Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a323a3a2f34382d3438203d3e20323636383630.roa
File:                     323830333a623261303a323a3a2f34382d3438203d3e20323636383630.roa (raw, json)
Hash identifier:          j16OIdTx3oFyxtR72NkdwefJwRq3HipHbYZelqYTc5k=
Subject key identifier:   AB:28:92:02:3E:4A:27:E9:E0:EF:80:52:BD:C2:6C:AC:9F:03:BC:DA
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       67ED279339F6CB6BB9599401DAF0E2D21FCAB5D4
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a323a3a2f34382d3438203d3e20323636383630.roa
Signing time:             Thu 11 Sep 2025 13:45:00 +0000
ROA not before:           Thu 11 Sep 2025 13:40:00 +0000
ROA not after:            Thu 10 Sep 2026 13:45:00 +0000
asID:                     266860
IP address blocks:        2803:b2a0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ed:27:93:39:f6:cb:6b:b9:59:94:01:da:f0:e2:d2:1f:ca:b5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Sep 11 13:40:00 2025 GMT
            Not After : Sep 10 13:45:00 2026 GMT
        Subject: CN=AB2892023E4A27E9E0EF8052BDC26CAC9F03BCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:d6:df:2f:26:df:a2:8b:7e:09:9c:66:f8:
                    b9:26:60:15:2b:8a:a9:cd:5f:23:25:0d:16:24:23:
                    3c:ed:8b:a5:ee:9a:6a:a9:93:0f:91:31:2b:40:17:
                    d9:c1:07:0a:2c:f0:7f:20:ae:13:d5:97:a9:cc:16:
                    91:f7:98:61:b6:b8:68:cc:3f:eb:2a:66:29:33:41:
                    3b:22:75:9b:bc:df:61:a5:77:14:d9:03:23:d0:11:
                    4b:d8:eb:9b:5a:c6:85:43:38:51:41:9a:80:62:21:
                    cc:ca:7e:4f:49:ba:f2:5e:bd:79:6a:60:ee:01:a3:
                    1f:dc:61:c8:ee:89:20:3a:55:30:3a:83:48:fe:c2:
                    45:92:49:dd:7c:8a:65:19:3c:4b:40:e4:60:45:89:
                    f5:40:5f:ea:f4:9e:e0:d3:5b:17:a2:08:68:b2:fb:
                    28:37:95:2c:2e:fe:c2:50:cd:22:f7:ea:f1:2c:b8:
                    b7:56:b0:03:05:b0:94:bc:e3:2c:d6:23:3e:f1:d7:
                    4a:06:0b:88:5f:e7:60:23:1d:89:0c:e1:e1:58:bc:
                    f4:2e:5e:9e:32:cc:fd:09:4c:98:d8:54:96:a9:dd:
                    df:42:ed:cb:7a:5a:50:d1:b7:af:aa:e3:68:5b:30:
                    2b:45:c8:a6:07:08:2d:1b:14:ab:a6:96:46:ac:39:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:28:92:02:3E:4A:27:E9:E0:EF:80:52:BD:C2:6C:AC:9F:03:BC:DA
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a323a3a2f34382d3438203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:3f:d8:c8:f0:be:b2:ea:07:d6:bb:63:80:22:51:4c:3c:
         b7:64:14:da:04:e8:c9:12:fd:2f:59:1c:48:2c:61:6f:cc:9c:
         a6:9b:9c:34:9a:1d:b4:c9:56:16:50:90:e7:02:16:66:7e:35:
         de:b3:cb:77:8f:bc:6c:ae:4b:d2:99:b2:cc:a9:35:de:31:51:
         aa:62:9d:8e:8a:87:6c:7f:81:1d:1d:f7:28:76:d2:8e:23:df:
         f1:21:9b:25:70:33:4c:e6:a0:db:ba:5d:2d:57:06:1b:96:1a:
         8c:5f:d6:dd:50:1e:c6:2c:4d:ca:8c:d3:3e:bb:d8:62:e2:34:
         21:3a:3f:4b:03:71:db:b9:0a:e8:b9:9f:e9:19:eb:0d:c6:41:
         d3:f3:44:bb:9a:9c:36:50:b6:26:4c:2f:e9:83:31:be:d2:1d:
         5f:81:65:ad:de:03:2e:dc:51:07:a0:83:f5:cc:0e:e4:72:fd:
         e8:8c:79:e3:9c:6b:21:13:1b:af:65:e7:a8:36:f9:5e:13:4c:
         af:c9:a7:94:81:ad:48:e2:35:80:2e:fd:f8:c7:97:06:0c:8f:
         ef:d2:22:3b:27:45:18:a6:bc:f2:75:3b:28:1d:c1:a4:6b:8a:
         7d:01:32:5b:21:d5:79:e2:89:72:5a:8a:05:1a:b9:72:b6:6e:
         6e:9b:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:29:51 2025 by rpki-client