Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f34382d3438203d3e20323732313131.roa
File:                     323830333a663731303a3a2f34382d3438203d3e20323732313131.roa (raw, json)
Hash identifier:          pL+b7g9OSXzu/SErk0MDx6Vg+J9xZ4coYghOIuBo4wk=
Subject key identifier:   1C:25:11:DB:B8:56:E1:CD:95:5F:91:EB:3A:64:84:28:81:A2:93:E3
Certificate issuer:       /CN=2F047A301A97B60EF7E1DECA548BF9056B229795
Certificate serial:       2FD04C79ED6EEE16B50668A1748CC71D62DF5F2F
Authority key identifier: 2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f34382d3438203d3e20323732313131.roa
Signing time:             Tue 02 Sep 2025 23:25:00 +0000
ROA not before:           Tue 02 Sep 2025 23:20:00 +0000
ROA not after:            Tue 01 Sep 2026 23:25:00 +0000
asID:                     272111
IP address blocks:        2803:f710::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d0:4c:79:ed:6e:ee:16:b5:06:68:a1:74:8c:c7:1d:62:df:5f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F047A301A97B60EF7E1DECA548BF9056B229795
        Validity
            Not Before: Sep  2 23:20:00 2025 GMT
            Not After : Sep  1 23:25:00 2026 GMT
        Subject: CN=1C2511DBB856E1CD955F91EB3A64842881A293E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:a1:d0:a6:bd:4e:e1:28:52:74:99:a1:57:
                    68:65:d6:f7:c3:73:18:78:e6:d1:5c:8c:e4:bd:cc:
                    1d:6e:84:01:f6:20:e0:58:dc:9e:e4:be:6d:ac:16:
                    55:31:cf:7e:bd:f5:81:18:7d:06:cf:10:18:6a:a7:
                    d1:f4:2b:6b:b0:d1:39:11:43:4f:53:12:db:a5:01:
                    28:8a:f1:0d:c1:bb:69:53:13:4c:5b:0c:0a:36:c3:
                    d6:50:df:d6:49:92:d5:f1:75:bb:dc:25:84:d8:ee:
                    76:88:0e:04:e4:8e:4c:de:0b:d9:bf:bf:29:cc:5a:
                    4a:e6:cc:54:b7:ef:b9:44:24:e9:a4:6b:c0:b6:3a:
                    49:26:99:43:ed:c6:fd:d3:cb:8a:3a:a2:49:c1:68:
                    24:29:5e:b5:65:61:49:32:f7:6f:cd:d2:6b:60:6b:
                    e6:b9:c3:7e:0f:d3:a3:64:ec:a1:c0:4a:ff:49:89:
                    bb:c4:5a:fc:05:18:b8:0f:f0:7f:80:2d:a4:94:99:
                    54:89:26:78:a7:4c:f0:20:b8:05:6f:21:d7:5d:24:
                    45:da:2b:96:d3:bf:60:7d:b4:5b:d2:22:a5:6a:94:
                    15:62:20:5d:fa:52:91:6a:8a:a2:3f:6b:c1:27:a7:
                    eb:16:29:99:64:88:87:20:47:da:2c:3e:ca:02:30:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:11:DB:B8:56:E1:CD:95:5F:91:EB:3A:64:84:28:81:A2:93:E3
            X509v3 Authority Key Identifier:
                keyid:2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f34382d3438203d3e20323732313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f710::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:95:71:c7:35:fe:ee:fa:99:70:a9:e7:62:06:20:35:60:
         b2:81:10:2c:76:fd:86:28:65:5b:8a:e3:be:d5:c2:6b:36:d6:
         17:7b:6d:16:71:c3:71:0c:02:ba:8d:55:0b:93:c0:1d:eb:62:
         8b:4e:a9:3e:39:8f:80:8f:10:77:19:4e:e4:0f:35:d2:38:16:
         9c:c7:c6:8f:30:9a:97:6a:12:cd:22:46:39:18:c7:2e:56:88:
         83:9e:6d:58:09:e4:39:91:24:71:19:f1:39:96:0b:5b:9b:a3:
         e9:5b:f8:de:2c:9b:1c:61:d8:23:aa:a9:1d:37:6a:2c:d6:ea:
         50:e1:4b:f9:9a:5f:0e:fd:e2:22:66:4a:a4:2d:c3:72:f7:94:
         ff:1e:4a:74:1d:91:9a:ef:fa:29:67:68:e2:8d:d1:72:81:3f:
         21:4f:b7:1d:ce:89:96:2e:83:1c:33:47:29:28:9d:02:5a:06:
         73:95:cc:b4:47:37:20:95:58:ad:17:c5:6f:31:f9:d2:e7:f5:
         89:e9:96:1f:df:23:20:e2:61:bc:f9:e3:bf:bb:57:bb:ae:e8:
         4a:4a:b6:30:26:06:90:1f:4a:a6:0c:f0:1e:9e:fa:bf:8a:b8:
         16:50:db:c1:4c:54:1e:1b:b0:0e:18:a6:b5:e5:55:b3:61:4a:
         98:ff:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:21:34 2025 by rpki-client