Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3330303a3a2f34302d3634203d3e20323733393434.roa
File:                     323830333a636635303a3330303a3a2f34302d3634203d3e20323733393434.roa (raw, json)
Hash identifier:          HgHOjNou/TY/s76BKV0wLKqZgVo4QFibcg1mMoeHnqM=
Subject key identifier:   89:D4:79:31:FE:A9:56:07:16:64:EA:8E:2C:0D:9E:A4:29:05:F7:CB
Certificate issuer:       /CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
Certificate serial:       67CEB829501D42AC4E68B3E617681EA529F74DC7
Authority key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3330303a3a2f34302d3634203d3e20323733393434.roa
Signing time:             Wed 06 Aug 2025 15:15:00 +0000
ROA not before:           Wed 06 Aug 2025 15:10:00 +0000
ROA not after:            Wed 05 Aug 2026 15:15:00 +0000
asID:                     273944
IP address blocks:        2803:cf50:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ce:b8:29:50:1d:42:ac:4e:68:b3:e6:17:68:1e:a5:29:f7:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
        Validity
            Not Before: Aug  6 15:10:00 2025 GMT
            Not After : Aug  5 15:15:00 2026 GMT
        Subject: CN=89D47931FEA956071664EA8E2C0D9EA42905F7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:32:5f:cf:39:0e:b3:d2:d8:a1:bc:a9:f5:
                    b4:7d:02:f9:d7:f9:6f:cb:06:53:68:0e:98:6a:de:
                    53:a5:64:80:9b:2a:54:d1:02:6a:a2:bc:b4:15:8e:
                    f9:66:cc:34:2a:59:57:2b:f3:b6:c3:f9:86:a3:85:
                    53:fb:72:76:fa:b9:b7:0f:9d:81:9e:3e:97:a3:3a:
                    4a:1f:fd:3e:81:2b:50:61:7b:ae:29:d6:ba:97:66:
                    ff:a8:94:9f:7b:61:fa:ea:0f:47:01:0e:40:cd:fa:
                    c8:67:e3:be:0e:23:f6:0d:fe:1b:a2:03:58:a0:93:
                    27:0f:b6:56:be:aa:8b:8a:7d:7f:6b:79:ed:62:41:
                    5a:67:b6:fb:9a:e5:f2:68:88:19:03:0d:49:b2:a0:
                    2e:b6:cc:04:42:e8:5d:76:15:2c:f5:ba:60:10:fe:
                    94:84:78:65:68:cc:58:3c:ba:5c:5c:29:57:ff:da:
                    7b:c7:1e:33:a7:40:bb:12:d0:70:01:d7:6c:7e:62:
                    db:65:ae:8f:a9:41:1e:d8:89:b4:4a:dc:71:c9:0b:
                    a0:b6:a0:b3:36:5d:37:82:d9:26:0e:7d:49:31:b5:
                    b7:dd:77:11:64:02:11:83:e4:77:68:f1:ac:a0:b4:
                    36:c4:8c:5a:ba:7f:ec:dc:d8:59:b7:0b:a3:0f:de:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:79:31:FE:A9:56:07:16:64:EA:8E:2C:0D:9E:A4:29:05:F7:CB
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3330303a3a2f34302d3634203d3e20323733393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf50:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:9b:a9:74:83:df:c5:77:c1:2c:21:ea:89:85:14:91:0a:
         82:4e:07:8e:cc:33:8b:d3:ad:28:00:c2:8d:dd:c0:0c:13:2f:
         1f:00:86:0c:ff:07:d5:f3:d3:1c:c6:3f:92:d4:7a:7e:c2:f7:
         ab:80:07:67:61:89:97:94:4b:6b:ba:12:b3:76:57:d4:a0:f5:
         91:40:4c:25:d7:ad:0a:50:c5:7e:b0:a0:5f:47:48:7b:99:23:
         b5:29:63:03:93:bd:f9:bf:0b:26:09:de:88:f7:e6:b0:61:fb:
         01:f6:6c:36:8f:fd:fa:54:8e:9c:06:ff:42:50:46:73:cd:9f:
         63:9f:35:1a:12:04:fb:11:8f:4d:a5:d7:d6:99:2f:66:cf:4b:
         43:cb:cb:1e:81:c0:e5:3c:d6:2f:5d:34:8f:0d:56:71:07:c9:
         70:03:59:c4:85:ee:e3:c8:a1:fd:67:6c:8f:3a:eb:26:56:f6:
         46:4c:59:68:21:5c:97:dc:b5:2f:3c:70:31:ab:94:01:33:8b:
         81:dd:59:10:29:e3:b9:37:f3:e9:a2:5c:ad:a6:05:aa:05:fb:
         ee:04:3f:09:40:5c:f9:0c:0d:52:38:e8:25:31:88:26:5e:99:
         07:99:87:5b:6a:ab:33:29:a2:54:0f:2b:74:ae:95:6e:d0:4b:
         44:01:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:40:14 2025 by rpki-client