Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a633030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a633030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          1ecsTTCHu4S4hfMLGDKmsaAlEJ5DbfSaLMXKS4MN80o=
Subject key identifier:   B5:42:5A:28:6F:9C:7F:45:65:BF:6D:43:B0:D0:51:3A:7F:06:B5:C3
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       098FB75B35F59759ADF3A0D12D9BFDE017C26348
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a633030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 13 Sep 2025 06:45:01 +0000
ROA not before:           Sat 13 Sep 2025 06:40:01 +0000
ROA not after:            Sat 12 Sep 2026 06:45:01 +0000
asID:                     273087
IP address blocks:        2803:bf90:c000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8f:b7:5b:35:f5:97:59:ad:f3:a0:d1:2d:9b:fd:e0:17:c2:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Sep 13 06:40:01 2025 GMT
            Not After : Sep 12 06:45:01 2026 GMT
        Subject: CN=B5425A286F9C7F4565BF6D43B0D0513A7F06B5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:80:d1:0b:02:fe:16:57:32:a7:89:22:43:
                    f9:f0:a3:78:76:31:dc:44:68:6b:db:dd:f5:a7:a9:
                    d1:85:8e:a9:d3:1d:91:2f:49:ad:2a:8c:d7:31:ff:
                    06:7b:c2:88:85:2d:c1:94:88:ad:9a:33:e5:0c:7c:
                    12:7e:e3:d8:38:5e:99:85:06:2b:6d:c3:b8:78:cd:
                    00:fa:db:7f:e5:1c:a9:dd:c5:aa:9b:c4:d3:dc:cb:
                    8c:29:98:8c:ea:c1:9d:cd:04:0d:e8:da:b2:58:4b:
                    cd:0d:2a:56:36:67:c4:98:c0:3b:44:18:ca:9b:5a:
                    87:7f:81:50:ed:a4:cf:a9:d3:88:67:cf:4b:d7:b6:
                    e2:fb:f6:eb:6c:7d:83:03:c7:c6:e1:80:09:87:30:
                    5a:4b:80:a6:ca:d9:f0:b7:5e:37:ee:07:dd:82:90:
                    89:d7:d7:f0:eb:23:9b:81:24:df:7c:b2:b5:5f:a2:
                    e2:78:32:76:dd:28:9d:b6:ab:b3:f6:8b:20:ba:27:
                    cd:2f:49:d8:ba:07:bd:82:2a:df:23:55:06:0c:6f:
                    23:51:2e:4c:71:5f:cf:21:7f:ae:5d:b7:1f:94:09:
                    7b:1d:21:9a:7f:ca:ad:e6:71:10:89:78:24:b4:8c:
                    7c:c9:3d:52:ca:78:e2:a9:de:e0:d5:67:3f:eb:65:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:42:5A:28:6F:9C:7F:45:65:BF:6D:43:B0:D0:51:3A:7F:06:B5:C3
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a633030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:94:5d:8d:c5:d8:11:6e:b6:c7:73:3e:83:4a:3f:e9:64:ef:
         4e:00:17:94:3b:af:b2:80:ee:0e:42:d5:d2:bb:9d:51:4b:15:
         09:5d:93:6f:a0:c7:63:06:74:d7:1a:d5:e9:20:6c:dd:e6:bf:
         e3:4c:b1:0c:a0:c7:66:b5:02:ad:7a:9b:33:88:3f:98:ed:05:
         72:fb:8b:68:5b:d1:ab:af:08:84:5c:61:a2:e7:e4:5d:d9:84:
         c8:62:89:b0:07:68:60:ea:79:be:e6:83:d4:1b:b8:e0:2e:10:
         46:18:65:98:38:e5:26:00:cf:d6:3a:05:68:e4:ba:8e:d1:8d:
         b8:b5:3b:11:b5:5b:cf:42:e7:df:87:45:d3:3a:40:e7:e3:3c:
         b5:c7:4d:e2:d6:95:b7:78:17:04:b8:84:36:ad:56:cb:30:84:
         86:24:93:2e:47:f9:68:24:30:e8:59:e3:ee:a5:80:a4:ff:48:
         fb:1e:a7:c2:a7:9e:7a:8a:36:ec:be:cf:31:3e:5a:0d:bc:5c:
         ae:a6:15:6b:b8:1d:3c:0e:b3:a4:3b:8a:ed:75:e0:16:1b:33:
         da:2b:f5:ef:5a:e0:0f:1f:dd:10:57:6d:21:00:e0:28:8a:cd:
         10:fe:74:63:63:fc:e6:bb:c6:f5:7d:a8:1b:c4:94:a2:ba:d8:
         79:d3:62:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:41:24 2025 by rpki-client