Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa
File:                     323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa (raw, json)
Hash identifier:          NvPHdnn8Q0IDCDZ74UWkCyw5esUNocFubOYLjnVB0KU=
Subject key identifier:   1C:C6:08:F5:F1:18:B1:6E:6A:A5:DA:F0:14:C9:C0:CB:D1:6F:72:CB
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       1F0A039489FFAEBE9BAD1C7C2872E51B931EA6BC
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa
Signing time:             Tue 16 Sep 2025 22:46:58 +0000
ROA not before:           Tue 16 Sep 2025 22:41:58 +0000
ROA not after:            Tue 15 Sep 2026 22:46:58 +0000
asID:                     26673
IP address blocks:        2803:bc40:8135::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0a:03:94:89:ff:ae:be:9b:ad:1c:7c:28:72:e5:1b:93:1e:a6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Sep 16 22:41:58 2025 GMT
            Not After : Sep 15 22:46:58 2026 GMT
        Subject: CN=1CC608F5F118B16E6AA5DAF014C9C0CBD16F72CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:56:7e:80:c6:38:79:da:68:f1:d1:98:47:
                    38:74:de:f1:56:84:a1:4b:da:4b:e2:68:d6:8b:93:
                    be:84:c3:f8:c5:46:0d:87:6d:a8:86:79:0c:93:09:
                    5f:fd:d7:3b:43:36:30:93:b0:6f:a5:8d:e8:58:a8:
                    32:dd:e7:22:73:b8:d5:00:6d:5d:70:49:15:4f:c2:
                    20:bf:c8:ad:3d:73:61:6e:b9:6d:cf:8d:7f:b1:43:
                    15:98:c2:4f:c4:d8:9a:87:22:2b:5f:1a:ff:19:26:
                    c7:f9:53:30:e0:5d:c4:b3:4c:d2:9a:c9:c1:c0:a3:
                    41:a9:55:7a:b2:e2:75:1d:64:dc:5d:20:f6:08:3c:
                    04:fe:10:8f:bb:e3:30:f0:f9:14:4a:7a:cc:3e:9c:
                    c8:42:ec:e1:2b:ad:2a:08:41:9f:d7:08:72:79:b8:
                    21:2f:ed:47:54:77:13:d2:ab:97:78:69:53:40:61:
                    73:97:05:04:57:11:51:3e:fc:f3:99:e2:de:d0:fa:
                    83:09:b0:6e:03:f5:00:6a:67:5e:af:16:66:13:e3:
                    c7:de:59:c6:2d:91:71:cd:9b:b2:99:c0:05:25:db:
                    2b:e9:f6:cd:75:fe:b0:b5:59:3f:88:36:18:19:30:
                    32:b5:25:b6:03:ce:d0:6e:7e:7b:62:2d:3a:d3:8f:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:08:F5:F1:18:B1:6E:6A:A5:DA:F0:14:C9:C0:CB:D1:6F:72:CB
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc40:8135::/64

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:e3:ec:23:0c:cb:cb:ec:6e:29:b8:78:00:af:ab:82:9c:
         3c:2d:a3:62:89:75:9d:18:bd:20:c0:af:bd:bf:f7:5b:bc:d2:
         bf:12:25:01:de:37:ff:50:03:ff:c7:21:94:64:83:2e:b0:e1:
         49:a9:f9:38:9b:d7:86:98:20:4e:6d:08:55:e5:5c:33:f9:12:
         5b:20:35:6e:be:ea:f9:14:26:3a:c6:8b:7d:e3:a9:ad:0d:37:
         46:51:ff:e3:56:2f:a3:fe:b4:a2:b4:ef:c8:31:80:b3:67:d8:
         76:68:10:d1:1d:8f:af:ad:32:81:5e:04:c4:f7:c5:b3:f2:f7:
         3a:98:c0:69:db:6e:f6:ab:f5:77:6b:34:e1:46:06:9e:3f:1c:
         d6:eb:21:59:74:06:ce:9e:f7:61:3a:e8:ac:65:ed:78:01:dd:
         e6:f5:03:2d:c3:1b:40:f4:03:d5:45:fb:a5:c8:b9:2f:96:4c:
         57:58:59:39:f1:eb:6d:f7:1c:3d:70:cd:1a:cc:e8:5a:37:7d:
         c9:22:5f:4b:16:ef:23:61:94:d0:c3:07:d8:a1:cb:f4:74:44:
         29:dc:d5:59:a3:6c:06:64:f7:67:46:3b:d4:1f:56:e9:83:e3:
         20:23:b3:63:58:ea:62:9b:19:e2:5d:89:3f:cd:85:22:0d:49:
         c5:96:e0:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 18 10:29:35 2025 by rpki-client