Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a323030303a3a2f34382d3438203d3e20323639393630.roa
File:                     323830333a343263303a323030303a3a2f34382d3438203d3e20323639393630.roa (raw, json)
Hash identifier:          lgNfDoGqxFIs4+Rkk5yyAqjgBSwQl6QKGOZ0uXGHRfo=
Subject key identifier:   B1:D5:AF:00:0A:A4:AF:1E:9C:E2:89:DC:48:00:5A:98:F4:DB:65:F6
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       46C771DB5BED1B7263525282C3393B515D52E283
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a323030303a3a2f34382d3438203d3e20323639393630.roa
Signing time:             Wed 23 Jul 2025 20:25:00 +0000
ROA not before:           Wed 23 Jul 2025 20:20:00 +0000
ROA not after:            Wed 22 Jul 2026 20:25:00 +0000
asID:                     269960
IP address blocks:        2803:42c0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c7:71:db:5b:ed:1b:72:63:52:52:82:c3:39:3b:51:5d:52:e2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Jul 23 20:20:00 2025 GMT
            Not After : Jul 22 20:25:00 2026 GMT
        Subject: CN=B1D5AF000AA4AF1E9CE289DC48005A98F4DB65F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:fb:a0:76:e4:f5:b8:12:a8:d9:58:6a:b3:
                    c3:6e:1c:76:34:44:ed:d4:e0:e3:ed:b8:41:88:33:
                    4a:c4:f6:96:fe:7e:c0:8a:20:a0:fc:b6:8d:2b:42:
                    64:2a:00:2a:58:7f:51:f1:35:ff:37:a4:c3:0c:0a:
                    07:79:0f:a9:aa:2a:06:ad:e3:ae:68:fd:c4:ff:5e:
                    b4:b5:76:a1:b9:d7:e6:89:a5:7b:9a:17:76:5e:66:
                    5a:98:84:06:c8:6c:fa:99:ae:f2:8c:0b:1d:3c:32:
                    e1:65:0e:19:0d:73:1b:92:58:23:63:c6:c1:10:a2:
                    d2:97:89:41:e1:cc:63:b3:76:e9:69:43:75:af:ef:
                    90:dd:f6:77:f5:2d:93:95:08:15:51:04:e6:88:2c:
                    74:b3:29:34:6a:75:e7:c4:9c:44:4c:a5:4e:3d:d8:
                    0e:e9:4b:f4:3a:d3:be:fa:48:52:13:cd:82:6c:e9:
                    d8:4d:1a:4c:1f:29:b8:1c:0c:58:61:6c:0f:0a:34:
                    bb:17:90:79:63:7a:0d:fa:ee:df:81:3a:8a:34:4f:
                    4f:b1:e2:cb:e2:a6:ac:ba:04:44:53:03:21:d5:8b:
                    f4:c5:72:e6:d2:35:7d:53:f0:ab:53:56:d8:0b:e9:
                    e0:50:fc:a1:06:60:eb:04:c8:2b:a7:0a:93:34:bd:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D5:AF:00:0A:A4:AF:1E:9C:E2:89:DC:48:00:5A:98:F4:DB:65:F6
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a323030303a3a2f34382d3438203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42c0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:68:2d:42:da:38:de:58:e1:a9:b1:b9:5c:0e:a8:8e:b5:c0:
         13:8d:9a:d3:6b:7d:ba:70:be:1a:eb:fa:dd:69:51:9b:05:82:
         c5:d6:21:3e:13:e2:45:05:e4:15:fa:28:bf:46:a9:17:10:40:
         1f:1b:b0:6a:40:dc:5e:06:09:25:4a:53:c8:84:09:fd:d1:16:
         6f:6e:d4:11:da:67:2e:89:8d:21:85:fb:9f:ad:ab:30:96:83:
         11:39:c7:33:b4:44:ae:eb:70:5c:90:d1:7b:51:ea:7f:40:66:
         3f:63:a6:27:d8:2c:4f:8e:f3:28:cb:ae:86:74:3e:80:bf:9e:
         c3:2c:e1:70:89:e3:bb:55:6e:82:b9:22:1e:d6:9b:f6:d5:40:
         4f:4c:5e:fe:a9:ad:79:33:30:9f:2f:d5:a1:da:a5:5b:a3:0d:
         d6:b2:b8:61:96:be:6f:b7:d4:83:8f:1a:4c:66:b7:dd:ef:eb:
         24:3d:7f:31:cc:c5:c7:9d:07:d7:07:c9:0e:21:2f:2c:83:36:
         58:04:0b:f9:e2:b8:75:da:e2:35:cf:6c:2a:a3:1e:92:84:40:
         b3:26:60:7c:18:46:ba:13:e7:54:0c:81:18:c4:33:13:c2:e7:
         03:3e:72:da:2e:66:c9:79:a4:1c:73:c0:f3:9b:cb:37:9e:b6:
         f3:84:c0:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:55:13 2025 by rpki-client