Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/323830333a363365303a3a2f33322d3332203d3e20323730303639.roa
File:                     323830333a363365303a3a2f33322d3332203d3e20323730303639.roa (raw, json)
Hash identifier:          VhNJfdv6GUCbA58APGluJsD/lGlEa8GNtmcFXutAf60=
Subject key identifier:   04:A3:D6:D6:FE:A8:B1:34:01:AD:20:DF:EB:37:7E:7B:72:99:4F:F6
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       5F2F99BBE8A55D5910996FEACD6FE09D1BC49D0B
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/323830333a363365303a3a2f33322d3332203d3e20323730303639.roa
Signing time:             Wed 17 Sep 2025 05:47:01 +0000
ROA not before:           Wed 17 Sep 2025 05:42:01 +0000
ROA not after:            Wed 16 Sep 2026 05:47:01 +0000
asID:                     270069
IP address blocks:        2803:63e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 17:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2f:99:bb:e8:a5:5d:59:10:99:6f:ea:cd:6f:e0:9d:1b:c4:9d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Sep 17 05:42:01 2025 GMT
            Not After : Sep 16 05:47:01 2026 GMT
        Subject: CN=04A3D6D6FEA8B13401AD20DFEB377E7B72994FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:21:6e:45:f9:07:bf:02:01:89:09:53:14:
                    c1:f7:0d:21:55:e8:0d:96:42:2c:1e:a6:30:5d:6d:
                    63:f7:d1:44:65:c2:90:cb:f9:6b:b2:c7:5b:5e:32:
                    7c:ed:10:38:26:58:b9:fd:68:f8:16:28:cf:98:e7:
                    07:b8:ac:ab:53:7b:bc:89:4a:22:1f:25:a6:a2:c6:
                    01:64:21:d4:e1:84:5f:11:13:fa:d0:23:91:af:58:
                    91:eb:46:cf:f8:64:a0:47:1a:bc:b8:32:df:e3:02:
                    75:6a:3d:a5:dc:45:b2:d4:a4:09:e8:c6:a5:8d:bf:
                    67:92:32:5c:52:16:0b:d8:c8:07:50:15:94:fa:a1:
                    10:86:b3:92:94:34:e2:a6:5b:43:5c:b2:92:84:ca:
                    23:87:46:b2:1b:d6:8c:ad:72:c0:20:b2:80:f2:90:
                    ee:eb:3d:59:dd:cf:25:b2:91:2a:fb:65:ee:9e:c2:
                    92:c0:67:ab:bc:21:d7:de:73:51:3e:31:ea:62:b7:
                    db:d1:d6:91:4e:a2:45:21:13:a9:2f:29:55:9b:b9:
                    1a:e0:3c:d5:de:af:df:ec:83:b3:e9:4b:82:af:0c:
                    57:8f:a0:64:55:bb:0b:d5:5b:60:f7:a3:63:ac:18:
                    03:5a:77:04:bc:d7:24:22:46:25:34:06:0e:d6:43:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:D6:D6:FE:A8:B1:34:01:AD:20:DF:EB:37:7E:7B:72:99:4F:F6
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/323830333a363365303a3a2f33322d3332203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:63e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:22:1c:25:97:74:4e:38:42:ac:87:5f:22:14:d1:d0:82:81:
         a6:ba:1d:99:48:73:5a:65:fe:82:40:3f:60:fd:8c:a8:49:a0:
         b6:23:28:a0:de:84:b9:38:c0:c9:18:75:eb:ee:8c:3e:f2:51:
         3e:96:ff:9a:eb:81:22:99:52:51:e7:ab:8a:72:0a:57:9a:eb:
         8c:61:34:3b:29:8b:db:41:52:96:b1:9b:46:fb:1f:ee:a4:e6:
         89:6e:02:65:8e:4a:ff:4d:00:3f:0f:b3:73:80:da:1e:79:43:
         69:72:76:65:3b:2c:30:ef:69:43:46:96:c0:df:bf:d3:d0:e8:
         1d:65:b7:25:1b:21:14:11:72:9d:9c:a1:cc:9e:a6:c8:c8:7e:
         f6:fd:5d:6c:f5:b8:4c:24:88:7f:9b:29:ad:ed:21:63:f0:39:
         1e:81:5e:83:3a:e5:be:a9:de:c5:e2:05:b9:e4:b5:1a:9a:53:
         a3:37:b7:5c:d4:31:68:51:d2:73:d2:f4:0e:25:da:18:f6:c2:
         50:3e:87:5b:ac:6c:dc:e8:ca:06:3c:db:2d:61:e0:1b:36:18:
         fd:52:55:c5:65:f7:52:eb:35:a1:11:14:c3:d8:a1:6c:3e:57:
         21:b4:0d:17:64:39:75:9a:d2:97:b5:e3:e9:77:29:f5:ed:c8:
         17:02:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:30:15 2025 by rpki-client