Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          IHTL65RIkC6u5kOIv2Q+k3xEdzkXlLLgDvSHZ+SUU4Y=
Subject key identifier:   67:16:09:0D:D9:FB:46:F9:4C:FB:89:2C:9B:25:4D:2E:81:D4:F7:1A
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       6503E3FAB87CDCF823A613FCB379002957EFA101
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 13 Sep 2025 06:45:01 +0000
ROA not before:           Sat 13 Sep 2025 06:40:01 +0000
ROA not after:            Sat 12 Sep 2026 06:45:01 +0000
asID:                     273087
IP address blocks:        2803:bf90:7000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:03:e3:fa:b8:7c:dc:f8:23:a6:13:fc:b3:79:00:29:57:ef:a1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Sep 13 06:40:01 2025 GMT
            Not After : Sep 12 06:45:01 2026 GMT
        Subject: CN=6716090DD9FB46F94CFB892C9B254D2E81D4F71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:31:01:7c:35:9f:ba:54:19:43:08:58:1e:
                    2d:43:73:ca:4f:92:41:6b:4b:4f:3b:1d:e8:02:08:
                    5c:77:91:61:46:ec:43:e8:71:25:38:26:8c:17:7c:
                    6f:8d:99:31:a6:3a:77:f4:57:9a:ea:56:c2:4b:4c:
                    1c:0b:62:a7:6f:c1:c6:f0:1e:16:a7:09:ee:76:d8:
                    bf:62:67:f7:7c:56:af:2b:66:c8:7e:0b:81:5b:37:
                    35:c9:77:58:fd:de:b2:e7:4e:5c:65:c7:c0:1f:4a:
                    f5:7a:8f:28:81:04:56:64:70:a7:77:39:95:c5:88:
                    8e:45:d1:72:4f:6b:70:f1:fe:5b:ca:ae:36:f4:ec:
                    6d:2c:d1:60:b8:40:db:b0:20:a0:53:e6:c1:95:29:
                    b1:56:82:ee:3f:3f:10:fb:57:2a:64:55:db:62:1c:
                    b8:67:86:0f:e6:d8:a8:04:87:8b:2b:2a:ed:2b:71:
                    87:b5:6f:c6:85:e3:97:72:2d:53:af:d9:d1:4c:96:
                    c5:c2:a2:67:3e:3f:3b:f5:35:83:38:6c:ef:70:46:
                    00:58:d0:01:4d:bb:80:81:f7:81:1f:f8:ac:c9:0c:
                    f5:54:1d:8f:7f:f1:ce:9b:65:b5:a5:d7:85:5a:51:
                    c9:4b:78:9a:d1:8d:bf:9c:19:0b:6d:e0:5e:ad:93:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:09:0D:D9:FB:46:F9:4C:FB:89:2C:9B:25:4D:2E:81:D4:F7:1A
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:92:f8:3d:e5:c8:b3:ad:66:b8:d7:ed:76:1e:a3:b2:79:
         8d:d0:f8:98:53:85:65:68:6c:68:6b:8f:0e:61:4a:4a:b1:98:
         f2:2a:fc:ac:17:5a:48:2b:03:14:77:5d:23:a5:fb:11:3b:3a:
         1f:cd:52:03:2d:84:f4:31:63:05:af:89:76:5e:bb:36:95:5d:
         fe:af:cb:d1:1b:ef:16:81:96:c1:fd:b3:c9:16:23:42:eb:02:
         7b:12:de:f2:57:09:76:06:66:61:b5:cc:3d:43:6a:33:33:0d:
         ce:58:53:de:0b:db:4c:98:20:e9:d0:ec:e5:8c:ea:e4:d4:be:
         79:66:9d:6f:47:8e:2b:93:63:b0:f8:11:bb:58:90:03:ff:5a:
         2f:09:59:a4:c0:ab:ec:79:92:86:44:72:43:0f:ed:95:43:62:
         96:fc:6f:4b:db:af:71:4c:41:28:f1:b5:64:b8:df:8c:94:a3:
         e6:d5:74:73:49:3f:7e:f8:f8:d4:05:1d:0d:6b:2d:48:c9:55:
         96:bf:37:34:77:69:cb:d1:59:31:b7:51:dc:cd:38:b4:4b:ca:
         fe:f8:5d:eb:53:1c:93:bd:95:d5:ef:72:04:b2:2d:86:c3:8e:
         70:c4:17:de:24:24:97:7c:a7:d3:86:18:28:fb:44:73:9a:55:
         58:66:ef:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:41:08 2025 by rpki-client