Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a643030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a643030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          7ftzBSZgMD65jLuFspc2dIPqU8v+uG/ChjypHKm2gOc=
Subject key identifier:   0A:9D:0D:35:7B:9D:6D:6D:23:79:8A:4C:86:81:58:D0:0F:08:F5:40
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       5805A0878B5ACE9FDC7B6CF8D003FE3DF0A74B61
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a643030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 13 Sep 2025 06:44:57 +0000
ROA not before:           Sat 13 Sep 2025 06:39:57 +0000
ROA not after:            Sat 12 Sep 2026 06:44:57 +0000
asID:                     273087
IP address blocks:        2803:bf90:d000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:05:a0:87:8b:5a:ce:9f:dc:7b:6c:f8:d0:03:fe:3d:f0:a7:4b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Sep 13 06:39:57 2025 GMT
            Not After : Sep 12 06:44:57 2026 GMT
        Subject: CN=0A9D0D357B9D6D6D23798A4C868158D00F08F540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:43:33:3b:22:6a:2d:1b:da:b2:b8:b3:f1:
                    67:de:35:97:cf:8a:47:1d:1b:af:6b:81:c6:74:b9:
                    95:a0:c9:95:18:e0:1a:3d:4a:6c:62:3d:4a:1c:4c:
                    31:59:73:c9:89:cd:99:01:3b:7a:7d:fa:1b:1c:5d:
                    e9:55:b5:40:66:0f:1b:d2:7a:e0:b2:32:d4:a3:60:
                    5d:7a:ae:50:8b:a9:54:b2:1f:12:ab:a3:09:d6:81:
                    39:7a:40:29:7b:25:c5:fc:2c:b0:ac:d4:32:88:4f:
                    99:cb:ac:a9:a5:24:8c:33:30:2f:64:ab:2b:5e:0b:
                    3c:0f:5a:92:74:e0:d1:73:6b:68:57:54:48:d1:9c:
                    1a:73:c8:dd:f8:38:47:c4:bc:bf:fb:6f:d2:a2:1f:
                    bb:ea:2b:e9:31:f4:f0:7f:b3:53:0f:fe:27:7a:4a:
                    88:f6:e4:9a:67:1c:7f:62:dd:16:68:04:23:a6:4d:
                    4f:35:ae:a3:db:c6:78:48:1e:53:89:04:3f:a8:0b:
                    de:46:19:e8:1d:2c:73:bf:5b:8e:6f:bf:c0:47:86:
                    8b:54:64:61:aa:b9:ba:60:8d:84:78:ff:ea:f6:77:
                    40:0f:fe:80:e6:cc:a1:1f:f9:56:09:32:e9:a1:3a:
                    cc:7b:92:2a:bc:25:18:b5:14:79:47:25:4a:a7:5c:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:0D:35:7B:9D:6D:6D:23:79:8A:4C:86:81:58:D0:0F:08:F5:40
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a643030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:83:5b:17:39:d7:79:53:b2:c1:f0:1a:1d:b5:0a:7b:a1:e5:
         82:b1:c1:d8:1d:0f:32:e9:a8:46:de:b1:35:53:6a:c4:67:27:
         0a:ee:36:21:b1:59:f2:ad:00:73:b8:d6:a7:cb:c7:d0:b5:57:
         99:79:dc:51:a3:95:46:52:5a:53:77:23:3d:80:a8:dc:0c:41:
         1f:5a:8f:f3:d3:02:1c:58:3b:19:d4:a5:4d:29:91:26:71:f9:
         72:4e:b4:7d:d5:ac:23:9b:02:6a:9c:c3:53:4c:0a:a0:15:05:
         3b:e1:a4:91:9c:fb:49:bb:23:4a:ff:0e:6b:bc:8a:fe:83:4b:
         fc:b0:a7:89:d0:6b:19:40:b2:bf:5e:f2:2f:45:68:f9:05:88:
         2f:c9:b7:d7:5f:ba:90:b7:3c:4f:b4:8d:f1:9f:f5:2c:2e:24:
         f2:a7:d9:25:c1:97:3a:cc:07:c2:f4:71:62:ac:08:9f:cc:27:
         1a:81:5c:b9:c9:0d:da:8d:38:04:d0:dd:53:02:38:05:f8:83:
         9c:92:8c:45:ee:49:ac:41:4b:18:75:95:ef:a9:58:8f:5d:d9:
         96:87:05:0d:a6:6c:9c:d0:da:04:90:26:13:48:55:d3:6b:6c:
         fe:27:55:81:ed:5a:2f:30:fd:de:93:af:65:d4:5d:19:77:0d:
         3b:a2:92:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:41:26 2025 by rpki-client