Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa
File:                     323830333a316634303a3a2f33322d3634203d3e203238303735.roa (raw, json)
Hash identifier:          FwvsMecivHyiYlVULnBVV8rIGPDdYRoOX/ccYCF/HhE=
Subject key identifier:   E4:63:9F:9C:FC:6E:E5:83:95:46:30:FD:14:8F:97:A1:3A:76:B2:38
Certificate issuer:       /CN=4BE45DC748EE7774D4EF8F672A9497EE7DF030F7
Certificate serial:       7E2433CC476539FD0E469A1167DC4ADD9FC8A7CF
Authority key identifier: 4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa
Signing time:             Mon 21 Jul 2025 16:30:00 +0000
ROA not before:           Mon 21 Jul 2025 16:25:00 +0000
ROA not after:            Mon 20 Jul 2026 16:30:00 +0000
asID:                     28075
IP address blocks:        2803:1f40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:33:cc:47:65:39:fd:0e:46:9a:11:67:dc:4a:dd:9f:c8:a7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE45DC748EE7774D4EF8F672A9497EE7DF030F7
        Validity
            Not Before: Jul 21 16:25:00 2025 GMT
            Not After : Jul 20 16:30:00 2026 GMT
        Subject: CN=E4639F9CFC6EE583954630FD148F97A13A76B238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:c5:e2:a8:0e:23:96:76:35:e0:7a:ba:ff:
                    7f:c2:48:dc:22:2d:0e:a8:33:ba:71:37:fe:9d:01:
                    d4:d2:4e:3e:a6:e9:54:0d:1f:0e:71:95:24:77:2c:
                    50:92:7f:35:e7:97:46:e6:e2:7f:42:6a:21:1e:10:
                    41:42:5a:d3:86:56:f8:c3:9e:63:be:fd:59:19:3a:
                    3a:5c:d0:78:5a:b9:5b:07:bb:8a:44:80:f2:b8:72:
                    54:60:de:92:88:23:7b:8a:9d:37:ae:92:a7:d3:86:
                    30:a8:46:99:37:4d:f1:a9:b7:bb:8a:c5:11:ee:e1:
                    48:8e:cd:ad:80:77:ec:82:bc:12:76:81:29:b4:ee:
                    23:f3:50:0c:b1:d7:10:df:d8:c0:ec:06:95:d2:da:
                    cf:0d:a9:cc:cc:fc:d2:dc:1f:61:9d:ed:b5:5d:fc:
                    c9:25:8a:45:2a:77:f0:ba:f6:ba:77:de:af:4c:16:
                    9c:ff:49:71:86:e8:03:2d:ad:1a:18:99:41:31:57:
                    f3:e8:a8:84:88:c2:28:d5:35:5f:eb:c9:d0:e5:58:
                    f4:10:20:47:35:40:f0:74:c2:d3:fa:ea:cf:c5:50:
                    6e:4d:be:5f:1c:63:87:5b:cf:a4:5e:fc:a8:97:53:
                    dd:91:5b:f7:3f:77:21:3a:6c:4a:8d:d9:26:2c:b8:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:9F:9C:FC:6E:E5:83:95:46:30:FD:14:8F:97:A1:3A:76:B2:38
            X509v3 Authority Key Identifier:
                keyid:4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:4f:be:63:82:fb:2a:88:be:8d:78:02:cb:15:b5:7f:f1:
         52:9a:16:5d:01:cf:8b:8f:db:c6:68:d2:b7:d1:28:ed:fa:ac:
         0f:8f:38:2c:b4:85:37:e8:ca:ca:31:ab:69:e3:21:4e:aa:ab:
         23:02:01:50:95:43:5f:1e:b4:f5:ae:55:05:e0:ee:e8:c8:e9:
         7a:8d:a2:a5:d6:26:55:d4:c4:d3:3a:89:84:f2:1e:42:9c:0f:
         f7:48:e5:be:7c:09:d0:32:e3:1f:9c:0f:db:d0:fa:d3:00:2a:
         dd:75:cb:6f:31:34:42:71:97:89:7e:dc:ea:bf:54:3e:f3:84:
         94:a0:d8:f9:7d:bb:cc:d6:1c:a3:da:ac:ed:3f:30:60:68:f6:
         52:c8:35:13:5b:61:08:e0:50:b8:d3:8d:32:78:ff:c3:ce:82:
         70:82:04:f6:01:e7:e1:1b:53:0b:1c:56:b6:cf:3a:ec:32:90:
         d6:8a:d2:65:9d:9c:01:93:50:5d:c3:58:c7:5f:77:f3:53:21:
         d0:f7:4d:86:e3:52:53:9b:43:d1:0d:87:0d:37:a3:2f:df:9d:
         34:e7:a6:38:aa:a5:ba:8f:15:54:84:fb:3d:00:7f:b9:f2:9a:
         60:e7:20:b1:97:46:81:45:7f:ff:24:ee:2d:c1:6b:0f:79:09:
         c9:ce:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:00:30 2025 by rpki-client