Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          beizKxfAO+2UL9i7SUlAg4eYpKmHXsFyvwur8u8h0+U=
Subject key identifier:   34:D5:6B:26:22:75:FE:45:D5:59:D8:AA:1E:0D:67:32:B3:45:D2:4E
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       6283E6C76CF998D4EDC0C9C848DA32C3E957A7CA
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Mon 07 Jul 2025 21:24:44 +0000
ROA not before:           Mon 07 Jul 2025 21:19:44 +0000
ROA not after:            Mon 06 Jul 2026 21:24:44 +0000
asID:                     64120
IP address blocks:        2803:f080:8800::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 08:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:e6:c7:6c:f9:98:d4:ed:c0:c9:c8:48:da:32:c3:e9:57:a7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Jul  7 21:19:44 2025 GMT
            Not After : Jul  6 21:24:44 2026 GMT
        Subject: CN=34D56B262275FE45D559D8AA1E0D6732B345D24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:58:e9:41:2c:7e:42:98:c9:95:28:fb:9e:
                    eb:07:9a:8f:a5:ad:14:4a:c4:78:39:58:cb:73:95:
                    af:2a:cf:b9:39:fe:fa:9d:cb:3b:dd:54:cf:ae:0b:
                    09:f5:49:92:ba:88:8d:87:62:d4:3d:47:25:bf:f2:
                    a5:5a:16:f1:f3:1b:31:6c:c4:41:68:f9:b9:b6:58:
                    d7:12:18:8d:ff:d0:18:0a:07:a8:7d:54:c1:22:7b:
                    5c:8b:0e:c4:32:e7:9b:17:1d:fe:bf:49:9b:ee:5d:
                    cc:b1:74:0f:ea:ab:4b:61:ff:ad:1b:3d:63:a6:0c:
                    51:68:80:2f:00:c4:4a:55:93:8c:6b:ff:f1:ff:79:
                    9e:11:38:c1:fb:ff:41:a3:a0:a7:4d:92:71:2a:ae:
                    10:32:64:91:6b:04:0d:8a:06:12:2f:db:fb:02:ee:
                    5c:39:e7:33:14:f8:05:68:1a:38:e0:06:60:77:05:
                    2c:66:87:38:36:06:0c:8f:6a:86:7e:18:12:20:91:
                    b2:3d:1b:4d:5d:8c:2a:92:66:bc:7a:9e:a8:be:77:
                    e4:dd:42:69:20:05:43:a7:90:c7:a6:6a:67:a8:e8:
                    ec:22:b8:2f:1e:1a:12:00:78:cf:fa:3c:fb:89:c1:
                    1f:72:16:20:85:94:c2:96:13:62:b5:69:f1:6c:68:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:6B:26:22:75:FE:45:D5:59:D8:AA:1E:0D:67:32:B3:45:D2:4E
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8800::/43

    Signature Algorithm: sha256WithRSAEncryption
         86:8d:d3:6d:d7:77:9c:7a:96:d8:84:34:54:25:18:29:b0:a8:
         cd:fb:55:bc:88:52:3d:3f:6f:73:88:23:69:a0:62:e9:02:a7:
         98:39:43:ef:23:c3:78:9b:5e:36:cd:94:9e:91:97:79:ea:0d:
         0a:be:ce:94:a3:95:58:81:40:8e:1c:e8:08:fe:73:61:98:c4:
         bd:32:54:90:de:d9:4a:73:3b:65:04:46:38:cb:b7:66:a6:fc:
         13:bf:d7:5d:47:b1:9e:f4:56:6c:7c:95:51:df:ed:5d:1f:94:
         1d:42:70:e9:cb:5e:0c:36:96:9b:5f:86:93:aa:15:6a:51:8f:
         48:70:d7:b9:e0:c8:f1:9d:4b:7c:83:03:01:61:47:f1:e8:17:
         66:5e:23:2b:dd:6f:c0:c5:76:bd:e1:12:da:bc:69:15:1a:e6:
         90:75:8d:d9:ee:0b:0c:bd:5a:62:9f:4b:1d:a4:7d:26:0e:f8:
         28:b9:4d:70:b4:02:fa:50:3e:a4:5e:ab:92:00:b6:96:64:e1:
         90:11:d5:13:f8:a7:d0:e5:bc:00:43:de:a2:e3:b7:be:2b:2b:
         d1:4d:48:4b:14:2a:39:d6:16:6b:82:a1:70:2a:7d:44:dc:70:
         1c:9b:db:67:ef:91:1a:90:b6:15:3f:61:df:7f:4f:db:19:9e:
         e3:b1:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:18:40 2025 by rpki-client