Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a616261623a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a616261623a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          wXsEONVe6ToWmQE7l84Z24s+Y6hNoY2bPs4FZssGc/s=
Subject key identifier:   81:3A:D1:1D:64:D7:08:91:69:74:D8:4F:E2:46:EA:46:24:0C:48:2C
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       0E0E632B9AA5EB2D92DBB8B8506055ED13F50CFD
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a616261623a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 08 Jul 2025 10:50:00 +0000
ROA not before:           Tue 08 Jul 2025 10:45:00 +0000
ROA not after:            Tue 07 Jul 2026 10:50:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:abab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:63:2b:9a:a5:eb:2d:92:db:b8:b8:50:60:55:ed:13:f5:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Jul  8 10:45:00 2025 GMT
            Not After : Jul  7 10:50:00 2026 GMT
        Subject: CN=813AD11D64D708916974D84FE246EA46240C482C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:25:62:52:84:eb:75:19:07:ce:05:a0:be:
                    69:07:79:cb:59:d7:7d:2d:c7:51:c0:3d:36:d0:04:
                    ac:c1:82:2f:27:29:4e:a4:dd:be:49:94:1d:4d:59:
                    1d:f6:ad:d5:e2:8d:a6:66:0d:97:9d:f3:be:eb:cc:
                    78:70:b9:97:fa:ee:49:41:5b:c3:59:49:16:23:1e:
                    f0:a6:69:cc:02:63:a9:bc:cd:3a:1e:ae:cf:5d:0e:
                    9b:89:c1:a5:47:10:5b:9a:25:75:c2:2a:64:53:31:
                    e4:4a:dd:da:3f:00:0c:d0:8a:59:7a:5a:e7:04:a6:
                    e0:e9:eb:0f:22:98:6f:24:dc:60:21:6a:8e:b4:a8:
                    88:13:2b:de:90:ba:03:5f:87:00:95:09:64:46:a4:
                    b6:a8:f3:9a:8a:96:6c:88:66:2b:69:97:e7:89:38:
                    43:68:f6:85:67:8a:d1:27:60:92:b5:29:89:d0:1e:
                    bb:39:7c:23:a8:d6:b6:34:57:ae:a0:82:f3:13:e4:
                    b8:6a:40:e6:ee:4e:76:1d:fa:28:7c:74:77:08:b4:
                    b0:41:3b:0b:d9:dd:a5:63:67:88:5a:ce:e2:71:0f:
                    da:55:08:64:a9:16:ea:7a:4d:38:46:cb:e6:69:12:
                    03:f9:ed:0f:44:3c:cd:c4:8b:64:8b:32:c6:b1:90:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:D1:1D:64:D7:08:91:69:74:D8:4F:E2:46:EA:46:24:0C:48:2C
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a616261623a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:abab::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:77:43:51:2b:ba:11:e7:ee:69:3e:ec:09:61:fb:06:de:
         3f:21:a9:2e:22:8e:e2:68:25:2c:e5:b8:b6:07:33:b2:a6:93:
         40:a1:71:e4:b7:15:73:8f:d8:fb:ed:fb:dd:df:2f:ef:03:9c:
         d5:33:12:0e:d2:ab:55:20:91:5f:f6:f3:7f:51:13:ee:e4:81:
         df:09:df:a3:57:95:c0:8e:46:d6:05:5e:3d:e3:62:64:93:47:
         be:ef:87:62:19:8b:bc:41:8f:79:60:b7:74:28:ce:2a:3e:a7:
         ad:a8:d6:b4:a8:9d:46:ba:ae:3f:39:23:20:00:5c:e7:28:01:
         b1:0e:3c:6c:a5:45:6c:10:46:42:06:39:d8:9e:25:77:de:a2:
         83:f6:74:cc:e6:ca:b5:76:d7:60:88:c4:0b:0c:dc:e5:a8:b8:
         6d:20:ae:e9:98:e6:33:bb:74:74:77:04:83:a1:c1:d9:fe:07:
         d6:b1:bc:b7:9b:b7:f8:f1:d5:10:d2:d9:ba:41:13:9b:8e:ab:
         50:1b:7d:6c:7e:4d:f6:b9:ca:39:6a:f3:39:0c:4c:f0:b9:da:
         87:38:f4:b5:dd:13:9e:59:99:8f:c6:28:22:41:89:48:54:8d:
         9a:3f:8c:58:fb:9a:fb:9f:56:f0:6c:33:76:3c:4f:e7:bc:84:
         2e:13:e1:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:50:40 2025 by rpki-client