Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a343a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a343a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          mHMHAphdWpj95E4iY9O46SvtoqJ/3HpQyAm8O6N5hs4=
Subject key identifier:   52:8E:15:B7:88:F4:60:05:70:A1:2E:31:96:D1:AA:BA:8D:59:D0:16
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       31A9573E941A74C65C4642F90B0B753B1E8B8932
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a343a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 22 Jul 2025 21:26:19 +0000
ROA not before:           Tue 22 Jul 2025 21:21:19 +0000
ROA not after:            Tue 21 Jul 2026 21:26:19 +0000
asID:                     52392
IP address blocks:        2803:b100:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a9:57:3e:94:1a:74:c6:5c:46:42:f9:0b:0b:75:3b:1e:8b:89:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jul 22 21:21:19 2025 GMT
            Not After : Jul 21 21:26:19 2026 GMT
        Subject: CN=528E15B788F4600570A12E3196D1AABA8D59D016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:ab:84:4b:b2:4a:59:db:64:3b:50:66:f9:
                    d5:28:72:09:b8:5a:8d:7a:21:8e:fe:ad:b5:b7:e2:
                    c0:e1:d3:94:14:ee:49:ba:e0:72:90:b9:50:6c:b7:
                    c3:55:4e:bf:7c:c8:66:4a:5e:fc:bc:63:7d:f5:a4:
                    ff:b3:8b:08:17:f7:55:5e:b7:b4:a8:63:a6:eb:37:
                    4a:84:1a:ba:af:9f:4d:67:54:f1:f1:89:d3:fb:b1:
                    ee:0c:24:e2:12:72:bd:ca:2d:ec:ab:61:70:d6:8f:
                    1d:2e:d7:43:ce:d6:b0:69:0b:b5:c3:b7:d6:fd:e0:
                    f8:f2:3d:ea:47:c7:07:1e:63:b6:36:d1:ae:4e:eb:
                    e7:d2:51:8e:ea:3f:f8:06:ca:f8:52:9c:5e:69:cd:
                    01:7c:56:85:2b:aa:93:82:3b:b6:89:60:d9:40:84:
                    bf:16:7a:98:27:3c:70:c1:be:98:c6:b5:1c:d9:90:
                    b9:20:cc:d7:19:7b:84:34:df:9e:50:c7:23:74:fb:
                    a0:f7:52:35:fb:92:44:eb:3a:06:bc:90:f5:74:c7:
                    9e:50:53:8a:1e:da:55:c3:fe:6a:8e:f8:99:f4:98:
                    e2:52:ac:77:00:f8:94:34:d6:6c:74:eb:11:c0:ca:
                    83:a3:e1:2c:d0:30:f1:5a:ba:12:34:74:8a:6c:56:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8E:15:B7:88:F4:60:05:70:A1:2E:31:96:D1:AA:BA:8D:59:D0:16
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a343a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         e4:46:0e:e2:27:fc:b2:9f:ee:0d:36:9d:28:8d:bb:f8:3e:50:
         56:1d:3e:0f:84:9f:4b:92:92:54:53:45:8b:d4:d5:5d:39:ba:
         fe:a1:3d:3d:a6:a0:7b:dd:99:78:a6:6e:bb:f9:a1:ca:dc:15:
         e6:51:02:4f:f0:c6:87:73:e3:a7:3f:8d:cd:e5:b2:14:36:38:
         7f:af:67:14:f3:08:3f:57:81:a9:bb:16:1e:07:06:43:3b:da:
         ca:77:ac:52:af:e6:e8:f1:d4:c0:d9:4e:ad:09:df:fc:93:30:
         d4:5d:91:c5:a9:df:6e:5e:61:4f:8f:7f:10:ff:1f:7b:cb:b3:
         01:24:04:48:ae:a0:97:44:d8:20:15:72:dc:f8:bd:7d:2e:b0:
         d3:c3:d9:d9:f3:cf:9c:66:8b:7b:6e:2a:eb:fc:ba:6c:54:59:
         d3:d6:da:dc:38:4d:04:dd:be:70:21:1f:38:c0:a5:26:eb:52:
         92:f2:23:00:e4:97:2c:24:79:79:f2:f1:0d:b2:e7:2c:ec:87:
         1f:9f:a9:47:3f:99:64:35:75:10:c7:e0:1e:7b:9b:9d:af:90:
         7c:58:84:4a:21:f6:3f:c9:3d:8b:77:ce:7e:0a:28:93:aa:fb:
         60:a9:30:91:13:1a:d4:79:2b:13:82:c5:ff:ef:10:ea:b7:60:
         57:ea:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:53 2025 by rpki-client