Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa
File:                     323830333a323539303a3a2f33322d3332203d3e20323732393639.roa (raw, json)
Hash identifier:          sNXkl7Vw9qBYRqF6o+YZFHzNhBfbD5fGTbPZPcw4ndg=
Subject key identifier:   78:DD:A8:E4:FA:2A:3A:EC:DA:EF:12:A9:B6:92:88:1E:2B:01:33:D4
Certificate issuer:       /CN=6786E79D4497221E4715B318D4CDA91EBF9AF72C
Certificate serial:       46D61AEE748483FFCC94838C6AADB8D6A4AA29E5
Authority key identifier: 67:86:E7:9D:44:97:22:1E:47:15:B3:18:D4:CD:A9:1E:BF:9A:F7:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa
Signing time:             Mon 08 Sep 2025 15:43:49 +0000
ROA not before:           Mon 08 Sep 2025 15:38:49 +0000
ROA not after:            Mon 07 Sep 2026 15:43:49 +0000
asID:                     272969
IP address blocks:        2803:2590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 11:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:1a:ee:74:84:83:ff:cc:94:83:8c:6a:ad:b8:d6:a4:aa:29:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6786E79D4497221E4715B318D4CDA91EBF9AF72C
        Validity
            Not Before: Sep  8 15:38:49 2025 GMT
            Not After : Sep  7 15:43:49 2026 GMT
        Subject: CN=78DDA8E4FA2A3AECDAEF12A9B692881E2B0133D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:71:64:89:bb:c9:30:a8:19:d6:da:cd:0d:
                    8e:eb:d2:93:57:c0:50:0a:04:e1:fb:9d:67:84:23:
                    71:0d:8b:2d:d4:d7:b4:72:41:a5:02:bd:2c:34:c1:
                    aa:61:44:f6:49:de:c9:2c:8a:d1:28:c4:25:72:dc:
                    92:7c:39:9e:73:bf:8a:e6:cd:f8:61:72:29:5b:fc:
                    05:ba:4c:97:8e:36:d8:96:85:90:61:6a:b3:cc:06:
                    f5:76:be:f9:38:e0:00:92:67:60:2d:9a:a2:76:50:
                    b6:f9:4c:93:2f:18:03:e0:fd:86:e4:76:17:7f:5b:
                    59:aa:97:03:df:c6:7a:eb:f7:87:1b:4c:d6:80:aa:
                    d4:c1:c9:b2:18:32:bc:5d:a2:72:fb:98:e1:00:e3:
                    4f:6d:e3:72:81:98:32:7c:f4:55:4a:24:69:d3:6d:
                    87:63:62:b8:01:83:47:ba:f6:47:b0:28:4d:4d:94:
                    01:13:ba:0e:d0:70:9e:1a:c4:34:95:7a:ae:91:7a:
                    64:14:2d:f2:12:e7:17:98:2b:83:98:26:76:9d:d3:
                    06:bc:ef:d0:a6:25:e2:a6:69:99:5e:b7:4f:1d:c7:
                    09:85:af:d2:2c:b7:77:84:8d:39:c3:6d:cf:25:57:
                    b3:41:20:f0:ca:7b:8d:b3:ff:a6:3f:4e:09:00:74:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:A8:E4:FA:2A:3A:EC:DA:EF:12:A9:B6:92:88:1E:2B:01:33:D4
            X509v3 Authority Key Identifier:
                keyid:67:86:E7:9D:44:97:22:1E:47:15:B3:18:D4:CD:A9:1E:BF:9A:F7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2590::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:72:db:ab:f0:7c:2e:3a:a4:87:e2:75:1d:24:7e:d7:62:e4:
         bb:3b:38:bc:c8:f5:b0:96:dd:8c:7a:8c:e0:fc:d3:58:2d:75:
         0a:78:2e:8a:20:ad:91:c0:e0:ca:5d:f3:f4:35:d9:6f:42:22:
         81:23:07:8e:cf:11:0f:e4:8b:66:9b:d6:f0:34:d3:e4:e7:bd:
         c0:f9:14:c2:41:78:ee:5c:e2:41:7b:c8:f1:ed:c3:95:72:c3:
         39:04:91:77:48:b7:e1:8b:ca:fe:18:f4:d3:6f:21:66:98:45:
         ac:f0:84:57:37:75:f1:47:6f:e8:2b:69:bf:5b:35:24:b9:5f:
         f7:95:b8:7c:f8:62:68:d3:74:d5:d1:a2:b2:36:69:ea:a3:b8:
         05:75:bd:1a:8b:7b:e8:8e:41:1d:69:a7:17:f5:bf:72:94:f6:
         9b:96:e4:a7:1b:05:04:b8:78:03:fa:ed:3e:34:21:38:1b:47:
         ed:58:80:c2:09:bc:4b:2a:ad:8c:b5:3c:68:11:95:85:cf:4d:
         bd:09:dd:94:c7:99:ff:15:cd:fc:0a:80:3b:76:db:bc:12:4e:
         c8:de:a3:93:99:a2:22:ab:c7:62:e1:d5:23:03:e5:b0:82:47:
         ca:3e:85:ef:9f:6b:37:84:c2:3d:0d:c0:e2:f5:95:3e:b0:52:
         2c:51:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:24:13 2025 by rpki-client