Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/323830333a366630303a3a2f33322d3438203d3e203134313137.roa
File:                     323830333a366630303a3a2f33322d3438203d3e203134313137.roa (raw, json)
Hash identifier:          Kxy0czvsHMYfPXBdS3GQ3EIuFEqLDGLJ7f9jS4beBqI=
Subject key identifier:   92:B4:DE:91:0B:4F:61:32:44:4B:B4:F1:7F:E1:B1:10:C1:DC:9F:54
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       725FA7AC69CDFD044B983AA1D0FA3B6F312CA4A4
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/323830333a366630303a3a2f33322d3438203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:00 +0000
ROA not before:           Tue 01 Jul 2025 19:10:00 +0000
ROA not after:            Tue 30 Jun 2026 19:15:00 +0000
asID:                     14117
IP address blocks:        2803:6f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5f:a7:ac:69:cd:fd:04:4b:98:3a:a1:d0:fa:3b:6f:31:2c:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:00 2025 GMT
            Not After : Jun 30 19:15:00 2026 GMT
        Subject: CN=92B4DE910B4F6132444BB4F17FE1B110C1DC9F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:8a:4c:4c:b8:34:1e:23:ac:4b:2d:46:e6:
                    e5:0a:c3:68:65:64:ff:22:28:7b:5b:16:71:d8:05:
                    bc:40:28:10:2f:15:7c:f7:2b:c3:b3:98:70:cd:7d:
                    86:95:73:ca:18:be:e0:96:04:bd:fe:9b:fb:10:86:
                    b6:29:5f:49:63:7a:03:3b:92:36:39:6e:7c:53:4a:
                    8b:10:04:ae:2f:76:5f:92:87:61:92:31:cc:b9:05:
                    72:27:00:8d:64:f2:f6:f0:ab:b1:61:c9:ea:24:cf:
                    95:e4:77:a4:a3:e8:45:2d:97:b6:52:37:70:fc:ae:
                    6d:ad:19:d0:d1:7a:bb:47:04:d3:54:4c:1c:a9:68:
                    27:90:87:28:f2:7b:e2:18:9b:2a:28:6f:4a:f2:13:
                    9f:c0:41:e5:2c:de:52:87:12:af:11:b9:35:d5:71:
                    1a:e3:97:b1:c2:55:2e:a2:9f:6e:16:81:6c:bf:7e:
                    be:3c:de:38:2e:7a:69:fb:1d:bb:83:4a:55:17:cb:
                    8d:a7:9a:50:0f:96:6b:97:98:3a:22:f0:a9:e9:ba:
                    2d:42:03:aa:b4:71:33:ba:23:17:d7:ee:61:90:d0:
                    c9:d3:76:aa:50:36:35:7f:e1:79:ac:39:71:1f:47:
                    2d:45:db:47:69:b0:e1:18:5d:40:7c:31:e3:51:99:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:DE:91:0B:4F:61:32:44:4B:B4:F1:7F:E1:B1:10:C1:DC:9F:54
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/323830333a366630303a3a2f33322d3438203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:20:eb:32:5c:94:f6:3f:48:d4:a4:8f:0c:a3:43:37:1b:14:
         28:1d:76:b1:43:c0:5b:66:b2:69:7a:e1:ae:4f:0f:fc:c2:aa:
         b5:8b:6e:8e:d3:ee:aa:54:05:48:79:a7:ad:02:1f:a3:82:8e:
         5f:d8:3d:59:ae:92:a4:a6:95:6c:34:01:82:85:a4:f9:2a:0f:
         3e:ea:cf:e0:92:9e:3f:04:4e:97:2d:b9:68:4b:90:2a:f3:c6:
         ae:28:41:21:17:cf:1b:63:a4:2c:ff:34:00:7d:6a:b3:9d:7a:
         64:c9:13:90:04:27:d4:1b:10:93:80:86:19:75:9f:10:66:dd:
         e1:96:62:30:be:e4:81:c3:97:9b:f2:be:23:04:16:07:37:ed:
         f9:b5:83:c7:27:74:49:d5:a4:05:5b:80:11:a0:2f:74:f5:c4:
         c4:4c:46:af:9f:97:f9:94:13:51:e6:a7:25:d4:e4:44:09:18:
         2e:60:b7:8e:7d:f5:12:da:f5:33:7d:f4:3b:08:b3:eb:dd:f7:
         0b:41:39:4b:2f:ca:13:a2:97:dc:9e:5e:57:15:52:ad:1f:4c:
         7e:08:ef:91:fc:fe:66:0f:97:cd:95:fc:28:5e:1f:61:f3:00:
         48:d5:53:a8:0a:24:e7:55:3c:60:13:a1:75:81:75:67:22:65:
         85:dc:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:08 2025 by rpki-client