Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323733383836.roa
File:                     323830333a336134303a3a2f33322d3438203d3e20323733383836.roa (raw, json)
Hash identifier:          /76AHodSX/TXQfYgaiFB6y34Qisnyzd8Be6JZyURlyA=
Subject key identifier:   B4:70:AF:F1:1B:D3:41:92:71:43:D1:2C:EA:06:63:03:63:58:56:EB
Certificate issuer:       /CN=4E3267FAB0006558F96FC153AC65738471EF0825
Certificate serial:       764D2F98A75686EC780451E8C2729145B7248450
Authority key identifier: 4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323733383836.roa
Signing time:             Mon 25 Aug 2025 22:50:00 +0000
ROA not before:           Mon 25 Aug 2025 22:45:00 +0000
ROA not after:            Mon 24 Aug 2026 22:50:00 +0000
asID:                     273886
IP address blocks:        2803:3a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4d:2f:98:a7:56:86:ec:78:04:51:e8:c2:72:91:45:b7:24:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E3267FAB0006558F96FC153AC65738471EF0825
        Validity
            Not Before: Aug 25 22:45:00 2025 GMT
            Not After : Aug 24 22:50:00 2026 GMT
        Subject: CN=B470AFF11BD341927143D12CEA066303635856EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:57:44:3a:57:d7:da:5c:b6:eb:12:e1:ab:
                    fc:fc:44:61:b0:57:a7:08:bc:ef:2a:c5:48:77:7f:
                    82:30:6d:08:8a:10:6c:01:1b:73:ad:0a:4e:db:5e:
                    12:e1:b6:44:4e:a8:f5:51:10:d0:1e:cc:92:a1:2a:
                    93:8e:28:fb:df:9d:4d:5e:e4:80:77:30:c6:bd:af:
                    9e:fb:67:eb:69:a0:9f:fe:6f:38:8e:42:39:40:ea:
                    aa:a7:0a:13:bf:64:54:2d:31:d9:ec:b5:3e:d5:5c:
                    2b:36:da:57:84:7a:f0:37:44:4e:9d:3b:e7:b4:7f:
                    3a:8d:2d:b6:f4:54:74:00:e7:29:da:96:c3:47:f4:
                    8d:3f:44:9e:b7:fd:71:f9:46:58:f7:a6:37:8b:63:
                    46:64:7e:fc:30:e0:0d:23:40:fc:fd:e4:c0:22:89:
                    79:8f:59:bb:8e:b9:02:de:47:e0:60:ce:d8:65:50:
                    9d:ff:fa:a5:0a:c5:83:32:87:77:91:e6:cb:16:af:
                    77:da:92:cf:37:9b:04:39:3b:19:cc:9c:10:a3:ea:
                    35:d4:ea:cb:cd:36:c7:cf:2e:96:43:32:ee:a5:4d:
                    15:80:c9:5e:7c:f6:86:f1:56:b8:46:b2:b0:6b:e1:
                    c2:0c:dd:7a:48:7a:60:e9:73:63:b3:b5:38:24:07:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:70:AF:F1:1B:D3:41:92:71:43:D1:2C:EA:06:63:03:63:58:56:EB
            X509v3 Authority Key Identifier:
                keyid:4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323733383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:06:bb:f5:33:b5:38:98:8f:d4:9b:c0:5b:97:fa:80:2f:de:
         40:87:b1:43:22:93:20:eb:27:c9:60:46:b5:a5:a0:9d:c5:76:
         3a:fa:3a:19:cf:fd:8b:68:f9:bd:c3:ba:2e:9a:5e:ea:63:52:
         61:ca:e6:f7:d1:15:6f:8e:c9:83:f2:c1:50:0f:b8:ca:52:fd:
         3a:45:6b:0b:b2:35:89:f0:d1:e4:0a:86:a1:a4:7e:c1:9f:0f:
         02:c4:07:d4:f6:b3:e8:66:f1:73:22:d3:19:ba:68:1a:cf:3e:
         36:47:9a:40:34:99:8a:8a:66:6f:af:73:1e:b7:a4:34:62:0e:
         bf:9e:05:07:42:ad:77:ce:4b:65:85:d7:f1:fc:90:f1:83:19:
         eb:6f:3c:38:90:f6:75:d5:6b:e2:f7:fe:3d:df:98:72:dc:3a:
         3a:99:44:06:87:33:fa:ed:0f:09:bb:37:ea:85:bb:13:45:20:
         0a:a0:25:03:d1:9b:93:68:98:50:9a:e9:46:43:32:3e:ec:cf:
         93:98:4d:a7:6a:d3:01:ea:06:3b:ce:02:77:1c:5a:1b:ed:e4:
         0a:f1:ee:ad:e6:7b:c9:b0:3c:1d:60:2e:04:bf:4e:86:20:b5:
         c2:d5:30:06:e6:93:15:a4:1f:58:0e:a0:fe:ba:a2:0d:b9:0a:
         5e:7d:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:19:27 2025 by rpki-client