Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/323830333a666264303a3a2f33322d3438203d3e20323734313933.roa
File:                     323830333a666264303a3a2f33322d3438203d3e20323734313933.roa (raw, json)
Hash identifier:          Hn3GwM3IALeGQVprVT8GuIFACWuwXSRqI3EWdc97zaE=
Subject key identifier:   E3:5E:75:97:05:43:6C:9C:84:1E:F9:7D:16:90:65:D5:A2:72:89:8E
Certificate issuer:       /CN=C03F05F393224EE55367EA37DA3E0EA89C83F44A
Certificate serial:       4FDCDA5AB80A2D660B1AA9EE0C685C9AB6D64762
Authority key identifier: C0:3F:05:F3:93:22:4E:E5:53:67:EA:37:DA:3E:0E:A8:9C:83:F4:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/323830333a666264303a3a2f33322d3438203d3e20323734313933.roa
Signing time:             Fri 24 Oct 2025 18:35:00 +0000
ROA not before:           Fri 24 Oct 2025 18:30:00 +0000
ROA not after:            Fri 23 Oct 2026 18:35:00 +0000
asID:                     274193
IP address blocks:        2803:fbd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dc:da:5a:b8:0a:2d:66:0b:1a:a9:ee:0c:68:5c:9a:b6:d6:47:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C03F05F393224EE55367EA37DA3E0EA89C83F44A
        Validity
            Not Before: Oct 24 18:30:00 2025 GMT
            Not After : Oct 23 18:35:00 2026 GMT
        Subject: CN=E35E759705436C9C841EF97D169065D5A272898E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:a8:9e:d9:4d:4f:23:91:f8:1e:f5:00:6a:
                    65:97:14:15:ae:73:15:2a:b1:ea:be:7a:bb:7e:ef:
                    f8:fc:a4:81:19:f2:f3:b8:6c:07:f9:47:90:2d:9b:
                    e6:56:4b:2b:31:ae:19:1f:0d:f1:96:ba:eb:d9:a2:
                    1b:e8:ea:66:92:01:07:c1:4f:86:dc:8f:19:ba:fd:
                    89:dd:40:33:a1:5f:4f:a8:34:77:c4:5b:c6:3e:dd:
                    bb:d5:11:48:95:e0:22:02:19:c1:ab:f3:52:b0:0f:
                    51:83:c5:72:25:74:3d:77:55:23:2f:61:36:3e:de:
                    58:46:90:dd:38:e1:89:15:45:19:38:06:be:4b:42:
                    39:e7:53:45:cf:47:ab:82:03:97:56:4b:cd:af:79:
                    12:57:b3:80:89:5b:94:65:71:16:75:0f:8e:34:3d:
                    33:95:7e:dc:95:a5:a1:36:f5:1f:ad:a2:ae:ec:1f:
                    63:36:b5:20:89:1a:61:cf:17:93:3d:ae:bc:5a:4b:
                    a3:c9:28:b7:48:28:15:d2:80:9d:a8:02:d9:9e:30:
                    fd:b9:8a:32:ad:02:ab:31:63:dd:9d:19:db:38:3a:
                    92:60:f2:f4:3f:64:fd:ce:db:4d:e6:b7:a0:7c:42:
                    7b:02:51:fd:04:99:3e:3d:b9:12:c5:5e:b9:e6:fb:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:75:97:05:43:6C:9C:84:1E:F9:7D:16:90:65:D5:A2:72:89:8E
            X509v3 Authority Key Identifier:
                keyid:C0:3F:05:F3:93:22:4E:E5:53:67:EA:37:DA:3E:0E:A8:9C:83:F4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/323830333a666264303a3a2f33322d3438203d3e20323734313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fbd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:cc:9d:a5:52:eb:00:3a:c4:5a:a1:61:e4:20:ee:53:5c:
         82:5c:f0:b0:37:d6:da:b0:04:c6:33:0b:8a:35:ea:86:4e:f2:
         a3:f0:03:5e:45:81:34:66:5d:eb:84:89:6b:82:96:33:69:29:
         2d:20:55:c0:e5:8a:e7:9b:f6:40:f9:93:07:bd:09:f8:e9:2a:
         77:33:05:5e:89:a8:1e:30:0f:f2:e1:82:dd:8d:14:87:47:20:
         8b:60:cb:dd:09:2f:ad:80:12:b6:cc:5c:12:8d:35:bb:7b:75:
         d0:07:6c:21:0b:f6:bc:cb:e1:86:cc:cc:74:6d:c7:3c:f4:ca:
         bf:17:2d:b5:2a:a1:12:66:b8:59:bf:dd:87:c9:72:09:4d:4a:
         37:b6:d0:f0:c9:8a:f3:96:50:64:71:33:93:5d:7e:d4:67:a0:
         06:ef:42:fc:1a:91:12:64:a5:67:32:a0:fb:4c:b1:8a:d4:88:
         bb:f3:16:2a:07:4f:89:b4:8d:24:31:48:4f:c7:af:2e:65:ba:
         29:de:89:39:94:31:45:a1:bd:84:27:41:f9:49:c0:de:4d:fa:
         4a:57:2d:60:45:b6:70:52:fc:1c:de:90:f0:2b:2d:22:92:cd:
         62:8c:ba:25:65:43:f0:fe:ec:04:cf:46:ba:de:34:88:99:ab:
         89:0b:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:27 2025 by rpki-client