Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa
File:                     323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa (raw, json)
Hash identifier:          F+uV/yW4bYMLtCPUZ1Dg117SA+oppEChPV+jAyuQ4Ls=
Subject key identifier:   32:22:C0:3D:50:74:9D:28:26:F2:49:7C:EF:A8:50:A5:91:A0:5E:44
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       2669F09204AC0484D067AA3422F2005892F240F5
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa
Signing time:             Wed 27 Aug 2025 03:41:16 +0000
ROA not before:           Wed 27 Aug 2025 03:36:16 +0000
ROA not after:            Wed 26 Aug 2026 03:41:16 +0000
asID:                     264837
IP address blocks:        2803:22c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:69:f0:92:04:ac:04:84:d0:67:aa:34:22:f2:00:58:92:f2:40:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Aug 27 03:36:16 2025 GMT
            Not After : Aug 26 03:41:16 2026 GMT
        Subject: CN=3222C03D50749D2826F2497CEFA850A591A05E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:2e:e0:e2:4b:10:1b:85:7a:5b:5b:04:1c:
                    2f:d7:9a:cc:8a:6a:f7:a8:c9:fc:4d:c1:57:ef:a5:
                    32:0c:b9:12:0c:8b:71:8d:af:4a:f0:17:66:f0:da:
                    94:7d:0b:c4:af:9b:a3:bd:70:75:3a:bd:0e:be:c6:
                    a3:6f:b3:aa:a6:b6:12:30:50:f0:d4:89:fc:ec:49:
                    e6:14:36:9e:e0:8b:81:6e:5a:cb:9d:31:3e:ec:4f:
                    26:c2:9f:22:b4:19:7f:2c:1d:28:1e:a0:8a:42:65:
                    e4:9c:8f:9a:b7:ee:2c:cf:35:f6:62:88:18:48:c4:
                    ef:00:bf:56:bb:07:02:50:47:c0:ee:7a:f0:2e:96:
                    f1:e6:47:12:eb:f7:a5:69:0e:1d:4b:cf:6f:2f:12:
                    32:f2:de:ff:47:78:89:7d:3e:dd:ee:1d:b4:63:bd:
                    63:91:8b:30:5b:37:aa:4a:dc:c9:6c:ad:86:df:b7:
                    3f:55:56:af:44:be:22:77:e4:94:e9:b4:e5:5c:7c:
                    2f:da:f8:4c:8d:31:31:6b:c5:4f:13:9e:8e:41:28:
                    b0:a6:ba:a3:23:1d:8d:86:f8:a7:bb:00:19:87:2e:
                    0e:e7:e7:82:79:94:16:6b:91:a8:c0:cc:ac:00:c4:
                    91:8a:d5:a9:8d:91:75:4e:cf:89:fd:07:0e:e7:32:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:C0:3D:50:74:9D:28:26:F2:49:7C:EF:A8:50:A5:91:A0:5E:44
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:86:ff:ac:82:47:ce:f5:e8:8e:a6:17:34:31:3e:e4:56:
         92:fb:3f:46:58:7b:c6:df:1a:cf:f1:e2:c4:f7:9a:14:5e:42:
         fb:f7:9a:5f:1d:a7:15:88:51:30:32:10:b5:7f:04:5c:eb:b4:
         e2:b1:50:62:4f:19:6d:26:d4:9d:00:fb:2a:4e:e7:83:4c:34:
         11:ab:38:64:dc:d1:11:8b:02:97:db:12:2f:36:aa:27:8e:9b:
         da:26:4e:a6:dc:41:2c:c7:ad:e8:71:73:1d:06:ee:2a:20:c0:
         44:74:69:03:20:ab:35:ca:20:06:6f:f7:c9:a2:bc:b2:69:40:
         ee:19:76:5e:41:25:06:1e:57:27:58:0a:2e:9e:c3:59:6f:db:
         84:97:40:f8:53:b1:0e:88:c9:74:15:71:58:50:ae:d8:32:c4:
         55:7f:3c:b5:fb:b4:c3:a8:0b:d2:6a:e1:e6:38:ae:09:d4:fc:
         37:18:e3:64:14:3c:1e:29:6d:70:d0:8a:30:f5:d1:7c:54:73:
         c2:f7:95:3f:e3:4e:06:73:f5:a6:34:20:92:ee:d5:db:36:26:
         59:07:9d:9f:e7:5c:78:a0:b5:15:7d:08:74:b1:66:da:4d:a4:
         fe:e8:76:7e:41:58:52:8f:de:a5:7f:de:f1:7c:93:5d:f3:37:
         3f:eb:21:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 16 09:21:52 2025 by rpki-client