Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/323830333a333061303a3a2f33322d3438203d3e20323636373936.roa
File:                     323830333a333061303a3a2f33322d3438203d3e20323636373936.roa (raw, json)
Hash identifier:          p5k0sh3hc4jIhb0Ux2gGLQ08okprJMLW05zBJiFo+as=
Subject key identifier:   48:95:76:86:1A:6A:46:25:84:D9:5F:45:2A:21:03:5F:F0:31:B0:CA
Certificate issuer:       /CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
Certificate serial:       52602DDF4DA18C568E1CCED4B928D30F27DD9B00
Authority key identifier: 7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/323830333a333061303a3a2f33322d3438203d3e20323636373936.roa
Signing time:             Thu 24 Jul 2025 15:55:01 +0000
ROA not before:           Thu 24 Jul 2025 15:50:01 +0000
ROA not after:            Thu 23 Jul 2026 15:55:01 +0000
asID:                     266796
IP address blocks:        2803:30a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 09:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:60:2d:df:4d:a1:8c:56:8e:1c:ce:d4:b9:28:d3:0f:27:dd:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
        Validity
            Not Before: Jul 24 15:50:01 2025 GMT
            Not After : Jul 23 15:55:01 2026 GMT
        Subject: CN=489576861A6A462584D95F452A21035FF031B0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:ba:49:54:16:c4:23:99:c7:25:7a:9b:6f:
                    d4:f4:e2:ed:4c:f4:9c:41:35:86:44:d7:8f:11:8d:
                    7a:d4:54:2d:63:c2:2d:e9:46:34:b5:47:3b:a0:2c:
                    38:6f:23:88:d8:23:c3:e8:bc:32:bb:41:4b:2b:e1:
                    c4:21:a8:41:70:b7:3d:80:1a:cb:5f:11:52:a5:cd:
                    aa:a1:3a:f9:90:eb:0a:52:c9:d3:c6:cb:53:d6:a6:
                    91:c0:3f:da:02:81:74:85:51:87:6c:47:ba:5b:38:
                    18:99:4d:55:c9:c3:6d:be:4a:31:16:99:6a:1b:56:
                    61:51:f4:f8:17:12:02:68:9c:0d:94:0f:2c:02:c0:
                    e0:15:f6:4a:01:56:d6:90:71:1e:9c:aa:3e:06:db:
                    a7:6f:bb:01:87:de:14:fc:4d:a9:87:00:26:ac:e6:
                    1c:b0:81:1b:ab:d6:57:03:93:c0:fd:43:70:66:4c:
                    27:64:45:32:d8:5a:a3:72:4f:06:18:2c:a4:d0:38:
                    ab:05:54:d6:c3:e7:b2:6b:e8:fe:cc:90:6f:88:ef:
                    16:cd:7c:54:ad:58:73:67:53:5f:17:f1:74:93:57:
                    51:d5:54:f4:33:27:b6:09:71:3e:86:c4:d5:1d:e6:
                    13:e8:d3:29:3e:1a:4f:ad:55:b2:d1:70:94:a2:f8:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:76:86:1A:6A:46:25:84:D9:5F:45:2A:21:03:5F:F0:31:B0:CA
            X509v3 Authority Key Identifier:
                keyid:7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/323830333a333061303a3a2f33322d3438203d3e20323636373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:30a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:4d:52:96:8a:1c:0f:79:77:a7:3e:ac:52:fc:ba:b5:5b:
