Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa
File:                     323830333a336435303a3a2f33322d3438203d3e20323733383736.roa (raw, json)
Hash identifier:          0qJOZ3oT3nInhidsGfv3WX77GVHPFDZRqUoNSJZ0uI4=
Subject key identifier:   57:7A:5C:A7:CB:DD:81:B3:BF:9F:44:11:27:C2:5F:03:A0:C5:3B:17
Certificate issuer:       /CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6
Certificate serial:       13B5419B505565C59ED726BEB62C31316E98120C
Authority key identifier: AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa
Signing time:             Mon 07 Jul 2025 13:24:41 +0000
ROA not before:           Mon 07 Jul 2025 13:19:41 +0000
ROA not after:            Mon 06 Jul 2026 13:24:41 +0000
asID:                     273876
IP address blocks:        2803:3d50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:41:9b:50:55:65:c5:9e:d7:26:be:b6:2c:31:31:6e:98:12:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6
        Validity
            Not Before: Jul  7 13:19:41 2025 GMT
            Not After : Jul  6 13:24:41 2026 GMT
        Subject: CN=577A5CA7CBDD81B3BF9F441127C25F03A0C53B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:0f:9c:42:b8:81:2d:8e:2a:16:83:82:6e:
                    1f:c7:6d:dc:3f:24:a8:f5:a5:41:e5:64:0e:e4:d3:
                    ee:bd:1d:77:0e:05:de:da:bb:d2:92:16:be:d8:0c:
                    56:6d:5f:6c:2b:f1:86:0d:82:98:f8:81:1d:5e:a6:
                    61:19:e1:bc:ce:9d:f6:35:c1:25:34:47:1b:89:e7:
                    d0:4e:ea:a6:0a:2b:07:ce:4b:30:03:6e:2a:eb:83:
                    28:47:d1:41:55:2d:74:d2:2b:ce:68:5b:a6:f2:c5:
                    70:11:58:83:f3:1f:19:cf:de:ca:3f:a4:a9:d6:f9:
                    15:05:ae:fc:21:30:be:cd:27:68:25:e9:07:16:18:
                    95:19:e3:62:1c:f5:d3:39:90:cc:1d:bc:d0:a2:cf:
                    35:41:5b:00:5c:90:27:64:57:d1:2a:f3:97:5a:24:
                    a1:84:9b:c6:17:46:24:aa:ff:ce:90:48:2e:5b:66:
                    c9:a3:d5:6f:77:a8:7d:c4:1f:5b:0f:cb:2d:bc:11:
                    b2:61:87:84:81:87:f5:8c:8e:86:32:0d:5f:58:6e:
                    42:a3:d3:26:ee:5f:c8:03:fd:dc:9e:83:a5:61:b7:
                    9e:8a:68:27:7a:c5:0a:10:64:ef:ff:25:16:97:27:
                    7e:8e:b8:93:6d:2a:e3:ca:16:dd:b9:65:d3:1a:22:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:5C:A7:CB:DD:81:B3:BF:9F:44:11:27:C2:5F:03:A0:C5:3B:17
            X509v3 Authority Key Identifier:
                keyid:AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:c6:b7:df:b6:9c:48:69:ce:3e:a4:a6:b0:d4:8f:de:15:
         c1:c3:4c:23:07:8c:89:a8:da:17:6d:79:71:13:f8:91:78:38:
         a8:e8:bb:64:75:23:47:d7:83:09:f7:50:b1:ea:2f:34:01:9d:
         53:e0:ab:7b:8a:66:0c:87:27:64:ae:ce:60:7c:fb:01:ea:1a:
         4d:fc:52:13:79:21:2d:60:78:ee:91:fc:8f:ae:43:3f:99:9c:
         f6:71:3f:50:46:bd:18:98:c6:90:56:e5:5c:45:f8:fa:b0:24:
         af:6c:8a:ee:c3:77:d5:a5:57:09:b1:05:6b:f7:a6:06:d3:11:
         bf:d5:60:a9:a3:61:06:37:03:a4:49:da:5c:7b:fc:36:52:c6:
         f8:e7:64:eb:d5:d6:ff:bd:96:88:bf:c9:d6:87:c4:21:79:72:
         b3:85:b0:b3:2a:f8:a6:82:c3:f9:21:40:fe:83:27:f9:e3:fe:
         01:38:9b:04:1e:b7:ab:2b:6c:59:46:4f:4a:4d:48:6e:72:ab:
         07:46:6b:48:a8:e9:f6:0f:61:65:2f:8b:c7:75:40:af:b6:77:
         79:43:47:02:eb:0e:9a:31:d4:a3:b8:20:32:d9:45:a3:28:c9:
         14:60:2a:94:89:d2:98:6a:e3:53:57:0e:54:68:80:b2:c0:8f:
         99:79:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:20:15 2025 by rpki-client