Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
File:                     323830333a353834303a3a2f33322d3438203d3e20323632313435.roa (raw, json)
Hash identifier:          g19vKvTdqt1NRrlcpGu27GcK0swtCZ9G12Eqqb3nOjw=
Subject key identifier:   62:ED:9B:C2:7E:9B:0F:BE:DD:F0:C3:AF:8A:9B:EF:52:74:FD:27:5A
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       11529EAF09E7CC114FE74F73F7E1EE2EA95CD808
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
Signing time:             Thu 10 Jul 2025 22:24:59 +0000
ROA not before:           Thu 10 Jul 2025 22:19:59 +0000
ROA not after:            Thu 09 Jul 2026 22:24:59 +0000
asID:                     262145
IP address blocks:        2803:5840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:9e:af:09:e7:cc:11:4f:e7:4f:73:f7:e1:ee:2e:a9:5c:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Jul 10 22:19:59 2025 GMT
            Not After : Jul  9 22:24:59 2026 GMT
        Subject: CN=62ED9BC27E9B0FBEDDF0C3AF8A9BEF5274FD275A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:fe:72:97:3b:3c:a6:4d:6c:cc:d7:f8:9a:
                    cc:fa:f6:99:1d:4b:38:50:3f:b7:c1:95:9b:13:df:
                    3a:38:cc:b2:d9:6c:04:c0:ef:5b:57:2b:e9:94:bf:
                    6a:33:28:06:47:79:f2:4a:c0:46:22:f8:16:ef:d9:
                    7f:7b:a6:21:19:01:cf:02:6d:ec:0a:03:00:1c:27:
                    c0:91:92:e5:77:5c:88:89:b4:ad:97:6a:9e:b9:3d:
                    06:5e:3a:16:14:0d:7b:72:ba:55:df:61:57:5b:59:
                    f8:99:93:a8:0d:07:58:67:85:92:61:04:eb:e8:56:
                    ee:84:50:47:2f:8d:e9:ec:e5:f5:da:10:94:93:61:
                    d8:93:b2:f6:0c:3a:04:7f:d0:1b:4d:3b:d1:5c:e7:
                    58:92:78:c5:46:66:eb:50:c9:66:3d:69:cf:f4:0e:
                    ec:4c:a6:e5:0f:be:24:e1:be:20:ac:7e:c6:8f:be:
                    6b:ba:03:93:3a:93:b1:7c:22:55:72:57:87:23:cf:
                    82:59:53:6e:62:8c:83:60:24:5a:d8:aa:33:60:11:
                    db:6e:72:f5:cd:73:94:63:70:47:8d:09:83:da:df:
                    63:c0:bf:0c:20:4c:45:54:96:db:29:8e:7a:54:fb:
                    ee:f9:dc:68:4c:44:30:fa:5c:f5:d1:4f:c2:0d:41:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:9B:C2:7E:9B:0F:BE:DD:F0:C3:AF:8A:9B:EF:52:74:FD:27:5A
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:41:e9:97:aa:5f:cc:a5:db:8b:15:e8:a2:36:3f:30:30:
         05:be:14:0a:ca:ba:6a:43:68:ce:20:2d:f7:e9:d7:6e:9f:4b:
         d4:07:65:d3:ba:47:e7:72:69:64:e3:37:32:02:15:67:39:b1:
         8b:e6:57:b2:cf:0a:a3:08:11:09:f6:a4:ad:ee:43:46:b1:74:
         e4:f9:2f:80:51:30:ee:3b:35:85:33:de:72:80:28:6a:e0:a8:
         2d:ee:27:f8:57:d2:e5:a2:8e:b1:10:dc:18:cf:24:ad:12:97:
         e8:43:4a:b0:b5:d6:19:2c:45:8d:0d:9a:d8:fb:98:80:f6:c7:
         84:80:80:bf:c0:1b:2f:bb:eb:bb:85:68:63:b2:be:71:b0:fa:
         24:6d:af:ed:09:9e:df:6a:57:b1:66:89:1d:3c:97:15:27:7a:
         08:43:03:e1:0a:19:6a:2b:8b:6c:0b:c8:24:c0:71:8e:e8:fc:
         c6:d8:57:78:9b:64:03:a4:a2:95:6e:eb:cf:e6:6f:51:21:91:
         3e:18:83:67:58:58:81:26:03:b1:ef:82:52:0e:6f:23:05:2d:
         ec:53:50:db:86:8c:0b:55:d9:d8:2c:40:4c:6a:2f:84:17:d2:
         4f:c6:2d:96:e3:60:28:97:49:f3:f9:af:08:49:07:0a:97:02:
         12:e3:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:21:21 2025 by rpki-client