Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa
File:                     323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa (raw, json)
Hash identifier:          R3AJPlxqAAukcSMxBj7sfMmIC0dZ2lZyBROFkPVkqFk=
Subject key identifier:   4E:D8:3D:79:65:EF:35:C6:04:3A:F4:8C:DE:CA:7F:44:A0:D8:45:FD
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       6E9D036B589EDB344A627093290B84F6343BFFAF
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa
Signing time:             Thu 04 Sep 2025 16:42:59 +0000
ROA not before:           Thu 04 Sep 2025 16:37:59 +0000
ROA not after:            Thu 03 Sep 2026 16:42:59 +0000
asID:                     273934
IP address blocks:        2803:b0e0:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 20:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:03:6b:58:9e:db:34:4a:62:70:93:29:0b:84:f6:34:3b:ff:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Sep  4 16:37:59 2025 GMT
            Not After : Sep  3 16:42:59 2026 GMT
        Subject: CN=4ED83D7965EF35C6043AF48CDECA7F44A0D845FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:73:a5:09:61:ca:3e:a9:2d:c0:b8:9d:1e:
                    34:bc:78:35:ec:31:1d:98:ce:84:c5:d2:52:22:84:
                    81:c2:4c:ed:10:8e:5a:34:d3:61:58:37:a1:80:1f:
                    32:0b:9a:00:90:1e:b3:68:38:c6:9d:5d:66:ed:96:
                    d3:36:dd:60:e6:82:a6:90:51:a4:22:54:17:aa:ed:
                    1b:c1:6a:93:f9:41:2b:d1:a9:06:74:a1:3c:d6:1a:
                    a2:0b:1c:e4:51:22:5b:74:49:49:d8:1d:9c:c9:e9:
                    f2:e8:b1:e0:a1:c0:52:9b:49:13:c2:06:99:e9:83:
                    49:e6:19:79:f1:e0:be:b2:20:17:bb:2d:07:17:47:
                    29:7d:c3:79:06:5d:6e:b7:72:c2:42:06:99:1f:fc:
                    ab:fb:1b:28:65:e0:4e:1e:9a:42:ab:96:bc:60:61:
                    8d:0d:8e:fb:ce:4d:d6:66:cb:25:ba:6b:88:5d:96:
                    b7:e7:a4:0a:27:0b:24:0d:d0:10:50:89:c2:a3:a4:
                    69:47:e7:aa:99:4c:a2:58:fe:71:80:5e:10:04:cd:
                    72:f2:38:06:1a:19:ed:12:cc:1f:ac:ed:d7:8a:72:
                    40:d4:cf:c0:14:5c:f6:d7:cf:92:2c:f3:01:97:51:
                    0f:33:62:40:a9:59:b8:4d:08:e0:fd:79:ec:3b:5b:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D8:3D:79:65:EF:35:C6:04:3A:F4:8C:DE:CA:7F:44:A0:D8:45:FD
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:4a:05:d6:dd:83:88:e0:f3:91:e5:be:42:ae:78:ad:4f:
         2b:6f:b9:4e:e8:55:7b:ed:19:8e:49:e9:84:59:cb:7d:5a:39:
         29:0b:43:6a:02:3f:78:c7:f6:c4:7e:17:66:6f:83:97:46:f2:
         50:96:d9:a9:db:c7:e2:9a:1f:c3:59:f1:c5:19:3a:b5:66:06:
         a5:ec:ab:2d:0f:68:ab:f6:e6:03:e5:89:b8:3c:3f:5e:ea:b1:
         3d:30:a6:3d:0f:25:03:f6:05:c9:44:35:e3:bd:db:ea:6d:a2:
         b7:05:f0:ed:bc:da:b5:b9:e7:f2:cc:e7:ad:c7:7a:f6:cf:dc:
         12:fa:0d:66:a7:3c:90:38:66:21:d7:ab:7a:4a:85:e3:28:f8:
         93:a1:1a:1e:48:61:2e:87:ca:2e:52:2e:9f:b7:a1:31:b0:17:
         03:7f:6b:97:cb:9f:6a:e9:b2:e4:7d:b2:82:bc:6f:0e:ff:b2:
         19:6b:53:5b:48:40:f0:59:d3:25:7c:9f:3b:38:83:cb:d9:73:
         c3:7b:3c:8f:18:68:a7:13:c6:e2:8c:01:49:be:3c:5b:76:12:
         4c:61:a2:b3:da:bf:81:1b:9b:4a:00:ea:d1:5f:b5:fb:02:98:
         95:f0:16:83:f9:1c:d8:c4:7c:4f:23:40:5f:fd:7a:0e:5d:5c:
         fb:50:79:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:45:00 2025 by rpki-client