         0e:39:38:ed:22:4a:55:5c:16:2b:76:9e:99:65:04:50:12:8c:
         b3:86:ed:ac:6f:0d:28:e9:44:3e:09:e4:75:37:e8:77:95:20:
         41:28:f3:91:31:b1:e4:f4:d5:19:51:ed:48:58:ec:2f:73:bf:
         57:20:8d:c2:10:81:19:9c:eb:28:12:25:66:09:9a:46:6d:57:
         bd:cb:f2:6c:4a:c1:36:f8:36:22:86:c0:ab:3c:f5:56:76:9a:
         f1:15:a7:88:d5:b1:c3:53:d0:e3:06:b6:c5:24:60:5b:b9:2b:
         19:1b:4f:06:1e:c5:16:3c:a6:ba:52:76:ca:50:9e:56:6b:66:
         6f:09:50:9f:a6:e3:17:52:f9:b1:70:20:92:33:fb:20:f7:1a:
         c2:5e:ba:a3:20:9c:09:02:66:55:d0:2a:70:a4:f4:8d:b4:8b:
         e5:33:9a:c0:28:c6:32:48:48:82:b9:64:29:9d:e6:b5:f3:f2:
         f8:c3:19:7d:65:6d:cf:94:3e:a0:a5:ae:b6:db:72:b7:68:e2:
         04:90:33:3d:b8:f9:83:08:8d:64:77:8a:3d:77:52:b2:7d:69:
         85:9c:b0:59:0e:ee:5b:2f:c7:76:65:12:63:c6:7f:b9:bc:70:
         24:c4:87:2b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUmAt302hjFaOHM7UuSjTDyfdmwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y3MTk5MDM4NkM0ODM2NkFDOENCMTNDOEQ1QTUyQ0Yz
OEQxNzdBQTAeFw0yNTA3MjQxNTUwMDFaFw0yNjA3MjMxNTU1MDFaMDMxMTAvBgNV
BAMTKDQ4OTU3Njg2MUE2QTQ2MjU4NEQ5NUY0NTJBMjEwMzVGRjAzMUIwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyrpJVBbEI5nHJXqbb9T04u1M
9JxBNYZE148RjXrUVC1jwi3pRjS1RzugLDhvI4jYI8PovDK7QUsr4cQhqEFwtz2A
GstfEVKlzaqhOvmQ6wpSydPGy1PWppHAP9oCgXSFUYdsR7pbOBiZTVXJw22+SjEW
mWobVmFR9PgXEgJonA2UDywCwOAV9koBVtaQcR6cqj4G26dvuwGH3hT8TamHACas
5hywgRur1lcDk8D9Q3BmTCdkRTLYWqNyTwYYLKTQOKsFVNbD57Jr6P7MkG+I7xbN
fFStWHNnU18X8XSTV1HVVPQzJ7YJcT6GxNUd5hPo0yk+Gk+tVbLRcJSi+P01AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUSJV2hhpqRiWE2V9FKiEDX/AxsMowHwYDVR0j
BBgwFoAUf3GZA4bEg2asjLE8jVpSzzjRd6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzkwMkI3QjczN0U1OUM2N0RCQzFCQkRFMTUxNjAzRDYw
NzQ5QUREODA5MDJFQThFQzk4NkFBMEU4MzA3MTlCLzAvN0Y3MTk5MDM4NkM0ODM2
NkFDOENCMTNDOEQ1QTUyQ0YzOEQxNzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjcxOTkwMzg2QzQ4MzY2QUM4
Q0IxM0M4RDVBNTJDRjM4RDE3N0FBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc5MDJCN0I3MzdFNTlDNjdEQkMxQkJERTE1MTYwM0Q2MDc0OUFERDgw
OTAyRUE4RUM5ODZBQTBFODMwNzE5Qi8wLzMyMzgzMDMzM2EzMzMwNjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDMKAw
DQYJKoZIhvcNAQELBQADggEBAEyPTVKWihwPeXenPqxS/Lq1Ww45OO0iSlVcFit2
npllBFASjLOG7axvDSjpRD4J5HU36HeVIEEo85ExseT01RlR7UhY7C9zv1cgjcIQ
gRmc6ygSJWYJmkZtV73L8mxKwTb4NiKGwKs89VZ2mvEVp4jVscNT0OMGtsUkYFu5
KxkbTwYexRY8prpSdspQnlZrZm8JUJ+m4xdS+bFwIJIz+yD3GsJeuqMgnAkCZlXQ
KnCk9I20i+UzmsAoxjJISIK5ZCmd5rXz8vjDGX1lbc+UPqClrrbbcrdo4gSQMz24
+YMIjWR3ij13UrJ9aYWcsFkO7lsvx3ZlEmPGf7m8cCTEhys=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:26:49 2025 by rpki-client