Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d313238203d3e20323635373737.roa
File:                     323830333a346663303a3a2f33322d313238203d3e20323635373737.roa (raw, json)
Hash identifier:          m1FNFSLqYVpQ6m4nGB/tNP+h4PV4TjHVYhjYbdnbJdI=
Subject key identifier:   0D:CC:D9:69:26:7E:19:D5:F2:FE:6F:FA:5D:EB:20:96:B5:4A:42:4D
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       39C272036DD3BE0DF4B2D115F5852A39CFEB25E0
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d313238203d3e20323635373737.roa
Signing time:             Thu 11 Sep 2025 13:44:32 +0000
ROA not before:           Thu 11 Sep 2025 13:39:32 +0000
ROA not after:            Thu 10 Sep 2026 13:44:32 +0000
asID:                     265777
IP address blocks:        2803:4fc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c2:72:03:6d:d3:be:0d:f4:b2:d1:15:f5:85:2a:39:cf:eb:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Sep 11 13:39:32 2025 GMT
            Not After : Sep 10 13:44:32 2026 GMT
        Subject: CN=0DCCD969267E19D5F2FE6FFA5DEB2096B54A424D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:75:e7:2f:51:d5:7a:58:9a:11:bc:0c:09:
                    f5:de:5d:58:6c:66:8b:4a:e5:1e:70:89:b8:43:af:
                    87:f7:70:23:12:31:65:bb:a1:3f:0a:db:4c:04:e3:
                    56:64:e9:a1:0e:e8:8c:39:49:9f:b0:26:a4:ed:a9:
                    13:18:55:c3:b8:05:a0:5f:83:b5:f7:ba:c5:f2:26:
                    f5:ce:f8:63:6d:f0:dc:fe:46:3a:d2:cb:25:fd:13:
                    e9:56:16:0d:c5:0f:85:3b:60:14:e6:64:05:33:16:
                    01:c0:0e:0b:e7:a6:91:17:f4:61:59:77:ea:5e:3b:
                    6e:12:9b:5b:60:66:4a:af:53:40:d9:55:14:72:86:
                    84:47:b5:38:b0:ce:52:63:a9:79:21:df:e0:8c:b3:
                    85:bc:74:6c:56:66:a2:2a:23:00:8c:9e:bb:4f:17:
                    0f:3f:0b:79:fe:da:14:c6:15:46:36:b5:c2:7e:ae:
                    18:7f:5d:04:3c:1b:ce:00:dc:8d:d4:61:d9:b8:2c:
                    d8:bd:92:9d:d6:22:69:86:93:f1:df:01:85:dd:38:
                    42:0e:e9:cb:48:cf:c6:fb:66:ba:31:08:59:50:9c:
                    ef:95:ae:04:c2:0a:a2:52:91:b6:78:a3:4a:1d:d8:
                    6f:bc:d3:88:f2:a7:db:ce:42:68:b4:1f:ac:26:88:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:D9:69:26:7E:19:D5:F2:FE:6F:FA:5D:EB:20:96:B5:4A:42:4D
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d313238203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:04:1a:c6:fb:aa:55:81:94:bb:40:08:db:7f:12:37:9a:
         4d:84:96:f4:6e:a9:68:c5:41:ec:7b:f9:c6:dd:c3:6d:4b:2d:
         20:7e:bb:e1:bf:20:c1:cd:5b:8f:e4:35:01:95:05:67:df:ae:
         58:2d:47:38:0e:c8:ff:cd:4e:2c:05:56:72:1f:24:85:75:ab:
         48:da:b4:16:fc:3f:db:c8:48:a1:a3:6c:ef:ca:c0:a7:2c:e2:
         56:72:4e:7e:aa:f5:8b:ea:60:5f:66:26:dd:d2:97:73:41:6c:
         15:9d:38:fa:bc:c9:dd:f2:c9:2f:6a:48:6f:1f:79:9d:15:bd:
         88:f9:5d:17:42:d8:18:68:f0:1e:88:46:0c:e7:25:b3:b6:ae:
         10:54:24:af:15:a5:7e:e7:22:d1:a4:6f:75:b2:b3:49:3f:c0:
         54:94:01:92:b6:59:7b:ab:05:0e:e7:c6:11:4f:73:9e:ee:8e:
         9d:d5:b2:cc:4e:d6:6a:0a:9a:ce:dc:bd:29:6b:80:f8:31:49:
         1e:31:b5:a6:24:ee:37:de:2b:9b:e8:4f:e8:cf:08:18:84:e2:
         59:33:cd:e5:07:29:9e:7f:12:6c:4b:c3:0e:9f:8c:06:a7:1c:
         61:fd:02:3f:be:0c:81:0c:79:3e:f1:46:03:ac:b6:e0:19:2f:
         c3:d1:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 03:29:17 2025 by rpki-client