Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          E+VaAB3ia8g0Gw33v9EmRviIoC8Fm5kpj+e6Xc30Apc=
Subject key identifier:   CF:22:A5:BD:4C:0F:86:F3:FE:09:EA:FF:26:42:A1:6E:AF:5E:BE:8A
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       39FA6D201A404373030541FC24194CD19D59C658
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 05 Sep 2025 06:40:01 +0000
ROA not before:           Fri 05 Sep 2025 06:35:01 +0000
ROA not after:            Fri 04 Sep 2026 06:40:01 +0000
asID:                     265780
IP address blocks:        2803:fd40::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fa:6d:20:1a:40:43:73:03:05:41:fc:24:19:4c:d1:9d:59:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Sep  5 06:35:01 2025 GMT
            Not After : Sep  4 06:40:01 2026 GMT
        Subject: CN=CF22A5BD4C0F86F3FE09EAFF2642A16EAF5EBE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:6d:5a:63:fe:d3:0e:69:3c:4a:e4:73:bd:
                    08:6e:b9:ee:72:f0:5b:15:c2:2e:15:78:fa:c9:f9:
                    a9:7c:67:0c:f2:51:eb:28:f2:40:89:5f:1c:a7:20:
                    ca:db:2b:f4:6d:8c:80:6e:61:8d:e7:e3:ba:33:c8:
                    f4:18:aa:18:e4:1f:97:f8:d2:68:0f:ed:28:40:07:
                    6b:85:77:14:ec:a2:1c:dd:a3:62:f5:e2:04:60:5d:
                    ad:5e:e8:85:ad:95:32:aa:37:96:b8:ba:18:da:62:
                    e5:c8:20:2e:31:30:cf:9b:cb:33:45:03:3b:9d:ba:
                    15:c6:5b:9d:28:3d:24:f2:b3:9b:00:13:e5:46:3a:
                    bc:b7:a9:1f:87:3f:0f:45:07:41:fb:cc:6f:fc:1b:
                    94:12:f9:71:ee:ab:09:59:11:4e:79:a4:50:ad:30:
                    ef:c5:11:45:cc:b2:3c:a9:8b:c4:fa:75:d1:53:41:
                    41:f9:96:f1:ff:6f:fa:89:13:d9:9d:c3:89:ae:50:
                    11:dc:08:0e:22:01:1c:e7:36:71:bc:8e:05:c6:2d:
                    89:2e:93:e9:ca:22:86:82:41:1c:22:f7:8e:63:b5:
                    af:fd:50:a1:e9:35:d4:ae:cd:43:6b:ea:6e:35:f8:
                    6a:82:1a:16:ab:1d:77:4a:37:62:a6:15:ad:5f:5e:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:22:A5:BD:4C:0F:86:F3:FE:09:EA:FF:26:42:A1:6E:AF:5E:BE:8A
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40::/35

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:f6:58:e2:3d:6b:ca:4f:95:52:b8:5a:ad:74:d3:c5:d6:
         c2:93:b0:d6:98:62:88:38:0c:72:eb:eb:77:00:c2:c9:63:a1:
         0a:04:3b:96:3f:b7:2b:87:c2:40:6b:d7:26:c0:2c:a5:8a:52:
         f5:88:41:5d:11:7f:7f:1c:51:4b:9f:3c:a1:57:67:19:39:93:
         95:78:0f:eb:06:df:4d:6b:37:83:cc:ad:f7:2f:58:63:15:7a:
         01:f1:c0:54:fd:45:4f:03:09:90:ca:c3:af:5b:9b:85:c6:35:
         57:8e:1e:b6:10:a5:3e:e6:c2:10:16:bf:ed:52:4e:c8:bd:22:
         1e:bb:84:db:57:18:9a:d2:ca:a5:d3:b0:62:b7:30:32:b3:4a:
         09:a8:4a:1d:ee:43:d4:d1:aa:33:e6:a5:8d:61:b9:c6:47:43:
         9a:d7:dc:2c:2d:db:29:3d:aa:7d:16:84:2e:3d:26:4e:d8:ca:
         e3:b8:6f:44:56:28:41:70:df:42:1a:d6:f8:23:7f:db:db:92:
         f5:f4:89:04:5d:e1:c3:2a:b2:c6:2a:d2:5e:d3:b7:a8:60:64:
         94:40:25:15:52:7e:4b:d3:90:21:ca:8b:59:77:2f:36:ca:61:
         04:b6:3e:99:1d:50:e1:58:55:a9:ae:59:43:96:e4:68:20:d1:
         3f:3a:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:49:42 2025 by rpki-client