Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa
File:                     323830333a383964303a3a2f33322d3438203d3e20323734313436.roa (raw, json)
Hash identifier:          bae3vFu+GCIslHlcv+q/GPp0+Cilol9DlBsqSwspn8g=
Subject key identifier:   6C:8D:F9:74:99:23:72:E7:6A:CA:98:54:8D:5B:6D:3C:25:93:92:4E
Certificate issuer:       /CN=8F14B752BDD95C05C00A4F586E5817068B49A668
Certificate serial:       4BAD2B00FDAF41A0C9CEF7A00695818833E5C619
Authority key identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa
Signing time:             Mon 30 Jun 2025 05:40:00 +0000
ROA not before:           Mon 30 Jun 2025 05:35:00 +0000
ROA not after:            Mon 29 Jun 2026 05:40:00 +0000
asID:                     274146
IP address blocks:        2803:89d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 23:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:2b:00:fd:af:41:a0:c9:ce:f7:a0:06:95:81:88:33:e5:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F14B752BDD95C05C00A4F586E5817068B49A668
        Validity
            Not Before: Jun 30 05:35:00 2025 GMT
            Not After : Jun 29 05:40:00 2026 GMT
        Subject: CN=6C8DF974992372E76ACA98548D5B6D3C2593924E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:c0:64:4a:05:45:6a:65:fd:ab:38:d2:dd:
                    99:6d:81:f1:37:d3:3e:0f:a9:bc:83:59:e5:95:0b:
                    f2:ef:ab:df:d2:21:08:18:ee:03:ca:80:bd:d5:24:
                    7d:64:19:e6:d9:c7:f8:cd:49:ed:9d:b5:01:94:25:
                    9b:d6:59:89:b1:41:fc:eb:d2:a8:b2:26:43:5c:0b:
                    54:f0:57:57:2b:f1:5c:21:6d:02:85:c8:41:17:50:
                    0e:32:ad:aa:91:b5:f5:e2:c7:1b:bf:87:05:97:cc:
                    f6:05:a8:df:08:b2:df:3c:cc:c0:81:df:81:9c:4e:
                    65:03:f7:e0:67:eb:84:93:b2:22:dd:16:89:22:7e:
                    36:ee:31:59:14:21:0b:44:10:3b:79:2a:6e:02:7d:
                    34:4a:56:a7:c1:3b:8a:e5:7f:b0:bf:6d:e2:b8:a8:
                    05:21:e5:7b:52:3e:4c:01:30:6d:83:7c:ac:89:e2:
                    77:7d:8f:d4:52:db:11:43:4c:e0:8b:c8:75:9f:58:
                    1c:f8:09:c5:7b:37:54:79:bc:99:83:55:6d:4b:76:
                    fd:fd:50:1d:b5:e6:b1:48:fc:a7:18:17:16:6b:cf:
                    31:cf:4e:ca:5e:2d:87:89:ec:b8:91:6e:03:50:dd:
                    c7:33:db:99:25:79:30:85:5f:1e:77:6f:38:a0:8d:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:F9:74:99:23:72:E7:6A:CA:98:54:8D:5B:6D:3C:25:93:92:4E
            X509v3 Authority Key Identifier:
                keyid:8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:ea:60:9b:fc:53:27:e7:f9:ec:82:bd:91:9f:ca:d3:ab:
         27:e3:7e:c2:c5:1d:37:07:1a:fb:90:d5:0d:30:ba:cb:1d:45:
         67:60:74:43:6b:55:02:3b:4b:91:cf:a5:c0:32:ff:92:78:5c:
         77:3d:43:69:80:87:d3:81:a1:5f:41:50:fd:66:28:bc:9a:2e:
         07:66:1c:76:61:5b:a2:64:91:26:4a:d5:23:53:ab:ae:aa:fa:
         78:6d:13:d0:ce:52:75:28:02:ff:5a:8c:6d:56:84:04:ed:5d:
         7c:a5:59:d6:d4:4d:8d:0b:21:c1:a2:46:4e:03:48:a4:01:0c:
         9f:64:56:d4:1f:df:ae:46:46:c8:a5:77:ed:44:84:18:47:40:
         94:5d:11:1b:6d:7a:71:7b:00:18:24:4e:5d:94:49:91:88:bb:
         3e:7e:4a:df:09:c3:f4:69:82:50:49:e4:8f:cb:7c:f3:a0:61:
         d9:02:eb:9b:2a:2a:79:ec:0c:26:11:72:e1:47:0f:5d:b1:e5:
         a5:d6:5b:e0:11:95:68:63:26:6a:78:18:77:90:64:a4:0e:e1:
         57:06:a2:b4:5a:51:a0:b7:26:be:22:2e:7f:ac:64:0a:39:dc:
         65:f8:68:20:33:29:61:a5:5e:02:fa:3b:b5:d7:74:08:8d:3e:
         78:eb:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:41:48 2025 by rpki-client