Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          3Lqt4EifNK5qSUGz2K01in6zsTPld4Uf2HB7lGr7SZ4=
Subject key identifier:   FB:32:D6:FA:58:61:9A:7A:2B:D3:73:FA:51:0D:1D:58:C2:7E:45:EB
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       401A4690053F76E2706C9676F01CE92602F60A9F
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 22 Jul 2025 21:26:18 +0000
ROA not before:           Tue 22 Jul 2025 21:21:18 +0000
ROA not after:            Tue 21 Jul 2026 21:26:18 +0000
asID:                     52392
IP address blocks:        2803:b100:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1a:46:90:05:3f:76:e2:70:6c:96:76:f0:1c:e9:26:02:f6:0a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jul 22 21:21:18 2025 GMT
            Not After : Jul 21 21:26:18 2026 GMT
        Subject: CN=FB32D6FA58619A7A2BD373FA510D1D58C27E45EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:47:a8:db:3b:fc:ef:53:2a:6e:cf:35:7b:
                    2f:64:5c:c2:db:1e:d9:9a:08:29:7e:9c:86:1f:70:
                    a3:55:fa:7b:f0:c2:20:c5:13:30:b0:ae:57:8b:e0:
                    14:a4:87:00:ea:26:80:ed:0e:b5:a8:8a:ab:f2:83:
                    23:ab:f5:34:90:fd:f8:6a:36:6f:7d:b5:0e:5d:0d:
                    73:63:5c:11:09:52:05:30:33:4c:a7:74:4c:26:63:
                    7e:1a:a5:aa:ef:2c:eb:62:c7:7e:84:c4:c0:df:8c:
                    ea:35:b5:c9:aa:57:4f:1b:f4:39:dc:f1:57:01:e3:
                    82:bf:b7:d9:d7:76:9c:64:ca:24:9c:8d:7e:24:0d:
                    c0:ae:b0:d9:3d:74:71:75:54:41:69:de:4f:f1:90:
                    52:f5:9d:2c:5f:7e:60:32:ac:38:5d:d1:6a:6f:f7:
                    de:e6:33:51:69:05:6e:8b:72:d0:2b:d6:1e:39:c9:
                    cb:a5:d3:c0:a8:e0:e3:4c:5e:81:af:68:fb:6e:93:
                    19:13:91:6f:31:b3:b5:4f:a5:24:58:68:5a:0a:b6:
                    66:8e:81:16:b7:a9:f5:64:e0:32:b3:fe:d9:05:03:
                    89:7a:09:a9:6f:61:ec:e9:ad:01:d4:f5:47:01:90:
                    4d:92:fb:6a:88:a0:99:09:f5:5d:31:34:75:26:ed:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:D6:FA:58:61:9A:7A:2B:D3:73:FA:51:0D:1D:58:C2:7E:45:EB
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         e3:45:2b:e8:00:19:2b:50:66:ab:69:06:d6:65:33:4f:71:a6:
         5d:e9:be:e6:3a:f3:79:a9:43:f3:26:31:ed:cc:df:9c:14:4d:
         9a:f5:73:cd:cf:cf:c8:6b:8b:12:c1:ff:9a:6f:96:48:c1:11:
         53:a7:34:ec:6e:0d:8a:3a:72:88:8c:1a:5c:20:0b:c5:fb:cc:
         f9:94:c8:24:75:2b:0e:0a:99:a6:30:3b:8a:c1:ed:2f:b4:c0:
         5e:a2:bd:5f:ee:4e:2e:fa:93:2e:c6:dd:c2:dd:d5:1a:a8:ee:
         2e:20:09:83:ba:d0:43:67:7d:52:78:b5:d7:d5:10:3f:7b:4d:
         e1:39:3e:1e:31:48:91:8e:a7:3b:84:ff:d4:3f:b2:bc:40:17:
         e4:41:e4:5b:48:c4:dd:a2:d2:31:3e:50:76:7a:a1:e6:44:3c:
         99:58:4d:05:ae:06:23:7c:9a:d4:eb:c6:83:34:4e:d0:bf:25:
         2e:27:28:e5:50:9a:17:c0:a7:79:34:90:27:7e:6e:c9:bd:07:
         f5:92:5f:c8:c5:f7:3e:42:cb:55:9f:56:11:57:d3:e2:65:07:
         ed:d6:63:6b:f4:10:4d:9f:ba:fe:42:47:5a:e2:42:7a:ea:cb:
         8a:5f:ba:1f:e9:4c:24:bc:19:26:6a:7d:a3:ad:90:20:22:59:
         b5:1c:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:53 2025 by rpki-client