Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203237393531.roa
File:                     323830333a6231303a3a2f33382d3338203d3e203237393531.roa (raw, json)
Hash identifier:          8jH2YPWVSph+aeAWtR2v9cZBYAvALwyoLByn9gZ8qtE=
Subject key identifier:   8B:55:0E:80:BA:B1:78:5E:C2:DC:9D:07:21:DE:4C:E5:1F:78:28:EF
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       4B4256054CB291698E2A30340DC7759899A687F4
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203237393531.roa
Signing time:             Thu 17 Jul 2025 20:25:49 +0000
ROA not before:           Thu 17 Jul 2025 20:20:49 +0000
ROA not after:            Thu 16 Jul 2026 20:25:49 +0000
asID:                     27951
IP address blocks:        2803:b10::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:42:56:05:4c:b2:91:69:8e:2a:30:34:0d:c7:75:98:99:a6:87:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jul 17 20:20:49 2025 GMT
            Not After : Jul 16 20:25:49 2026 GMT
        Subject: CN=8B550E80BAB1785EC2DC9D0721DE4CE51F7828EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:41:db:72:ec:90:6b:fc:67:ee:8f:e3:a9:
                    f1:eb:48:20:1c:22:ac:38:4e:82:71:80:3e:57:44:
                    d4:55:61:44:ed:03:e0:49:97:82:0a:f9:26:39:38:
                    6a:3d:f7:3b:12:66:bd:ac:24:21:8f:b2:74:7a:a2:
                    0d:f1:35:eb:73:d6:b0:02:81:17:07:7c:99:aa:81:
                    6f:6c:46:01:ff:b0:0b:e9:fb:d5:5d:7e:c7:44:26:
                    6b:eb:12:17:69:21:01:8a:64:d8:7f:a4:e9:d9:2f:
                    64:9a:bd:30:6d:c6:86:e9:27:62:95:52:e1:e0:98:
                    40:54:c2:6c:31:73:73:9c:83:46:c5:c5:91:3e:fb:
                    c9:15:4e:30:e8:93:9e:63:2a:df:5c:b9:61:4b:f4:
                    63:eb:8a:35:2e:5a:6f:0b:25:21:27:3e:cb:ac:1c:
                    97:c0:a3:6b:bd:51:83:72:cd:7c:a3:e2:7f:e7:4f:
                    fe:6b:e1:25:7e:56:17:2d:f5:9b:a4:26:0e:96:7b:
                    81:18:08:c2:ab:1d:ef:e1:5b:23:3d:c7:91:1d:43:
                    8c:92:5f:04:00:e6:cb:91:b8:ae:65:c8:fa:39:d0:
                    0b:da:ab:98:2f:ac:9e:e1:e6:27:56:aa:cd:14:ba:
                    b5:57:7c:92:2f:6f:8c:58:d0:3c:b5:36:06:7d:71:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:0E:80:BA:B1:78:5E:C2:DC:9D:07:21:DE:4C:E5:1F:78:28:EF
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:72:c6:5c:2d:6a:69:56:b5:65:14:c3:dc:b5:4e:18:d3:
         7a:69:d6:a1:3a:fc:cf:0e:be:f2:45:03:bc:5a:9d:e0:f8:82:
         75:92:65:69:44:94:30:7d:2b:a3:4b:07:7e:a7:42:ea:90:6d:
         e6:f7:4f:15:9f:7a:fa:b6:95:b2:a0:d0:7c:5d:62:f4:9a:c7:
         9b:ef:3d:af:0c:6d:ba:58:2f:f1:73:bb:38:42:ad:38:c9:26:
         8d:87:db:6e:d9:e2:03:9a:de:a7:6c:14:30:8e:e3:39:d2:d7:
         cc:50:c7:e5:e8:b1:54:5e:49:c9:54:bf:c4:46:64:39:ec:30:
         c5:e6:0e:ed:00:35:f2:f4:f8:8b:da:cc:3f:26:06:10:72:37:
         20:ed:76:ef:8e:02:5e:54:cd:6e:52:da:95:46:ab:e0:4e:18:
         0a:1a:f7:2b:d9:d8:7c:a6:8a:8a:7e:64:df:5c:e5:5b:52:b8:
         4d:33:91:31:9d:63:f4:79:a8:37:3e:d9:48:36:f3:e6:07:43:
         9f:de:1c:09:fb:a2:61:19:2d:5b:db:27:91:1a:44:19:07:65:
         5b:c2:d8:7e:2b:d7:8e:08:97:8a:dc:56:01:9f:ed:14:79:9f:
         71:39:ec:95:4d:62:8e:fe:26:8b:b4:7b:df:bf:0d:6f:80:2c:
         be:0e:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:43:27 2025 by rpki-client