Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
File:                     323830333a393465303a3a2f33322d3438203d3e20323639383933.roa (raw, json)
Hash identifier:          yLBENSS3oCpHhxTv83OtxXJpWOBEkToWurg2mx4Fw24=
Subject key identifier:   D9:32:03:C4:05:AD:D0:34:39:35:7F:18:60:E4:7E:D1:7E:01:B8:45
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       17E804FF8D36705F7EB351DD57F2AA82F768F8B6
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
Signing time:             Fri 27 Jun 2025 17:24:01 +0000
ROA not before:           Fri 27 Jun 2025 17:19:01 +0000
ROA not after:            Fri 26 Jun 2026 17:24:01 +0000
asID:                     269893
IP address blocks:        2803:94e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 12:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:04:ff:8d:36:70:5f:7e:b3:51:dd:57:f2:aa:82:f7:68:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Jun 27 17:19:01 2025 GMT
            Not After : Jun 26 17:24:01 2026 GMT
        Subject: CN=D93203C405ADD03439357F1860E47ED17E01B845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:bf:7a:71:68:a6:b3:83:21:a4:65:d3:f4:
                    02:d4:59:27:0e:80:ca:85:e1:02:85:fc:f1:a8:5d:
                    98:1c:36:46:a5:a3:60:97:59:63:31:4a:ac:3a:73:
                    b6:6d:2a:e7:3c:c6:17:f9:13:d0:01:3e:1a:60:ee:
                    b1:57:79:5d:74:b2:03:23:1c:7d:93:38:93:5f:4b:
                    b7:cc:c1:d4:5e:d9:d5:3d:e3:70:85:18:6d:74:49:
                    c5:56:34:b1:f3:88:5b:c3:1c:36:f2:fd:cf:c1:07:
                    0d:93:86:a6:db:26:38:db:cc:63:59:d7:66:68:90:
                    84:c0:ba:ef:e2:e8:67:11:40:22:96:76:9d:50:28:
                    97:b5:20:6d:b4:9a:d2:4a:f6:ab:fb:1c:a2:6e:b6:
                    2e:06:bb:07:07:d8:0d:e8:23:93:7c:36:4d:b0:a0:
                    6b:bc:e3:e5:d5:b9:1e:b9:db:f6:f2:c5:18:7c:9e:
                    bc:d4:59:57:f3:1d:08:32:9e:13:5c:b1:38:f8:73:
                    aa:72:48:87:cf:c7:af:8a:b1:e5:55:e9:fe:df:20:
                    e8:00:03:84:f6:80:02:e4:5a:9d:9d:7d:80:57:8b:
                    a7:82:4d:3b:d8:42:31:4c:e4:51:02:98:4a:a5:fe:
                    09:6c:19:95:cc:55:b0:72:ab:c5:30:c1:49:77:01:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:32:03:C4:05:AD:D0:34:39:35:7F:18:60:E4:7E:D1:7E:01:B8:45
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:9c:3f:b6:c1:b3:9c:8d:ac:a0:cf:f0:32:18:8e:1b:6b:4b:
         d1:eb:b5:2a:b6:0b:cf:e2:20:85:e9:49:04:ef:9d:00:8c:42:
         2f:3c:bc:91:9a:2e:4d:ba:be:f2:79:c3:58:b7:41:0a:82:82:
         da:17:36:72:a2:88:6c:c9:90:10:87:09:a4:6e:78:3c:eb:e4:
         3e:ec:06:83:bd:3b:8f:e1:5d:4c:12:ae:c2:d3:e2:26:e6:dc:
         d8:22:c4:0f:5d:03:d7:92:22:44:be:3b:26:d5:5b:eb:de:ed:
         6f:19:f3:7c:77:7e:6d:d6:9d:b2:f3:d9:ce:83:96:e5:60:95:
         44:c5:87:16:27:b3:9e:73:5f:aa:b0:cb:e7:7d:5a:d1:1a:ba:
         4f:09:98:a2:77:a6:10:16:fa:96:0f:43:1a:71:9d:a2:92:6c:
         2d:ad:f5:c0:30:49:3c:a4:8e:bf:23:39:6b:c9:05:d1:1f:34:
         e4:fa:19:e8:a7:93:da:70:b9:c9:6c:29:cb:41:bb:58:37:7d:
         78:88:08:58:9e:3c:17:59:d8:27:05:cd:87:0d:77:6e:60:a5:
         28:1d:a9:30:40:7a:6b:2b:1b:92:b7:47:bf:cd:24:5f:b4:1b:
         2c:15:4d:5c:c1:21:70:06:9f:d0:4f:26:f7:a6:d0:fc:ec:b2:
         34:82:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:45 2025 by rpki-client