Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa
File:                     323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          8leo8lC005zOwwsPGlFRzmhZZVlzG80Cqu42E5HzFug=
Subject key identifier:   63:75:D8:F4:27:1E:CB:97:90:E7:8B:D7:66:24:79:D9:2D:FA:30:18
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       6B4A917284BE01F04A7258B6A50AC2415593B26C
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa
Signing time:             Wed 16 Jul 2025 04:25:36 +0000
ROA not before:           Wed 16 Jul 2025 04:20:36 +0000
ROA not after:            Wed 15 Jul 2026 04:25:36 +0000
asID:                     267831
IP address blocks:        2803:8460:3000::/36 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4a:91:72:84:be:01:f0:4a:72:58:b6:a5:0a:c2:41:55:93:b2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Jul 16 04:20:36 2025 GMT
            Not After : Jul 15 04:25:36 2026 GMT
        Subject: CN=6375D8F4271ECB9790E78BD7662479D92DFA3018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:47:c7:f8:a5:18:47:93:59:f8:70:b9:0d:
                    0e:76:5b:e8:46:61:93:eb:ef:17:63:26:bd:2a:18:
                    e8:46:cb:bd:47:6e:27:c2:21:f9:6b:7e:c1:c3:df:
                    67:6d:6f:3a:7a:0f:bd:33:79:50:33:ab:89:a5:32:
                    65:43:4c:77:8b:b7:09:98:ed:3e:a6:35:03:35:3f:
                    5e:1f:ad:b7:37:fa:03:f8:a4:de:d4:ee:c0:05:fe:
                    88:7a:ee:b4:48:75:d7:59:98:51:34:9d:04:52:12:
                    bd:98:c2:c6:5e:c4:a3:10:c8:37:e4:a5:62:ca:ae:
                    04:30:32:e0:94:fa:b1:55:76:11:4b:df:f7:25:f2:
                    37:76:bb:92:5a:a7:19:c2:3b:13:5e:61:3d:a4:31:
                    f5:62:85:cd:54:d7:f4:6e:29:5d:56:0f:56:5f:05:
                    ed:54:de:16:de:ff:e8:87:ae:54:5b:fe:1a:62:2a:
                    9a:b3:06:f9:7d:1f:3f:95:9f:6c:32:93:db:bd:55:
                    ea:f8:39:20:f2:e6:c2:b7:6d:86:15:69:c5:00:46:
                    ed:0a:66:a1:42:63:ef:4a:34:67:29:4d:73:a8:f4:
                    54:17:66:c1:4e:26:fb:d9:28:c0:e1:b6:4b:ab:fb:
                    08:54:34:06:8c:3b:bf:7e:18:12:51:50:f6:3f:eb:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:D8:F4:27:1E:CB:97:90:E7:8B:D7:66:24:79:D9:2D:FA:30:18
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333030303a3a2f33362d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:53:7d:3d:0d:15:4f:55:8e:b3:63:8f:b5:0c:ab:4a:40:20:
         63:ef:13:42:c4:d6:ab:62:82:9b:fd:a3:04:b4:60:31:c7:9f:
         ef:27:33:82:5a:f6:39:52:da:3a:d3:9a:3c:16:1e:c9:04:3e:
         f1:c3:f6:f2:53:e1:d7:8a:90:6b:10:c3:a5:7f:fb:fe:40:1c:
         b9:9b:24:68:c2:4f:5b:ea:4d:cb:64:28:4d:45:8d:93:17:21:
         a1:b3:e8:19:b8:7a:cc:0f:d7:fd:c6:6c:b0:16:4c:19:84:02:
         68:bb:e1:27:4d:74:eb:1e:2c:10:08:fb:63:15:c5:78:5b:d0:
         33:18:fb:bd:3b:c5:74:30:40:7d:84:be:19:96:1a:f1:82:cb:
         24:73:92:e0:23:4a:78:0e:a6:3b:f6:99:88:41:0d:22:1c:e3:
         40:66:15:78:c3:6e:b0:06:8d:43:2f:ce:f6:74:f8:46:25:b3:
         ba:b4:c2:16:3e:1a:73:50:56:f2:be:77:b5:4d:9d:81:9d:5d:
         2c:e1:05:c2:66:0f:75:10:3c:04:ad:30:1c:71:67:46:06:0f:
         b8:57:8b:b5:c0:89:d8:44:a7:b0:fa:e6:2b:75:e3:8d:82:f1:
         1a:1d:6d:f0:84:15:00:2d:4d:c1:d1:1d:b6:55:71:c7:2d:44:
         fa:1d:53:c2
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUa0qRcoS+AfBKcli2pQrCQVWTsmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC
Q0U2MDA3QTAeFw0yNTA3MTYwNDIwMzZaFw0yNjA3MTUwNDI1MzZaMDMxMTAvBgNV
BAMTKDYzNzVEOEY0MjcxRUNCOTc5MEU3OEJENzY2MjQ3OUQ5MkRGQTMwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpkfH+KUYR5NZ+HC5DQ52W+hG
YZPr7xdjJr0qGOhGy71HbifCIflrfsHD32dtbzp6D70zeVAzq4mlMmVDTHeLtwmY
7T6mNQM1P14frbc3+gP4pN7U7sAF/oh67rRIdddZmFE0nQRSEr2YwsZexKMQyDfk
pWLKrgQwMuCU+rFVdhFL3/cl8jd2u5JapxnCOxNeYT2kMfVihc1U1/RuKV1WD1Zf
Be1U3hbe/+iHrlRb/hpiKpqzBvl9Hz+Vn2wyk9u9Ver4OSDy5sK3bYYVacUARu0K
ZqFCY+9KNGcpTXOo9FQXZsFOJvvZKMDhtkur+whUNAaMO79+GBJRUPY/65cJAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUY3XY9Ccey5eQ54vXZiR52S36MBgwHwYDVR0j
BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz
OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB
MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx
QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3
QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM5MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA4RgMDANBgkqhkiG9w0BAQsFAAOCAQEAElN9PQ0VT1WOs2OPtQyrSkAg
Y+8TQsTWq2KCm/2jBLRgMcef7yczglr2OVLaOtOaPBYeyQQ+8cP28lPh14qQaxDD
pX/7/kAcuZskaMJPW+pNy2QoTUWNkxchobPoGbh6zA/X/cZssBZMGYQCaLvhJ010
6x4sEAj7YxXFeFvQMxj7vTvFdDBAfYS+GZYa8YLLJHOS4CNKeA6mO/aZiEENIhzj
QGYVeMNusAaNQy/O9nT4RiWzurTCFj4ac1BW8r53tU2dgZ1dLOEFwmYPdRA8BK0w
HHFnRgYPuFeLtcCJ2ESnsPrmK3XjjYLxGh1t8IQVAC1NwdEdtlVxxy1E+h1Twg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 14:12:47 2025 by rpki-client