Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa
File:                     323830333a376430303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          arvmV9/n1go30HvpDDmadIoCXCDhnKJQ6Zj5hdtG2Qg=
Subject key identifier:   3A:A8:E9:71:6A:96:E6:67:F3:31:69:2C:15:66:F5:62:64:8D:70:EA
Certificate issuer:       /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial:       2D30B2A9F41B3C08B3F31A62B81CBFDB856A800A
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa
Signing time:             Fri 29 Aug 2025 22:10:00 +0000
ROA not before:           Fri 29 Aug 2025 22:05:00 +0000
ROA not after:            Fri 28 Aug 2026 22:10:00 +0000
asID:                     0
IP address blocks:        2803:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:30:b2:a9:f4:1b:3c:08:b3:f3:1a:62:b8:1c:bf:db:85:6a:80:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
        Validity
            Not Before: Aug 29 22:05:00 2025 GMT
            Not After : Aug 28 22:10:00 2026 GMT
        Subject: CN=3AA8E9716A96E667F331692C1566F562648D70EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:2c:1b:59:90:fa:0b:fd:91:c6:42:20:88:
                    c8:5e:fa:17:fa:3f:a2:21:f5:10:93:33:c3:f2:5d:
                    86:df:b3:15:48:28:6f:42:2b:d5:1e:e1:50:50:21:
                    89:11:41:6b:74:7c:db:b5:6c:bb:a5:fb:35:e8:5e:
                    a5:2e:64:73:54:37:c2:cd:f5:c7:bc:56:2e:ce:b6:
                    73:33:b8:6e:a6:f8:19:b6:95:1a:89:4e:2e:b9:64:
                    cb:72:b5:1b:6f:ec:c6:c3:8f:21:c8:47:b1:2e:ae:
                    60:66:2c:b3:df:68:64:f6:3b:46:0b:6d:cd:93:1d:
                    d1:96:bc:61:b6:ec:c9:92:ce:f9:21:ba:37:5c:9d:
                    53:55:77:0d:39:6e:9f:65:47:60:42:3e:9e:15:50:
                    99:23:91:46:8c:21:b7:eb:39:f6:c9:11:0a:d2:41:
                    30:27:e6:14:2f:25:29:d0:64:b2:23:69:65:cc:ed:
                    b4:17:aa:ce:fa:51:55:b3:39:de:98:a6:76:ce:ff:
                    95:5d:06:2c:25:08:60:18:cb:09:8c:a2:38:65:f5:
                    ab:42:b4:0e:d9:f9:8b:d6:48:d8:ba:71:a7:bb:c6:
                    1c:4d:bd:66:f1:6d:38:93:90:4e:5b:b0:af:f6:4f:
                    5a:f1:a0:f6:1a:81:96:49:f6:31:76:21:86:62:8d:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:E9:71:6A:96:E6:67:F3:31:69:2C:15:66:F5:62:64:8D:70:EA
            X509v3 Authority Key Identifier:
                keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d3:8f:04:70:23:59:b0:eb:c3:97:6b:93:a8:f9:fb:f7:4e:
         f6:ba:09:cd:22:0d:eb:87:d6:26:fe:48:24:3d:ea:8f:a3:6d:
         b4:02:9a:cb:8a:88:05:5a:2e:c2:ca:d5:60:eb:f5:ef:9f:fe:
         94:8b:1d:83:09:70:dc:6a:b6:f3:2f:46:54:26:11:5b:52:2a:
         90:84:0e:65:8b:6f:39:73:74:43:d3:8e:dd:67:f0:d2:e9:a8:
         f7:93:75:c5:ef:30:b1:2d:b9:06:1f:0c:7a:a4:c8:48:ef:a1:
         10:74:c9:af:cc:ac:ec:2e:e6:87:10:dc:8e:db:77:20:60:e9:
         52:f7:29:17:8e:33:9a:65:1d:ab:24:c9:21:cf:36:9a:04:91:
         57:36:e8:ed:f2:33:06:fe:ef:60:b7:14:74:9d:69:4b:9d:7a:
         f7:c1:78:dd:f7:b2:5f:a0:b6:42:0b:da:2f:62:d9:2f:f7:aa:
         81:06:41:cd:36:90:b2:3a:d2:ff:4a:49:ce:87:be:96:e8:4e:
         bf:23:52:35:dc:88:9d:90:ba:06:72:f5:6e:c7:2d:de:96:da:
         16:25:32:cb:30:49:7a:12:8b:b8:fc:c3:54:49:ee:81:36:de:
         df:87:6f:94:f4:dc:a2:d0:48:a3:e2:09:cb:85:a6:d9:7f:13:
         ac:51:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:24:11 2025 by rpki-client