51:77:a4:d5:eb:0f:14:44:70:
                    7d:c2:aa:31:c6:2c:c0:d3:7c:ea:38:71:a7:d2:6f:
                    37:7d:d2:c8:c5:fc:db:2b:4b:d7:ae:c6:60:89:d9:
                    86:9a:1d:60:77:48:b7:9d:94:39:e6:4e:40:2a:fc:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:FA:24:FD:F0:94:C8:A8:07:98:08:AD:20:F2:A7:FC:2E:6A:8B
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a383a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:51:ec:ca:c4:d6:b5:b2:54:56:f1:92:bd:2a:40:fa:85:
         57:25:a8:80:b9:be:b5:c4:46:4e:f6:ca:a2:f0:54:dd:0c:35:
         74:d3:9a:5d:02:6f:b3:69:8d:f3:df:33:58:16:25:19:2d:4c:
         8d:da:20:85:96:5d:39:a2:58:c8:f5:7d:af:68:6a:3c:34:66:
         83:0c:8b:b0:44:4e:25:88:c4:83:b8:04:9c:61:3d:00:d3:32:
         09:80:fa:5d:12:1c:6a:84:68:cd:b8:d1:f8:8f:0b:b8:42:19:
         53:7d:ea:ea:75:f2:07:ba:01:da:cf:cd:9b:6a:2c:6e:81:a6:
         9e:db:4e:16:3c:c0:92:00:bc:be:72:cc:b1:2d:4a:0d:0b:cc:
         cd:58:4c:63:a3:5e:d9:87:50:2e:fe:2e:b3:4f:70:b1:66:6b:
         95:01:b7:ec:2c:c6:9d:46:c4:1a:b4:60:3d:55:93:cc:bf:85:
         fc:35:82:c7:7d:5b:35:7e:8c:41:f7:fe:d2:e7:86:01:4f:9b:
         40:66:81:39:e1:88:e4:cf:32:2e:1a:74:bd:2a:52:c6:42:f5:
         78:64:9b:26:87:e1:cc:3d:79:d4:57:d2:5c:d2:0d:8b:36:63:
         e6:32:0b:31:c0:6a:b2:41:93:07:28:a1:c0:4d:2c:7f:76:03:
         a8:30:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:08:55 2025 by rpki-client