Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa
File:                     323830333a633363303a3a2f33322d3438203d3e20323635373335.roa (raw, json)
Hash identifier:          R5T8PlMgUwp2oeGU6QR3zt0Rkaz+HkbsMWh1aK0SVug=
Subject key identifier:   15:F5:FE:DA:6F:BF:86:19:9B:A0:18:B8:FC:3D:9D:1E:4E:08:98:B6
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       64331A72CC7526D657242CDC7E3241442A56A0E9
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa
Signing time:             Wed 16 Jul 2025 21:25:41 +0000
ROA not before:           Wed 16 Jul 2025 21:20:41 +0000
ROA not after:            Wed 15 Jul 2026 21:25:41 +0000
asID:                     265735
IP address blocks:        2803:c3c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:33:1a:72:cc:75:26:d6:57:24:2c:dc:7e:32:41:44:2a:56:a0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Jul 16 21:20:41 2025 GMT
            Not After : Jul 15 21:25:41 2026 GMT
        Subject: CN=15F5FEDA6FBF86199BA018B8FC3D9D1E4E0898B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:73:fd:6a:f8:0a:09:aa:d2:d4:b7:01:5b:
                    4a:30:3b:99:23:f6:d6:16:f3:d1:85:f5:61:a9:50:
                    25:f2:8b:0e:d5:bf:d9:fd:06:05:47:ca:c5:66:28:
                    96:d3:6c:82:30:c4:3e:2f:42:9f:8d:03:69:27:e2:
                    65:44:2e:d6:bc:f6:7c:46:27:7e:df:f3:e6:0e:d1:
                    72:5f:19:08:be:78:58:a0:67:f8:31:8e:53:b4:e9:
                    6f:cf:62:e2:86:81:3e:9d:51:55:07:69:9c:d2:7d:
                    c7:28:ed:f0:f9:f6:40:47:ae:68:b7:72:bd:78:f3:
                    4a:7e:34:3d:1b:ae:8e:f2:b7:e3:1e:aa:5c:4c:a6:
                    92:f1:07:f3:0e:d8:77:e5:f7:d3:2f:a1:eb:dc:b8:
                    3b:1f:11:b3:b8:8f:9a:ec:46:6d:28:27:be:c4:58:
                    c3:03:5d:24:c3:ef:68:d9:34:ff:42:ab:1a:9c:6d:
                    9a:85:54:f6:33:6d:5b:10:b7:e8:eb:d5:bd:ca:8f:
                    0f:1c:59:9e:63:e9:73:a5:28:58:73:50:7f:d3:07:
                    ac:b7:a6:0d:d3:8e:95:de:3c:c9:0e:22:bc:83:bd:
                    37:2d:ba:50:8a:2e:fc:09:65:45:d3:82:47:d3:b9:
                    ef:64:50:c2:dd:8f:c5:c2:7c:d6:d2:1d:89:db:a1:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F5:FE:DA:6F:BF:86:19:9B:A0:18:B8:FC:3D:9D:1E:4E:08:98:B6
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e20323635373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:3d:a1:d9:2c:c2:06:c5:f6:4b:6b:44:e6:6a:8b:49:67:
         87:38:26:b9:fe:fc:8d:1f:a2:db:8c:1b:f7:93:0b:ed:d0:45:
         9e:31:87:ec:50:5f:f8:fe:2d:27:f9:a8:b8:da:c4:e8:0f:71:
         69:89:d3:cc:5c:1d:bd:76:d4:b9:86:88:bb:6d:0f:b2:89:55:
         fa:b9:cd:f6:dc:53:b2:14:0e:51:7e:53:60:ba:04:11:5f:be:
         4a:a1:2c:bd:94:96:8f:75:12:7a:0f:e9:10:b9:cf:55:a0:ef:
         60:d6:3f:56:8e:d6:b6:fc:0b:91:f2:a5:4a:8f:ef:0d:76:32:
         a7:0e:ab:2b:de:3f:d3:27:c2:f0:dc:df:a4:d1:0c:26:79:b9:
         1e:72:d2:9b:41:6a:ae:ad:2e:bf:ae:a8:a6:f7:a0:dd:32:8f:
         35:93:86:97:07:7a:be:a5:e5:57:99:a0:c9:6b:cc:3c:30:8b:
         1f:7e:48:fb:54:de:19:bf:73:77:b9:fd:3a:54:4e:bf:47:a0:
         8f:a4:1d:c8:ef:28:7f:fb:e3:5b:d8:68:e2:06:e7:a4:fd:41:
         fc:13:15:b7:ca:b3:eb:67:72:39:3c:ef:ac:5d:5f:e2:a3:d6:
         ee:03:c3:50:db:b5:cb:23:44:b0:e3:8f:69:16:d1:e0:3d:3b:
         a6:75:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:22:25 2025 by rpki-client