Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa
File:                     323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa (raw, json)
Hash identifier:          wPGOJhup8sWwkJgtb0BPT5y6JyzanBSQZ1OQ9KSSxTY=
Subject key identifier:   13:09:81:AC:CA:03:5A:0A:A9:7A:6B:24:50:14:55:55:6B:4D:62:80
Certificate issuer:       /CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
Certificate serial:       4F2153DE51FE64F59F55C949A86F0F4C8638FDAD
Authority key identifier: F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa
Signing time:             Thu 11 Sep 2025 22:25:02 +0000
ROA not before:           Thu 11 Sep 2025 22:20:02 +0000
ROA not after:            Thu 10 Sep 2026 22:25:02 +0000
asID:                     273200
IP address blocks:        2803:e650:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:53:de:51:fe:64:f5:9f:55:c9:49:a8:6f:0f:4c:86:38:fd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
        Validity
            Not Before: Sep 11 22:20:02 2025 GMT
            Not After : Sep 10 22:25:02 2026 GMT
        Subject: CN=130981ACCA035A0AA97A6B24501455556B4D6280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:59:2d:df:f5:40:bd:7f:cb:93:2b:41:1f:
                    80:47:51:03:c8:ad:8d:07:a8:5b:85:ce:4d:5c:0f:
                    87:d5:7d:1d:51:b4:c2:20:4a:89:fa:f5:67:f2:39:
                    ea:61:3e:00:64:ab:27:4e:d0:fc:24:b5:7c:ad:3f:
                    0e:2d:4b:a1:31:bf:af:b9:d2:79:5c:e6:ce:2b:d7:
                    2b:0e:42:2f:5c:3b:3b:51:11:25:91:22:d1:c6:5d:
                    a4:f6:fb:f0:c8:95:a0:4d:f7:74:6b:a8:fa:05:6e:
                    3c:b2:40:a2:8b:56:f0:d1:26:63:23:87:7e:d1:52:
                    ce:52:a7:1e:00:e7:90:a8:f3:96:e1:b9:e6:4b:50:
                    f9:43:53:91:54:99:e4:f9:f6:01:e8:82:05:9b:67:
                    5e:ff:02:e2:54:91:f1:67:3f:6a:0f:10:01:22:5d:
                    07:c1:56:3e:91:a9:b1:bb:24:a3:62:56:cb:66:9b:
                    a1:bf:9a:ab:94:52:bc:1a:51:eb:9d:ff:a9:13:b8:
                    e9:0b:69:2c:40:92:9e:0a:6a:5d:a9:17:ae:e5:dd:
                    68:42:10:33:38:99:ad:96:80:30:a1:07:cc:d7:86:
                    9a:14:10:24:db:df:7a:f0:de:8d:0d:1d:2c:4e:12:
                    e8:c2:4a:9d:06:a4:cb:4c:e3:f5:c6:bf:cb:60:da:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:09:81:AC:CA:03:5A:0A:A9:7A:6B:24:50:14:55:55:6B:4D:62:80
            X509v3 Authority Key Identifier:
                keyid:F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e650:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:55:c8:04:be:73:33:20:95:3a:86:1f:c0:ea:1f:40:1c:
         e3:fa:f4:85:d3:88:e4:3a:89:81:ce:5e:aa:c6:e3:52:94:1b:
         97:5f:44:90:7c:3b:bb:cf:b3:d2:cf:98:41:1f:81:eb:17:1c:
         df:a1:04:a4:9c:49:e5:86:6a:87:d6:27:f8:f6:10:56:87:21:
         ca:a3:c1:e9:12:20:d1:2b:ba:8d:06:5a:ea:3c:5f:f1:17:a5:
         51:9c:58:d7:b4:db:76:48:3a:f4:ca:e4:b7:7a:87:c6:17:85:
         49:72:43:93:e7:31:3e:01:db:7e:38:5b:9d:62:99:b9:99:b2:
         23:48:0b:08:7d:55:7d:74:e5:39:82:55:ef:4b:88:55:91:b9:
         9b:30:cb:37:d3:4f:5c:45:da:e6:4e:25:63:ac:04:56:a4:5c:
         62:ee:f4:b1:03:2c:4c:52:ef:6b:2d:8f:07:36:50:76:a4:f5:
         46:83:c8:4a:7e:f5:a7:84:14:b0:93:93:71:95:84:9d:61:37:
         59:5a:7d:68:e6:ac:ae:b0:64:e8:68:98:d7:f5:25:9f:26:29:
         ae:29:00:e7:16:35:b4:ae:21:b5:71:2f:76:41:d6:33:eb:d6:
         f8:fb:d8:09:c6:c7:31:a8:54:db:02:77:da:0a:8f:85:25:0b:
         fb:ab:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:53:21 2025 by rpki-client