Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3336203d3e20323633323232.roa
File:                     323830333a343638303a3a2f33322d3336203d3e20323633323232.roa (raw, json)
Hash identifier:          9azF9RbThfjqUJO3h2Yj6laf42zttv9QK/8+FAO9ROw=
Subject key identifier:   81:8F:57:02:74:BB:CE:D4:F8:2C:22:AA:18:5E:2A:5F:90:51:CF:87
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       09212B302D92B2CD765301D65A5DB8A20C4754D8
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3336203d3e20323633323232.roa
Signing time:             Sat 05 Jul 2025 17:30:00 +0000
ROA not before:           Sat 05 Jul 2025 17:25:00 +0000
ROA not after:            Sat 04 Jul 2026 17:30:00 +0000
asID:                     263222
IP address blocks:        2803:4680::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 19:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:2b:30:2d:92:b2:cd:76:53:01:d6:5a:5d:b8:a2:0c:47:54:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Jul  5 17:25:00 2025 GMT
            Not After : Jul  4 17:30:00 2026 GMT
        Subject: CN=818F570274BBCED4F82C22AA185E2A5F9051CF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:62:59:12:8d:e5:6a:62:62:37:b3:03:fa:
                    f0:18:83:25:5c:b2:b0:60:9a:19:c1:50:cf:37:02:
                    f7:83:d3:7e:ff:8d:e3:b5:cb:8c:1d:b5:d0:3e:17:
                    6b:7a:ed:27:de:c3:1d:49:0f:fe:5a:b1:a9:73:35:
                    d5:ef:c7:c3:68:6a:d9:1e:26:53:aa:01:88:80:87:
                    1a:6f:f0:04:fb:51:27:f9:19:d1:45:90:2f:ac:a4:
                    19:5e:99:de:9f:40:b9:85:e0:8c:c4:71:c9:e6:4a:
                    13:16:d4:7d:11:04:9b:9f:39:49:5e:a2:4f:d8:24:
                    c9:43:47:e1:d7:bd:78:19:92:03:48:64:0c:b1:fb:
                    be:68:ca:50:ae:12:93:e0:30:36:40:78:da:56:d6:
                    eb:1f:97:e3:71:24:ca:c0:7b:1a:7f:fc:47:dd:67:
                    95:d8:d1:a8:2f:72:f3:04:43:a1:fc:5f:02:3a:97:
                    7b:71:71:22:ac:0b:f3:9b:e3:a3:29:3e:fd:1c:3b:
                    36:71:09:2a:d4:1d:84:88:1b:e2:3c:25:73:76:8e:
                    ae:09:22:c0:e6:a2:55:a5:8d:77:24:35:5c:3f:33:
                    56:44:3a:16:47:6f:51:d6:2e:95:cd:76:74:4a:ed:
                    b7:a6:05:95:aa:8f:0f:df:70:19:12:a7:e3:56:12:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8F:57:02:74:BB:CE:D4:F8:2C:22:AA:18:5E:2A:5F:90:51:CF:87
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3336203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:35:8e:fb:36:54:59:1c:6a:4a:96:6b:9e:14:fc:63:87:
         83:fa:65:49:56:ab:1c:cb:13:fc:ff:0d:30:09:6d:40:10:62:
         7c:fc:0f:1c:b5:64:cf:42:01:af:73:52:cb:47:2c:72:32:b7:
         66:8d:b9:2b:d3:72:94:ef:b0:0c:72:df:3f:eb:cf:46:8d:c0:
         9a:f8:26:ac:53:d8:6c:1e:12:e2:18:9e:34:0e:43:43:16:f5:
         a0:9f:2c:32:48:43:33:00:0c:f6:6b:eb:85:50:d4:a0:e4:20:
         99:de:1a:35:3c:e3:0b:28:c1:61:79:d2:32:3a:29:a8:64:61:
         e7:82:99:10:23:c2:b0:70:8a:44:e1:2b:9a:62:84:42:8b:e8:
         a1:8d:c3:d1:23:f1:d2:d8:7a:aa:fe:b8:35:d5:25:07:69:82:
         5b:6e:56:ee:80:52:dc:81:72:43:7f:45:8d:f4:dd:ed:98:36:
         8a:3f:3b:ab:70:68:ff:15:e3:07:b2:cc:3f:30:15:f9:37:b6:
         59:2e:b4:63:45:0c:30:a3:0f:50:ae:0e:b4:0a:d0:28:a5:02:
         c7:b2:f5:3f:6d:14:38:fd:60:65:a6:2a:42:d0:3f:a9:a8:42:
         87:ca:a1:37:13:bd:6c:12:29:65:ac:23:ab:fd:c4:13:d2:d8:
         58:68:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:17:38 2025 by rpki-client