Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/323830333a373735303a3a2f33322d3438203d3e20323733393337.roa
File:                     323830333a373735303a3a2f33322d3438203d3e20323733393337.roa (raw, json)
Hash identifier:          +rZ4ZSLTeYiCsH1EEN0XfWkFSC8d4JKf9WkHZaQJC7Q=
Subject key identifier:   89:34:01:88:B9:A1:89:E3:D3:64:1C:84:B9:86:36:9A:41:E3:EC:68
Certificate issuer:       /CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Certificate serial:       6768299CB57EA0E06A335388DF12875844B2BBCC
Authority key identifier: 85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/323830333a373735303a3a2f33322d3438203d3e20323733393337.roa
Signing time:             Tue 02 Sep 2025 00:42:36 +0000
ROA not before:           Tue 02 Sep 2025 00:37:36 +0000
ROA not after:            Tue 01 Sep 2026 00:42:36 +0000
asID:                     273937
IP address blocks:        2803:7750::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:68:29:9c:b5:7e:a0:e0:6a:33:53:88:df:12:87:58:44:b2:bb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
        Validity
            Not Before: Sep  2 00:37:36 2025 GMT
            Not After : Sep  1 00:42:36 2026 GMT
        Subject: CN=89340188B9A189E3D3641C84B986369A41E3EC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:65:46:ed:76:63:4a:3a:00:51:c5:49:e9:
                    2b:8a:e4:3b:b9:a4:d4:db:b4:96:dc:12:dc:0f:5b:
                    f7:b0:40:e8:b8:f6:08:e6:fb:61:ef:15:b3:ca:d2:
                    eb:c5:4c:d5:ff:c6:1e:af:69:15:f6:d2:36:a2:45:
                    f9:d9:51:b4:94:d9:30:75:85:ee:57:e9:88:4e:6e:
                    80:6d:27:c3:d8:fb:73:5c:46:55:9a:59:7d:51:00:
                    8b:04:21:91:fc:da:dc:f5:e2:77:c2:1c:fb:16:22:
                    36:d7:c2:74:f2:81:0c:77:d6:90:96:44:b3:a8:06:
                    33:7d:43:31:39:5f:51:d8:83:a2:f4:7b:ee:d4:9c:
                    91:c9:1b:7b:e7:f2:85:73:c6:17:d0:a8:d2:29:06:
                    37:ef:be:de:15:ce:e0:06:40:95:ad:50:4d:5c:1b:
                    03:ef:c3:cc:61:04:ed:bb:d7:87:d4:2c:c0:71:c7:
                    f9:cc:30:6f:c5:20:80:c2:a8:76:bc:aa:a1:22:ea:
                    02:c8:fd:5c:27:2e:89:49:2c:bd:23:7f:b1:81:59:
                    4b:d7:d5:d7:51:5e:c2:8f:e3:2d:42:d7:98:35:ae:
                    16:fa:ce:e1:dd:5f:4e:44:17:63:bf:3c:9d:d8:5a:
                    d6:c8:16:cd:ee:d7:d9:71:52:af:b3:f5:c5:e7:ab:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:01:88:B9:A1:89:E3:D3:64:1C:84:B9:86:36:9A:41:E3:EC:68
            X509v3 Authority Key Identifier:
                keyid:85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/323830333a373735303a3a2f33322d3438203d3e20323733393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7750::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:00:6a:90:f9:91:31:f0:e9:50:b5:24:a1:47:49:d9:93:a1:
         ed:0d:9e:d1:fe:22:24:de:55:cc:87:a1:c8:a4:27:da:c8:d1:
         38:51:d4:ac:27:1b:2e:1d:57:8d:92:b0:7b:40:1d:39:74:96:
         c8:6f:85:a2:34:02:2c:d8:a1:59:c5:36:ea:97:c0:c8:9f:cb:
         b8:3f:d9:fc:20:75:ef:29:3a:67:b2:73:8c:cb:bf:ad:0d:8e:
         60:ce:eb:79:0d:a7:07:55:e1:a6:f6:a5:c7:8b:74:93:56:6a:
         9f:2b:9c:19:ec:56:e1:7a:90:69:6c:17:7e:74:86:7b:fa:a4:
         d5:0e:e5:05:10:2c:33:47:f2:a4:85:cb:bf:66:3a:36:d5:33:
         4f:89:77:4f:0e:13:47:18:b5:a3:4f:a7:4b:44:b8:1d:0b:eb:
         94:f7:5b:2e:9e:a3:23:60:ad:52:26:7f:b2:b6:50:05:a3:b8:
         9e:c9:07:e7:1c:33:c4:9d:0e:17:19:66:80:5f:2f:f5:bd:08:
         fc:ec:47:6e:5f:18:28:15:24:d3:4e:ad:6e:b2:b3:29:2a:e9:
         c8:26:7f:bb:60:6e:78:ed:d5:a8:1c:09:7c:8f:80:f9:f5:49:
         5c:ba:f9:42:f6:b7:d4:14:6a:d6:01:bf:1f:97:16:65:f0:45:
         53:03:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:40:16 2025 by rpki-client