Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa
File:                     323830333a646432303a3a2f33322d3332203d3e20323636373035.roa (raw, json)
Hash identifier:          UfR+ItPhQD6E1Xv4dLcqFTXeVWBfmMJvdIrkR0Y6kyM=
Subject key identifier:   D5:A6:F0:21:F1:AE:FA:99:B5:04:A5:4B:2C:28:B7:DC:71:B8:98:6E
Certificate issuer:       /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial:       44AA3683D0EFFFD1B10F249D84DAE5DDE0E3FE83
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa
Signing time:             Wed 22 Oct 2025 20:55:00 +0000
ROA not before:           Wed 22 Oct 2025 20:50:00 +0000
ROA not after:            Wed 21 Oct 2026 20:55:00 +0000
asID:                     266705
IP address blocks:        2803:dd20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:36:83:d0:ef:ff:d1:b1:0f:24:9d:84:da:e5:dd:e0:e3:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
        Validity
            Not Before: Oct 22 20:50:00 2025 GMT
            Not After : Oct 21 20:55:00 2026 GMT
        Subject: CN=D5A6F021F1AEFA99B504A54B2C28B7DC71B8986E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:fe:38:82:3a:2e:2d:b4:58:1d:d8:f1:05:
                    5c:a6:c8:fa:87:32:82:a5:a0:d8:e1:a4:3a:f0:fc:
                    3f:22:15:91:43:85:08:3d:e6:89:cc:d6:f7:52:b6:
                    d8:fb:5e:a3:9b:cb:92:d0:94:95:53:9b:c3:2e:b2:
                    89:53:a7:98:23:67:77:d4:ac:36:cf:59:7b:15:f5:
                    59:df:70:c1:00:d1:c8:f1:64:68:25:a6:b0:f0:90:
                    58:9b:d0:20:33:ba:48:5e:eb:e6:bd:d8:72:cb:48:
                    32:73:af:bb:76:94:2c:09:9d:2b:a5:d1:ad:0f:12:
                    d5:1d:fd:bd:3b:96:4b:4d:05:40:b8:7e:dd:73:fb:
                    e9:10:61:70:9a:ca:aa:f3:a0:7f:ec:4e:4b:12:bd:
                    0b:2b:30:d9:28:8d:6b:da:59:be:20:fb:cc:21:13:
                    8e:b8:c7:8d:61:96:7e:3a:f9:d3:aa:14:11:08:aa:
                    60:c4:0f:8d:34:a4:8e:71:cf:3c:9e:84:f5:15:bb:
                    8d:b2:a2:71:d3:6b:09:d6:5e:5c:86:b2:21:6a:35:
                    50:ff:d6:e2:93:c3:a2:40:55:79:47:f4:0a:c5:5d:
                    2e:97:68:a7:04:c6:38:a9:51:f1:e3:d7:d8:00:3f:
                    e2:85:28:cf:e7:dd:0a:77:af:16:3b:f7:ee:0a:cf:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A6:F0:21:F1:AE:FA:99:B5:04:A5:4B:2C:28:B7:DC:71:B8:98:6E
            X509v3 Authority Key Identifier:
                keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:79:70:47:32:c0:5c:44:75:36:55:eb:6c:0c:41:ad:f6:44:
         dd:aa:a4:f7:d6:cd:00:c7:cc:52:3b:06:ba:83:85:85:ed:a0:
         67:56:f0:e4:ea:e6:c8:fb:04:d7:0a:d7:c4:a6:85:b0:1c:73:
         ca:89:39:c1:69:07:ef:3a:ee:9a:a1:59:d7:0b:d9:c6:61:15:
         58:d6:97:b9:eb:9e:82:a3:a1:11:29:52:81:d8:6a:7c:90:ac:
         6b:0a:f2:73:ee:19:fc:d0:c0:d3:ac:4c:24:81:3e:24:00:c6:
         cd:6b:19:64:e6:b2:b9:80:aa:36:a0:e0:1a:ec:17:1c:87:6c:
         e3:72:b9:a6:74:ca:b8:ae:f0:ee:47:02:35:72:3b:55:f5:99:
         ec:af:37:1c:4f:1a:ee:90:18:70:a3:ae:ba:63:af:d2:be:c3:
         c6:49:bc:83:48:37:c7:1f:02:bd:f9:ca:38:64:8c:f5:7a:cd:
         40:d3:a5:e8:87:8a:b4:d0:30:0d:cd:22:4f:ab:89:33:df:24:
         f4:62:3c:db:8e:42:11:15:f7:0e:74:15:73:fd:15:16:72:5d:
         58:81:08:cb:cd:c2:3f:60:30:ca:18:bd:e0:73:de:f7:46:4e:
         cb:21:81:63:68:27:1a:8a:fe:1e:41:8b:62:5b:71:2f:e8:a5:
         f5:f3:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:35 2025 by rpki-client