Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323033.roa
File:                     323830333a393134303a3a2f33322d3332203d3e20323033.roa (raw, json)
Hash identifier:          doefiqPQRdhOFQX1I+DuytrnAvWQaBe8n309nRiZvBY=
Subject key identifier:   AF:A2:B5:AB:59:52:73:0E:D9:5B:E6:51:77:1A:46:73:72:F5:78:C3
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       269E727B0D3E717363AA606A528F2DEC8AD586FE
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323033.roa
Signing time:             Tue 20 May 2025 21:15:00 +0000
ROA not before:           Tue 20 May 2025 21:10:00 +0000
ROA not after:            Tue 19 May 2026 21:15:00 +0000
asID:                     203
IP address blocks:        2803:9140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9e:72:7b:0d:3e:71:73:63:aa:60:6a:52:8f:2d:ec:8a:d5:86:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: May 20 21:10:00 2025 GMT
            Not After : May 19 21:15:00 2026 GMT
        Subject: CN=AFA2B5AB5952730ED95BE651771A467372F578C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:da:ee:59:0b:0d:7a:d2:6f:86:d0:67:78:
                    56:f4:8d:d6:32:cc:1a:1f:f8:8b:06:9a:23:96:2a:
                    3b:ab:41:d5:47:ea:c2:e4:e8:a2:a0:2c:c1:93:c2:
                    d4:af:f9:4e:4c:ff:11:35:c3:a5:89:56:c1:d4:74:
                    1a:9d:98:c8:1f:85:f8:d3:2c:aa:82:c8:92:97:14:
                    50:c0:1e:37:21:9a:21:5b:9f:b4:5b:0b:65:4f:0a:
                    81:05:3e:27:02:00:0a:69:10:0d:e3:d1:aa:d0:bc:
                    0c:a6:8f:e5:e5:f3:7e:04:70:75:8e:a2:58:85:83:
                    8b:19:b2:03:22:69:7b:2c:5d:54:a3:e5:b0:b5:c2:
                    ef:99:fc:2d:0e:55:bc:8e:43:b7:79:0f:11:9b:e8:
                    d8:2d:45:e5:1c:63:f7:1c:11:b9:c1:3d:5c:4e:8f:
                    73:2d:a4:0a:38:32:84:1e:9d:fa:c4:7c:df:84:a2:
                    1f:59:d4:42:a8:23:fe:d5:8c:14:f4:22:12:5f:c1:
                    f3:0c:e3:14:80:7a:f0:51:9d:90:52:4e:c2:9b:5a:
                    dc:4b:81:fd:b1:f9:e1:b0:cf:0b:28:b1:67:41:81:
                    8f:6a:94:0d:fe:c3:70:b4:cc:d9:d1:a5:6d:cf:0a:
                    e4:4d:ab:b8:cf:19:df:1a:3e:f3:4b:05:da:00:6e:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:B5:AB:59:52:73:0E:D9:5B:E6:51:77:1A:46:73:72:F5:78:C3
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:76:0d:51:34:9a:98:e2:ce:6e:f5:8f:99:73:4a:ba:75:e4:
         7a:50:e4:d8:fc:f1:0d:a5:2e:70:f6:52:af:cc:e1:22:97:ef:
         3f:94:1e:29:d2:f6:97:89:95:46:c1:0a:fc:01:44:9a:0f:6b:
         76:bf:9e:e9:89:99:04:8a:69:ff:ec:2c:23:1b:f4:b5:73:64:
         28:5d:76:2c:2f:7a:7e:ac:46:76:af:4a:ef:d5:25:32:5b:61:
         c1:e8:5e:c0:41:ba:bc:35:0e:16:6d:df:6e:94:bd:ef:d5:83:
         f0:5c:96:68:9b:d7:15:85:82:d9:d0:c6:e2:93:88:dc:88:84:
         0d:60:2d:77:4a:24:64:31:ae:ff:23:bd:ad:c9:c8:a4:9d:7a:
         59:74:2b:ac:a5:f8:98:5c:ed:6b:96:91:9b:6e:00:41:ec:66:
         9b:0d:3f:41:65:c1:ad:ef:29:13:f2:38:0b:9e:79:e3:0e:66:
         18:9d:d6:64:19:f4:f7:c6:6c:95:51:ff:88:46:73:3d:4b:6f:
         68:7a:9f:1c:e8:97:31:6a:58:bf:f0:72:02:77:37:9e:45:79:
         85:46:7d:2d:c1:63:88:26:21:be:bc:e5:ed:14:70:12:39:14:
         2c:e9:9a:86:07:21:e3:77:32:91:c8:26:22:8a:63:27:cf:8c:
         92:f2:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:50:36 2025 by rpki-client