Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/323830333a386364303a3a2f33322d3438203d3e20323734303231.roa
File:                     323830333a386364303a3a2f33322d3438203d3e20323734303231.roa (raw, json)
Hash identifier:          E7RZGeQaM5hkflL+U0wT3mdo5jLv1+XhIIHXS0Jug6U=
Subject key identifier:   09:42:C8:FA:FE:34:D9:1E:A1:5D:CE:EE:EC:3A:EB:5B:AC:DD:44:F9
Certificate issuer:       /CN=45256C8371BC10C1250F109A14DAC22CF0A8CAE0
Certificate serial:       2F565502001413D8DF1CD0F3EDA0811F4C3728BC
Authority key identifier: 45:25:6C:83:71:BC:10:C1:25:0F:10:9A:14:DA:C2:2C:F0:A8:CA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/323830333a386364303a3a2f33322d3438203d3e20323734303231.roa
Signing time:             Thu 10 Jul 2025 23:00:46 +0000
ROA not before:           Thu 10 Jul 2025 22:55:46 +0000
ROA not after:            Thu 09 Jul 2026 23:00:46 +0000
asID:                     274021
IP address blocks:        2803:8cd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 22:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:55:02:00:14:13:d8:df:1c:d0:f3:ed:a0:81:1f:4c:37:28:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45256C8371BC10C1250F109A14DAC22CF0A8CAE0
        Validity
            Not Before: Jul 10 22:55:46 2025 GMT
            Not After : Jul  9 23:00:46 2026 GMT
        Subject: CN=0942C8FAFE34D91EA15DCEEEEC3AEB5BACDD44F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:d2:82:dc:a4:65:2a:dd:0d:c8:29:f4:46:
                    de:f0:fd:59:4c:5e:fd:68:11:5d:dc:2b:48:df:dd:
                    e4:df:1f:56:33:cb:43:61:f8:66:d4:86:67:80:44:
                    50:45:fc:99:8e:22:77:80:ca:5b:90:e2:63:0f:0d:
                    f2:4c:2a:cb:05:ac:04:f0:0c:22:78:a2:22:be:95:
                    09:b7:c7:ed:38:0f:c6:13:40:73:f8:83:73:2c:58:
                    da:b3:1e:b1:0c:68:bb:1e:c5:4e:52:ee:00:6e:97:
                    6a:25:2c:f7:6f:b2:d3:12:85:37:33:c8:5e:db:0d:
                    61:1b:fa:95:25:e0:fe:ee:93:38:b1:75:9c:eb:54:
                    e3:61:41:f9:6f:f4:05:a3:b4:eb:dc:e4:2a:07:46:
                    cf:a6:67:e7:f5:62:db:f5:5b:55:87:ce:c3:7d:43:
                    8c:e6:6b:d7:bf:ea:21:ae:b8:59:d4:91:67:8b:82:
                    4a:51:cc:35:9f:aa:08:d5:6a:84:4a:6e:83:3d:68:
                    08:90:ae:50:85:e4:a9:95:d2:4c:a0:0a:6b:6e:f1:
                    ce:35:20:75:db:ac:4f:78:65:ef:a3:7c:4a:2b:40:
                    50:64:5d:c9:49:80:07:48:ae:b0:80:9f:21:64:22:
                    db:3c:d0:4b:62:8d:c2:12:af:b2:d6:a1:c9:df:b8:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:C8:FA:FE:34:D9:1E:A1:5D:CE:EE:EC:3A:EB:5B:AC:DD:44:F9
            X509v3 Authority Key Identifier:
                keyid:45:25:6C:83:71:BC:10:C1:25:0F:10:9A:14:DA:C2:2C:F0:A8:CA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45256C8371BC10C1250F109A14DAC22CF0A8CAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CC73C80D3FA8239DDB0A66CCA775A2E4730F722CDB4F1088A4C8616FA1B598/0/323830333a386364303a3a2f33322d3438203d3e20323734303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:65:25:5e:ff:f9:03:1f:88:07:c0:80:c9:24:dd:48:9a:19:
         b7:90:b4:51:b3:40:f1:74:fe:2c:3b:e6:e3:ad:63:79:82:f6:
         e4:f8:20:6b:16:26:d1:88:b8:73:b8:b2:be:ce:3b:aa:06:a1:
         36:d0:f8:e7:af:85:5a:ea:cb:89:ca:35:c2:34:59:05:86:8e:
         57:24:34:46:1d:4f:89:31:63:91:95:bb:90:e7:c5:f8:0c:1c:
         65:d4:0c:e3:1c:de:c1:1d:3e:fa:20:90:b5:08:06:8d:b8:fc:
         a4:e2:be:9e:4f:78:a2:80:63:34:e5:30:58:a0:64:5e:b8:e7:
         66:da:d4:1d:95:f3:e8:26:4a:9c:b8:e2:67:ab:34:68:7a:42:
         d8:92:fc:d5:5b:e2:fc:6c:27:f3:01:69:44:78:45:4b:46:c2:
         86:02:15:e3:54:19:00:55:b9:f2:5a:cc:56:5c:72:70:9b:fe:
         82:dc:52:b9:05:cc:d3:59:64:fa:82:05:ac:53:45:7d:fa:51:
         36:55:e5:95:68:a9:d4:bb:bf:0b:6f:7a:ac:d8:25:46:77:56:
         0f:1e:f3:f0:39:16:a4:95:79:0f:e9:93:2c:24:14:90:89:e1:
         e8:ee:b9:b8:2e:f4:00:ef:0f:c1:aa:ac:4d:f3:8c:fd:89:1c:
         de:1a:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:41:25 2025 by rpki-client