Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/323830313a31663a373830303a3a2f34382d3438203d3e20323733383939.roa
File:                     323830313a31663a373830303a3a2f34382d3438203d3e20323733383939.roa (raw, json)
Hash identifier:          rHYDIowuo0HseXpg/G3aIftwkSJCcv4oE301D7FS0zA=
Subject key identifier:   31:51:3C:BC:93:47:F3:25:E2:51:F8:C7:A1:C9:D9:C6:B7:C0:21:A2
Certificate issuer:       /CN=DC82AF3DA38035E54C8B0E131584DEFFFA175044
Certificate serial:       2D157EF3D01FA691D0C2B45350FC98EFB8F2C2A3
Authority key identifier: DC:82:AF:3D:A3:80:35:E5:4C:8B:0E:13:15:84:DE:FF:FA:17:50:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/323830313a31663a373830303a3a2f34382d3438203d3e20323733383939.roa
Signing time:             Mon 01 Sep 2025 20:42:33 +0000
ROA not before:           Mon 01 Sep 2025 20:37:33 +0000
ROA not after:            Mon 31 Aug 2026 20:42:33 +0000
asID:                     273899
IP address blocks:        2801:1f:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:15:7e:f3:d0:1f:a6:91:d0:c2:b4:53:50:fc:98:ef:b8:f2:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC82AF3DA38035E54C8B0E131584DEFFFA175044
        Validity
            Not Before: Sep  1 20:37:33 2025 GMT
            Not After : Aug 31 20:42:33 2026 GMT
        Subject: CN=31513CBC9347F325E251F8C7A1C9D9C6B7C021A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:89:21:69:52:ad:98:0b:9c:34:24:a1:2c:
                    db:d7:4e:4d:4d:70:ef:a9:89:15:14:37:eb:46:82:
                    61:f7:a4:b1:f3:a5:e7:ed:49:5c:2e:77:0c:6f:c7:
                    ef:51:5c:d2:71:0f:0e:c5:23:e3:d6:ce:7f:1f:14:
                    a4:56:aa:22:c4:63:cf:31:e0:4c:6f:ef:93:d4:77:
                    f2:e6:13:ea:61:7d:59:49:53:f2:6f:22:bd:00:e2:
                    65:20:d5:86:f3:d2:5f:4d:d9:52:7a:3c:82:29:6a:
                    b3:6e:bf:80:44:fd:d9:08:02:15:6b:b7:9a:fc:db:
                    e4:44:10:ad:7e:22:50:01:a8:e0:e3:e7:02:84:85:
                    eb:4d:c7:8f:81:13:71:57:ce:81:7d:32:ad:19:35:
                    b1:e0:ee:9c:4c:c5:02:37:37:17:b9:93:e7:a4:1e:
                    28:49:44:e7:bc:10:fc:b4:11:d7:70:3d:13:33:69:
                    59:45:fe:75:10:54:cf:49:53:96:7c:ed:48:cd:46:
                    fe:fc:04:8d:f6:4f:e9:50:bd:08:8a:2b:ce:e5:5a:
                    a2:87:5e:92:fc:42:4f:0e:4a:b8:b6:0f:54:a0:54:
                    be:dd:49:69:21:2b:99:5c:ae:6f:3f:21:1d:6e:fc:
                    a5:f5:27:3c:47:b3:79:bd:9d:1b:f8:0e:02:fa:6c:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:3C:BC:93:47:F3:25:E2:51:F8:C7:A1:C9:D9:C6:B7:C0:21:A2
            X509v3 Authority Key Identifier:
                keyid:DC:82:AF:3D:A3:80:35:E5:4C:8B:0E:13:15:84:DE:FF:FA:17:50:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC82AF3DA38035E54C8B0E131584DEFFFA175044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96B530C038D8F32FB0F620C73A1804FC780E1A1A61E4504F0AD4ED6B280EB36D/0/323830313a31663a373830303a3a2f34382d3438203d3e20323733383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:1d:29:b2:41:47:c3:05:31:8e:20:0d:1f:79:3e:fd:76:
         52:3d:0d:01:f4:4f:6e:0c:1a:b9:f8:f1:e5:91:38:ad:24:94:
         72:1d:47:e7:15:fd:b1:d8:19:3e:6d:77:42:b0:da:1e:54:e6:
         1d:87:22:c9:99:9f:07:5b:a1:f8:98:0c:9b:16:1d:77:cc:02:
         42:cd:ee:df:ca:7f:61:46:e1:70:d9:7d:33:fa:0a:fb:ee:10:
         10:94:c0:58:37:da:48:c5:33:ea:f6:20:85:de:b4:f2:46:dd:
         4f:f6:f6:67:2d:45:00:62:c3:99:a7:ef:16:08:50:c4:8e:a7:
         d1:b0:79:fb:cd:00:2a:00:9a:8d:c3:db:51:9d:fe:e3:32:60:
         7b:1a:ed:5f:e2:a2:ab:b9:ac:81:b7:7b:4e:76:2c:0c:ba:1f:
         e4:56:46:6a:64:be:92:26:c4:25:7d:45:68:4e:10:3e:d1:35:
         46:61:b3:9b:ff:d4:c3:ef:fd:ed:a7:df:ec:b9:df:89:b6:1c:
         54:e4:ec:28:34:cb:15:ca:24:19:e0:66:f0:6e:3e:17:5f:5d:
         38:b8:b5:8f:92:8c:14:b0:79:96:47:91:b7:5c:ef:50:6c:fe:
         10:94:83:22:e4:a8:40:0f:9a:c2:0d:49:26:4e:24:85:eb:5f:
         1d:5b:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:59:06 2025 by rpki-client