Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa
File:                     323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (raw, json)
Hash identifier:          QyUtb/5gl6krDSKK04fIDtKnAQYQqWsdxxEP9vtOfXU=
Subject key identifier:   02:7C:0E:19:B2:19:B6:8A:43:6E:B3:42:90:F1:DE:0F:63:4A:2D:01
Certificate issuer:       /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Certificate serial:       7896852B81A64CCE81A5EE6CE362DF9D227BF079
Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa
Signing time:             Mon 08 Sep 2025 15:43:48 +0000
ROA not before:           Mon 08 Sep 2025 15:38:48 +0000
ROA not after:            Mon 07 Sep 2026 15:43:48 +0000
asID:                     273884
IP address blocks:        2803:c350::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:96:85:2b:81:a6:4c:ce:81:a5:ee:6c:e3:62:df:9d:22:7b:f0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
        Validity
            Not Before: Sep  8 15:38:48 2025 GMT
            Not After : Sep  7 15:43:48 2026 GMT
        Subject: CN=027C0E19B219B68A436EB34290F1DE0F634A2D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:fe:b8:d2:a4:26:77:96:90:d1:b2:23:0d:
                    bc:6e:bb:9f:3e:a0:31:0d:5a:7f:36:22:6b:3c:f1:
                    3f:84:e2:a4:25:3d:fd:5d:ea:04:54:2e:04:57:3b:
                    fd:0f:1c:62:bc:6a:75:05:ca:d8:8f:6c:ea:ef:7b:
                    f5:b2:a8:10:f2:33:63:43:87:92:d7:86:18:51:00:
                    fa:21:1e:f3:40:e4:d7:0e:95:dc:bf:43:8f:b1:5e:
                    df:fa:12:f1:21:cb:54:b8:a7:f6:74:78:79:47:31:
                    00:89:ea:5f:2a:2a:e4:a4:62:23:d2:58:dc:5a:b1:
                    ed:a1:30:95:98:db:bb:3f:ff:e6:3e:dd:40:ab:96:
                    53:9f:d0:33:8b:d3:c2:34:c9:b5:07:61:65:45:e9:
                    6e:4c:c6:64:6f:e3:ba:3d:7c:32:84:54:df:de:0f:
                    62:27:bc:46:25:09:8c:c8:6b:98:05:96:12:84:b6:
                    6a:02:86:a7:67:78:54:97:45:df:e3:ec:23:ef:b1:
                    84:ac:de:88:8c:ae:7e:a7:b5:18:a1:d0:58:80:0d:
                    c9:10:06:2b:46:d6:5b:ba:4e:4e:40:77:99:33:a1:
                    b1:18:3d:96:c4:c4:3e:fc:23:3b:cf:31:3f:54:da:
                    6e:09:31:83:4f:8d:ee:7b:37:ea:6c:f5:38:d6:f6:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:0E:19:B2:19:B6:8A:43:6E:B3:42:90:F1:DE:0F:63:4A:2D:01
            X509v3 Authority Key Identifier:
                keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c350::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:65:30:9f:96:23:2c:2e:4b:ae:cd:13:b1:37:58:9e:75:
         7a:cd:9d:61:b8:8a:10:0f:3c:59:69:2f:e8:74:a7:37:1e:57:
         63:42:91:87:f8:12:7c:85:1f:50:d5:30:8c:c9:bc:a2:50:d7:
         b8:42:ae:4c:25:13:2b:6d:87:cd:90:87:15:5d:dc:05:d2:5f:
         bb:8d:d5:43:ba:ee:58:a5:c8:2d:88:77:43:16:28:ee:ce:2d:
         9b:dd:35:d7:44:f0:f4:62:ea:26:c1:e3:c7:a9:b6:9d:82:5a:
         14:ca:67:77:fe:d0:74:dc:3d:cd:b7:c5:ec:76:87:26:10:08:
         48:00:28:2f:e1:ae:fd:4e:47:11:cf:23:7e:43:13:95:8c:d3:
         2a:51:02:3e:f2:1c:eb:ca:ae:92:fb:7c:3c:5b:37:a0:a0:20:
         8b:5e:d4:35:94:4b:9a:80:0d:68:87:3c:83:f5:33:2d:a4:42:
         2a:d9:67:41:43:45:17:c5:40:f9:54:c9:2a:52:8d:e7:fd:84:
         0e:01:55:ef:84:db:c6:b1:c1:41:05:18:71:ce:4e:8f:26:2e:
         e9:5f:86:c0:42:a9:80:98:26:12:00:b0:f0:b7:e6:3b:7d:14:
         de:c0:d6:8e:d4:11:ed:c2:48:c4:02:25:cc:63:20:84:af:41:
         42:c6:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:39:50 2025 by rpki-client