Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/323830333a643964303a3a2f33322d3332203d3e20323734313538.roa
File:                     323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (raw, json)
Hash identifier:          T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=
Subject key identifier:   7C:17:F7:36:87:53:B4:75:76:AB:B0:66:E8:E0:6E:44:34:03:91:D9
Certificate issuer:       /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Certificate serial:       6554EFB303C0A33FD07EC556A562848F004B0A36
Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/323830333a643964303a3a2f33322d3332203d3e20323734313538.roa
Signing time:             Fri 11 Jul 2025 21:05:00 +0000
ROA not before:           Fri 11 Jul 2025 21:00:00 +0000
ROA not after:            Fri 10 Jul 2026 21:05:00 +0000
asID:                     274158
IP address blocks:        2803:d9d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:ef:b3:03:c0:a3:3f:d0:7e:c5:56:a5:62:84:8f:00:4b:0a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
        Validity
            Not Before: Jul 11 21:00:00 2025 GMT
            Not After : Jul 10 21:05:00 2026 GMT
        Subject: CN=7C17F7368753B47576ABB066E8E06E44340391D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:9e:81:d4:6e:f2:5f:c3:ce:b7:60:22:63:
                    b4:33:1c:7e:81:db:85:70:68:d3:e6:ac:ad:0d:a4:
                    49:e7:0a:94:e3:c0:97:23:73:43:bf:17:c7:b4:28:
                    4a:4b:b9:22:16:89:5a:b5:f1:30:fb:14:06:47:be:
                    74:b7:84:da:34:0b:6c:16:91:09:02:28:4d:57:b2:
                    56:81:81:bd:d0:45:ca:85:1a:6a:15:87:26:a5:e2:
                    ae:81:35:f2:60:c6:9a:de:4d:b8:22:a5:90:58:4c:
                    3c:30:b4:ec:fd:03:b7:75:40:b9:5e:ad:81:3a:8e:
                    41:9b:fa:39:e4:62:70:32:d1:b4:e6:64:8e:90:97:
                    1b:64:46:ae:5e:a3:ff:1d:43:44:a5:98:74:ae:b5:
                    26:a5:6f:7d:3b:30:f8:12:05:52:67:23:19:cf:9a:
                    b4:aa:7c:17:6e:4a:e9:a5:f8:71:11:80:db:7b:aa:
                    3f:c4:88:f0:e5:cd:34:1d:13:b0:23:1e:d4:70:3c:
                    e6:0c:ff:9b:3e:14:ad:4f:f2:2e:79:47:6a:c7:49:
                    74:c4:e9:ed:b0:f8:55:d5:2a:60:ee:7e:eb:4e:b8:
                    8f:2b:e4:ca:7c:aa:f3:9a:7d:a8:16:45:cd:26:48:
                    ff:17:9b:da:a2:5b:9a:fe:ff:27:fb:86:0b:3a:66:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:F7:36:87:53:B4:75:76:AB:B0:66:E8:E0:6E:44:34:03:91:D9
            X509v3 Authority Key Identifier:
                keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/323830333a643964303a3a2f33322d3332203d3e20323734313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:a8:7e:cb:59:ba:b1:83:21:65:04:cc:e7:4f:f3:a3:9e:
         e5:90:8b:bb:0a:d4:d9:92:4e:8c:c1:b0:ac:7f:dd:25:74:21:
         d3:b4:52:82:63:84:f1:86:9e:58:e4:9f:ba:2d:5e:08:07:fe:
         e4:67:f6:93:ba:f4:b0:da:b5:f0:45:aa:42:48:65:eb:be:8b:
         5d:4a:bb:9c:66:0a:40:5c:d5:3c:ed:fe:9e:7e:bc:47:7f:15:
         33:41:68:c8:b5:ed:f9:8d:a0:78:b3:4b:32:ae:d2:dc:e2:0f:
         e0:2c:a3:f3:92:54:1d:20:88:ee:11:5f:ed:0c:f5:82:bd:24:
         05:be:1b:93:c7:66:d0:40:1b:a6:33:a9:16:d9:20:9b:c5:15:
         1a:25:7b:ad:03:36:38:43:1a:19:fe:9e:1c:55:6b:b1:62:41:
         67:de:c2:7c:26:02:a5:20:7e:63:86:5b:81:f6:58:0d:93:1c:
         17:74:79:54:c6:a5:e8:7c:2e:74:4c:6b:2c:3d:59:db:79:a4:
         32:fa:72:1e:0f:d6:39:38:b8:18:8a:fb:f9:d2:09:36:7a:e3:
         17:fc:44:85:7a:32:2e:91:a5:ca:95:ea:96:6e:3c:75:5f:80:
         04:50:01:83:8a:ae:6f:e6:8c:09:4e:4d:a2:64:97:21:a4:b3:
         8c:b5:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:45:14 2025 by rpki-client