Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a33303a3a2f34342d3434203d3e20323733323030.roa
File:                     323830333a653635303a33303a3a2f34342d3434203d3e20323733323030.roa (raw, json)
Hash identifier:          yIv8t89qmlZhTvZ6tquDMAKbsd/RTBMFr/A3PEr3XD4=
Subject key identifier:   76:7B:56:E3:D9:A4:79:A4:6B:DC:9E:C8:D1:E2:B2:01:D1:4A:88:51
Certificate issuer:       /CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
Certificate serial:       7C0020572571DEF1AA7B1489C1FC429DD10EFC73
Authority key identifier: F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a33303a3a2f34342d3434203d3e20323733323030.roa
Signing time:             Thu 11 Sep 2025 22:25:00 +0000
ROA not before:           Thu 11 Sep 2025 22:20:00 +0000
ROA not after:            Thu 10 Sep 2026 22:25:00 +0000
asID:                     273200
IP address blocks:        2803:e650:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:00:20:57:25:71:de:f1:aa:7b:14:89:c1:fc:42:9d:d1:0e:fc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
        Validity
            Not Before: Sep 11 22:20:00 2025 GMT
            Not After : Sep 10 22:25:00 2026 GMT
        Subject: CN=767B56E3D9A479A46BDC9EC8D1E2B201D14A8851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:26:c6:8f:6b:3b:bd:b6:1a:a0:a8:07:2a:
                    cf:6a:ab:1a:04:f2:fa:32:1e:65:85:7d:d3:02:41:
                    19:b2:ea:38:ce:ee:c8:c5:18:a2:64:f8:c0:72:a9:
                    0d:2c:e5:cc:32:ed:37:9a:65:ac:12:4d:39:e4:65:
                    68:f0:2a:c6:58:0b:a0:42:4e:e1:e6:ef:0e:c1:b6:
                    1c:02:63:9f:7c:a2:2e:ed:21:c2:d9:76:7b:e9:a5:
                    f6:9c:29:1e:f3:84:d7:68:5f:86:2c:39:90:14:c0:
                    d5:2b:84:ee:e0:9f:ec:d8:70:85:5b:f7:01:36:06:
                    9b:dd:23:6a:b9:7f:36:2f:81:11:d7:d3:48:7c:46:
                    a0:54:68:2f:9c:59:86:ff:9e:c3:ee:aa:73:be:64:
                    91:5b:07:83:4d:48:b6:c0:97:8e:cb:d4:0e:fb:68:
                    39:70:9d:b2:74:1b:15:a5:16:88:49:c8:b8:e6:dc:
                    c0:34:d8:a1:87:20:55:ea:99:6e:2b:ec:31:1d:96:
                    cb:01:c1:74:c8:69:59:dc:e8:30:ba:e9:75:5f:9c:
                    9d:9a:8a:f6:9e:d3:4d:29:6e:cf:4e:03:11:56:e1:
                    2e:a1:3b:34:62:3a:7d:bc:13:e5:1f:c1:23:37:7c:
                    e8:74:27:3d:bc:44:d8:ec:0e:d6:2b:d8:5b:8e:26:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:56:E3:D9:A4:79:A4:6B:DC:9E:C8:D1:E2:B2:01:D1:4A:88:51
            X509v3 Authority Key Identifier:
                keyid:F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a33303a3a2f34342d3434203d3e20323733323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e650:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:78:b0:85:44:99:28:09:c8:d2:20:10:bb:be:d2:6e:87:
         48:a1:0e:dd:a0:f5:60:b1:67:9b:47:c8:48:60:42:49:f7:a8:
         d3:85:75:13:af:68:94:86:7d:91:89:e8:9a:2b:13:2f:68:79:
         c2:c4:6d:a7:19:4c:68:24:73:94:9d:69:42:a8:9f:15:33:20:
         88:6a:b8:e0:d1:d9:94:4e:4e:78:9d:a5:12:e1:a8:b7:35:4a:
         f3:ab:99:d9:8d:17:16:70:0a:0a:18:3c:e3:33:26:30:e3:18:
         01:56:23:d0:94:76:5a:17:29:f9:17:50:93:db:59:af:16:ba:
         81:24:da:da:33:8b:89:09:f3:07:e5:4a:7b:c5:c2:78:f8:ff:
         e2:a2:2d:3c:92:aa:53:14:db:bb:5c:7b:2c:fe:6d:31:60:18:
         48:11:b7:19:cf:be:3a:b4:45:db:6d:f1:1a:97:cd:34:88:da:
         3e:9d:08:fa:3b:d2:9a:38:0c:f8:d8:de:f5:35:4b:4d:f0:1f:
         e7:c9:8c:65:b5:e6:70:23:72:f1:30:3d:04:c7:38:71:d4:db:
         08:62:56:6f:40:62:91:5a:bd:3e:0e:dc:76:a6:57:17:e6:b2:
         2e:10:27:74:bf:72:37:7a:ab:c1:ba:7c:e6:8c:b0:45:3c:ff:
         bf:02:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:11:57 2025 by rpki-client