Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a333a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a333a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          z45Gv92q+sytNDgG5EZO3fZG0M0xv6sW5VoZcTWKZCo=
Subject key identifier:   0B:18:3C:09:E1:25:30:90:C9:3A:D3:6C:1E:A5:1C:63:61:1C:2A:1F
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       79F43545EB87942BC697830371F8191A13013FFE
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a333a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 22 Jul 2025 21:26:20 +0000
ROA not before:           Tue 22 Jul 2025 21:21:20 +0000
ROA not after:            Tue 21 Jul 2026 21:26:20 +0000
asID:                     52392
IP address blocks:        2803:b100:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f4:35:45:eb:87:94:2b:c6:97:83:03:71:f8:19:1a:13:01:3f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jul 22 21:21:20 2025 GMT
            Not After : Jul 21 21:26:20 2026 GMT
        Subject: CN=0B183C09E1253090C93AD36C1EA51C63611C2A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:32:50:42:6e:bf:e3:74:a8:dd:02:68:86:
                    6a:7a:67:66:33:e2:1a:ca:37:d7:e2:2c:00:7f:d4:
                    68:79:f1:8f:48:24:c7:1a:98:1d:9a:b7:75:94:5a:
                    1a:e7:8b:ee:a2:21:c3:04:59:0d:56:19:fa:5e:65:
                    fc:db:f5:a5:48:a5:af:49:f4:24:4f:ec:80:55:a7:
                    a3:8a:36:77:24:7b:3c:98:7c:b2:4d:2c:3f:f4:cb:
                    23:4d:ba:f1:64:8a:e4:16:90:22:cb:ec:97:91:e2:
                    48:fe:6b:9c:81:00:be:27:a3:cf:07:ce:3d:fe:73:
                    ff:29:78:94:ec:92:a7:51:44:17:a0:1d:ac:03:f3:
                    cf:4b:37:81:8b:73:4e:0b:ee:00:85:1a:62:80:0c:
                    c4:5d:c7:ff:c5:e0:6b:fd:0a:71:7d:62:e3:ae:4c:
                    ad:2f:1a:4a:bf:36:bf:66:34:6f:b5:0e:24:30:a7:
                    6f:80:d4:26:a9:e5:57:57:c0:3c:07:0e:45:23:32:
                    25:65:40:16:d4:33:d1:12:f1:30:7f:fd:e8:0d:49:
                    4c:e8:9d:c0:b9:39:27:f5:a0:47:03:c3:f2:ee:f5:
                    da:0c:7a:93:c8:a2:5c:5e:80:2d:87:9c:69:c2:34:
                    3d:4b:48:29:6d:88:91:8f:f7:43:19:ea:a2:25:80:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:3C:09:E1:25:30:90:C9:3A:D3:6C:1E:A5:1C:63:61:1C:2A:1F
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a333a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:ff:57:a8:7a:d2:9b:8e:14:42:82:af:74:ea:d9:4b:69:
         60:dc:8c:be:9f:b2:e1:4b:06:1b:6f:a4:a9:76:23:a6:2d:04:
         6e:94:9b:17:f7:48:7e:b6:5c:8b:10:7d:3d:d6:42:2d:13:55:
         86:df:2f:77:7d:9e:75:8e:7a:0f:45:07:d4:70:c8:bf:da:90:
         6c:81:76:5d:2a:89:26:68:fd:44:b6:ee:68:0f:93:00:3f:88:
         25:16:1d:35:ad:e2:c8:d4:75:55:94:1a:26:76:47:f6:ba:46:
         53:07:e4:ab:fd:50:27:b9:55:6f:1f:ea:fd:af:d7:38:cd:ce:
         51:98:04:7c:0b:ef:4e:fa:56:a9:04:82:75:ef:ef:9c:0f:79:
         65:67:2f:4b:a6:21:e2:9c:7a:75:e7:e2:28:8e:14:86:9d:7d:
         87:01:ec:e8:21:29:72:df:1a:5c:c7:53:c2:a5:ad:43:6c:33:
         1f:6f:fa:c2:e9:84:1f:54:45:8c:df:c2:99:3a:89:28:13:b5:
         ba:da:05:c9:c1:4e:02:d3:1b:f4:7e:bf:93:2e:df:0f:e0:e1:
         d0:d6:78:3f:21:3e:77:0b:8f:dd:42:8d:12:69:e1:fc:7e:e3:
         ed:78:c7:b6:1d:69:08:ea:52:cd:d3:53:ff:f9:03:bc:24:3c:
         80:01:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:53 2025 by rpki-client