Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353730303a3a2f34302d3430203d3e20323635383535.roa
File:                     323830333a376635303a353730303a3a2f34302d3430203d3e20323635383535.roa (raw, json)
Hash identifier:          85pRrD6dQDVmZNKwVThwOQWqbUPI73RI5qEsYdJ/JjI=
Subject key identifier:   D8:D4:24:69:C3:31:8D:FC:4D:7E:C6:DD:B6:44:B5:7B:9C:A5:AD:79
Certificate issuer:       /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial:       6DCE901469DF09EA02F192F845C3DAA4B8C81674
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353730303a3a2f34302d3430203d3e20323635383535.roa
Signing time:             Thu 29 May 2025 23:25:00 +0000
ROA not before:           Thu 29 May 2025 23:20:00 +0000
ROA not after:            Thu 28 May 2026 23:25:00 +0000
asID:                     265855
IP address blocks:        2803:7f50:5700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ce:90:14:69:df:09:ea:02:f1:92:f8:45:c3:da:a4:b8:c8:16:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
        Validity
            Not Before: May 29 23:20:00 2025 GMT
            Not After : May 28 23:25:00 2026 GMT
        Subject: CN=D8D42469C3318DFC4D7EC6DDB644B57B9CA5AD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:97:e6:d8:6b:8e:d4:05:59:7f:d2:f3:7f:
                    23:34:c4:76:d2:ea:a0:ce:e4:2c:c3:cd:3d:ba:93:
                    16:1b:84:a1:18:6a:c4:69:9c:45:0a:fb:b1:31:9c:
                    b8:e7:f9:3c:6f:6b:bf:df:07:7c:02:08:aa:47:ff:
                    ef:bd:cf:dd:bc:5e:19:1e:b7:e8:78:56:4f:90:17:
                    f0:dd:62:2a:84:f4:94:be:5b:23:66:84:45:ce:4a:
                    71:cb:22:2e:b4:84:35:c7:f6:3b:43:f0:7c:7e:08:
                    7c:91:fa:e0:a0:9e:a1:3e:7a:44:be:e4:00:e8:41:
                    06:43:5a:0d:9f:7d:a0:84:86:55:23:9e:5d:07:35:
                    df:e9:8e:29:84:44:0d:06:04:ae:44:4a:96:49:7d:
                    dc:18:f4:34:c0:ca:08:5f:de:41:b2:c3:c3:e8:3d:
                    2e:5b:38:ed:17:1c:02:8b:c4:87:63:4a:28:25:21:
                    c2:80:4f:1f:d5:1d:05:10:cd:34:f6:06:d9:fa:6a:
                    26:8e:25:63:89:7d:0a:4e:c6:b4:a8:95:0a:09:c2:
                    db:50:40:71:42:7c:87:85:82:3a:16:f3:a3:dd:96:
                    c9:81:9e:88:29:62:ba:8f:a2:a0:68:56:91:30:1f:
                    23:cd:c1:c9:73:9c:38:91:a5:8b:6e:78:03:7f:02:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:24:69:C3:31:8D:FC:4D:7E:C6:DD:B6:44:B5:7B:9C:A5:AD:79
            X509v3 Authority Key Identifier:
                keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353730303a3a2f34302d3430203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f50:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:9a:16:4e:48:6b:ac:13:52:da:2b:0a:1c:65:3a:8e:75:
         a3:16:9e:7a:b0:76:17:62:b3:da:42:51:84:99:85:cb:fe:d7:
         5e:ab:32:a9:3d:5a:5f:6e:08:c3:a9:ff:56:ba:a6:1e:49:60:
         8f:66:55:50:b7:14:a6:c6:1e:59:ac:ad:a2:a4:1e:33:57:7a:
         3a:2a:2d:b9:e7:19:e6:69:9c:73:8a:d1:9b:b2:3d:4a:7d:c8:
         4d:dd:be:6f:eb:44:9a:51:a3:4f:0a:4f:c6:57:70:18:de:43:
         67:93:3b:5c:ed:35:4e:65:10:6f:95:62:aa:2c:fb:12:6c:0d:
         b9:1c:1d:73:77:e5:9d:9c:a4:01:82:4a:35:a1:1f:fd:a1:16:
         cd:b7:1a:2e:bb:e8:01:79:3b:ff:70:6e:45:e1:7c:c3:69:a1:
         7e:e0:d5:91:c3:9e:22:7a:be:49:b7:55:6c:e2:d3:1e:91:23:
         62:3f:33:cd:5a:be:18:0e:a8:a5:f9:cb:02:f5:81:a9:25:64:
         3a:48:57:e1:99:af:27:2f:6c:d2:27:10:08:85:28:07:59:04:
         a1:65:94:9c:0b:7f:31:07:ac:a1:00:ab:3c:26:0e:c8:6c:73:
         5b:e7:a3:2e:8a:c6:58:63:e4:33:45:1b:5a:65:61:e3:0d:7a:
         7d:99:d0:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:34:05 2025 by rpki-client