Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa
File:                     323830333a643731303a3a2f33322d3336203d3e20323732313036.roa (raw, json)
Hash identifier:          W//AvsiEhCxjXOfZBsv7hrRkmRHB+ZGM1Bqd2oVsl08=
Subject key identifier:   71:85:34:4C:CC:EA:63:D0:49:B5:B0:C0:0F:35:A6:F4:00:DA:AB:36
Certificate issuer:       /CN=0870918DC6A57FC7622CD11B09C392EFDBB3E4B1
Certificate serial:       644B4BD7E7301B486115614176BB23645705660B
Authority key identifier: 08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa
Signing time:             Thu 28 Aug 2025 02:00:00 +0000
ROA not before:           Thu 28 Aug 2025 01:55:00 +0000
ROA not after:            Thu 27 Aug 2026 02:00:00 +0000
asID:                     272106
IP address blocks:        2803:d710::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4b:4b:d7:e7:30:1b:48:61:15:61:41:76:bb:23:64:57:05:66:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0870918DC6A57FC7622CD11B09C392EFDBB3E4B1
        Validity
            Not Before: Aug 28 01:55:00 2025 GMT
            Not After : Aug 27 02:00:00 2026 GMT
        Subject: CN=7185344CCCEA63D049B5B0C00F35A6F400DAAB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:7c:fe:14:7e:56:18:05:9f:5e:9a:1c:91:
                    fa:92:41:00:03:1f:c7:57:9a:cc:89:bf:89:c0:55:
                    71:47:62:ec:6f:26:d8:25:04:f9:d0:db:45:88:9e:
                    88:fe:11:74:e3:22:84:19:0b:63:03:b4:2b:3f:fb:
                    96:f2:77:60:ff:37:38:1a:43:23:91:81:d7:7a:5d:
                    5b:44:ed:8c:16:08:74:60:37:fd:95:f6:6c:f0:f0:
                    3e:79:49:29:53:0c:ec:cc:55:cf:ee:d0:53:34:64:
                    4d:fe:61:f1:53:f7:69:7c:b1:db:ba:06:fe:f2:88:
                    85:3b:ba:2e:5d:8c:42:61:3c:0e:5d:35:18:46:de:
                    c1:57:a3:f9:4b:fc:53:ea:41:6e:32:f4:9b:b5:b9:
                    21:a3:aa:6c:0c:f2:88:32:fa:94:21:92:0c:eb:35:
                    77:35:fa:28:2c:b8:53:d3:5a:ec:e4:8e:86:d8:fd:
                    09:bd:1f:8c:d5:ea:40:8a:36:8b:32:ae:73:de:86:
                    5c:7e:f6:73:37:55:7b:44:fd:4d:fe:40:42:66:d0:
                    b0:00:6b:02:8d:15:49:f0:68:96:18:1c:b6:e2:f3:
                    7c:48:bc:e0:6c:9b:33:44:2b:50:08:32:d1:0a:31:
                    74:d5:37:9e:84:fd:2d:b1:23:65:48:7d:28:1a:de:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:85:34:4C:CC:EA:63:D0:49:B5:B0:C0:0F:35:A6:F4:00:DA:AB:36
            X509v3 Authority Key Identifier:
                keyid:08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d710::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:be:97:b6:4a:aa:49:71:6c:67:53:1c:66:d8:dd:bd:7e:
         26:eb:d7:25:f7:7d:c9:61:a5:19:0d:47:aa:7e:f1:a3:a4:fa:
         a9:a7:69:d2:9e:3b:62:a4:95:d2:ef:e1:2f:73:c3:84:d0:93:
         1b:c3:c2:33:5c:4c:f2:b4:64:e0:01:74:8d:ea:40:32:8d:0a:
         c4:10:fb:c3:1f:37:c0:74:b6:21:a7:21:1d:f6:7a:03:82:3e:
         52:f9:20:ae:f9:55:5f:19:bc:d8:ad:03:10:b3:5f:10:07:4f:
         1c:f8:16:1a:89:02:00:e0:f1:3f:b6:95:fd:dc:f4:53:25:2e:
         63:05:87:53:ce:17:89:ff:09:94:a6:58:bf:9f:c6:bc:3c:36:
         95:c2:79:61:9b:64:fa:ee:b2:45:af:e5:16:99:c1:b6:48:e5:
         0e:3a:f0:b7:5b:87:b9:84:01:77:a8:fa:fd:99:a0:b8:99:72:
         29:49:34:19:b6:d0:e9:97:b3:9e:1f:db:2c:da:ca:9d:a2:07:
         96:ae:48:86:74:26:79:bf:9e:35:e4:a5:85:90:ae:e7:be:8b:
         a3:92:ab:7d:dc:c3:bb:05:8c:50:86:8a:03:a0:9d:e8:64:8a:
         d8:66:09:ee:aa:6b:be:5b:ad:4f:a0:b3:d0:4c:9c:4b:bc:8f:
         61:92:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:31:22 2025 by rpki-client