Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a323030303a3a2f33352d3336203d3e20323635383535.roa
File:                     323830333a376635303a323030303a3a2f33352d3336203d3e20323635383535.roa (raw, json)
Hash identifier:          OMY/31cHEDMthiQaHdoLgBEQnk87hicvtJOQQsF51eU=
Subject key identifier:   45:F3:0F:6A:A7:F7:AC:58:21:F1:8E:93:02:7C:5F:0E:23:B3:E3:8B
Certificate issuer:       /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial:       46F2537F0DDC2A2D6185E9E8DC1B3835A1C9B515
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a323030303a3a2f33352d3336203d3e20323635383535.roa
Signing time:             Thu 29 May 2025 23:25:00 +0000
ROA not before:           Thu 29 May 2025 23:20:00 +0000
ROA not after:            Thu 28 May 2026 23:25:00 +0000
asID:                     265855
IP address blocks:        2803:7f50:2000::/35 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f2:53:7f:0d:dc:2a:2d:61:85:e9:e8:dc:1b:38:35:a1:c9:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
        Validity
            Not Before: May 29 23:20:00 2025 GMT
            Not After : May 28 23:25:00 2026 GMT
        Subject: CN=45F30F6AA7F7AC5821F18E93027C5F0E23B3E38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:ca:50:79:6d:c3:69:cb:c7:b5:a4:5b:c6:
                    8f:d5:fc:23:7a:0c:66:f7:8a:bc:0f:c5:41:ca:c4:
                    a8:9d:dd:9a:d3:6b:33:eb:44:c0:8a:b2:f3:c7:94:
                    fd:c2:77:90:ea:2a:07:a5:a6:b1:f1:c4:d6:56:1c:
                    74:1e:f1:74:17:58:cc:a6:65:a3:37:cc:96:62:d4:
                    64:f2:9b:81:7c:f6:2e:1e:ff:a8:73:1c:f4:aa:d3:
                    f7:39:ff:43:46:7c:e7:92:2b:ee:95:6c:65:6e:91:
                    a4:89:69:36:95:8c:37:85:88:89:73:54:2b:5a:a7:
                    ec:0c:5b:e6:2f:1a:c6:c4:58:14:97:dc:20:86:c7:
                    36:93:a0:00:90:0e:aa:d1:5d:dc:e0:25:09:36:0e:
                    c8:6d:f5:d3:31:58:80:4f:8e:e2:11:b6:e2:05:4e:
                    1f:fb:d0:22:83:be:03:41:b9:1b:a6:66:13:ea:7c:
                    4d:43:f5:bc:c9:84:ac:f6:e1:af:c2:09:30:ad:ff:
                    8e:c5:b1:12:c6:d3:22:c5:84:70:93:14:9a:37:60:
                    c0:2a:a6:5d:bd:c1:29:bc:80:cd:b2:24:cf:27:74:
                    ba:7d:66:12:c2:a4:93:3a:8f:f4:df:d4:40:20:93:
                    43:fc:9a:52:41:01:31:13:e5:95:40:6e:e5:e5:57:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:0F:6A:A7:F7:AC:58:21:F1:8E:93:02:7C:5F:0E:23:B3:E3:8B
            X509v3 Authority Key Identifier:
                keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a323030303a3a2f33352d3336203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f50:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         90:54:cb:40:d9:8b:3c:dd:9f:ca:36:04:b6:51:9c:83:05:6b:
         d1:f3:e7:19:da:44:c2:b5:22:07:65:83:16:0b:d2:cc:a9:b9:
         7b:96:bf:a9:53:b8:e8:b3:b1:70:f5:5d:39:d7:26:24:11:ed:
         e5:46:be:f6:0f:12:b1:a1:52:02:ae:87:da:78:50:3c:1d:f8:
         67:55:2b:cf:9f:98:52:b3:09:4b:92:db:1f:fb:20:34:8f:74:
         90:db:65:4f:bb:65:92:05:1a:df:29:4a:58:73:f6:e2:63:b7:
         56:38:6f:4e:f8:d8:44:9e:ff:b0:1b:3d:ae:88:ca:8f:4b:d7:
         7d:07:5a:c0:fb:86:e2:e6:36:8e:82:e0:0a:2a:73:63:fc:ad:
         cf:63:17:89:65:d6:8b:b9:fb:a1:c0:65:40:d6:0f:cc:e0:9d:
         64:80:fc:01:8e:9b:84:c1:34:c6:a9:47:56:72:30:04:1f:2a:
         f7:76:ad:b9:5b:52:cc:80:3d:33:0f:75:28:68:95:4e:4f:e2:
         b3:6f:86:c3:85:4f:0f:64:03:55:e7:f5:94:46:30:4d:6c:c4:
         fa:60:6b:a5:4a:5d:91:77:0d:d8:d9:6c:fd:b0:0f:73:55:8d:
         a2:4d:66:60:86:d3:a7:e6:20:ac:58:26:46:01:db:d1:5b:8a:
         72:c5:05:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:36:49 2025 by rpki-client