Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a313a3a2f34382d3438203d3e20323733313538.roa
File:                     323830333a633235303a313a3a2f34382d3438203d3e20323733313538.roa (raw, json)
Hash identifier:          dk1kUrJ4QPp8J226zKD2ixxunAti+gmuXILMURdW/IE=
Subject key identifier:   67:10:18:5A:32:1D:01:6B:E1:C3:04:E9:83:49:D2:C3:36:89:BF:FA
Certificate issuer:       /CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
Certificate serial:       67106BE5F4D9A490ECC972169FFF45A000A09DBE
Authority key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a313a3a2f34382d3438203d3e20323733313538.roa
Signing time:             Fri 04 Jul 2025 17:40:00 +0000
ROA not before:           Fri 04 Jul 2025 17:35:00 +0000
ROA not after:            Fri 03 Jul 2026 17:40:00 +0000
asID:                     273158
IP address blocks:        2803:c250:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 20:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:6b:e5:f4:d9:a4:90:ec:c9:72:16:9f:ff:45:a0:00:a0:9d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
        Validity
            Not Before: Jul  4 17:35:00 2025 GMT
            Not After : Jul  3 17:40:00 2026 GMT
        Subject: CN=6710185A321D016BE1C304E98349D2C33689BFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:a5:7f:28:f2:09:6a:d1:12:6a:2d:36:5a:
                    4b:49:6f:bd:2d:44:48:80:5e:6f:e0:3d:8b:28:56:
                    37:25:8a:6c:f3:64:0d:dc:98:75:8d:f0:ff:0b:fa:
                    62:1a:6d:01:ea:ac:d8:af:0d:ef:a5:e1:cc:71:0a:
                    7f:96:42:5b:d5:09:c7:15:d2:47:f9:34:27:4e:8e:
                    1b:25:d2:aa:91:cb:41:cf:01:a1:a0:23:d3:a8:c4:
                    a8:9a:c9:a6:2e:52:46:1a:c1:64:14:c0:02:18:0c:
                    fb:3f:d4:33:23:c1:ad:8b:66:38:34:7b:53:df:81:
                    23:79:21:13:53:cd:0b:75:de:6c:16:ea:a3:72:77:
                    eb:c3:4a:7b:ba:ad:42:70:82:f4:2a:22:ff:97:61:
                    3a:82:54:48:45:fe:b6:67:43:5c:d7:35:c2:86:d1:
                    2a:ec:c3:c1:18:05:46:c0:97:8e:31:35:77:a3:9b:
                    c1:80:87:6d:92:54:03:a5:ed:7d:74:65:8b:8a:62:
                    b8:5f:30:bf:b9:1b:33:1c:cc:77:c3:7f:8e:6d:a6:
                    ae:54:69:40:01:f6:f7:f5:5a:76:85:61:9c:f1:fd:
                    79:78:84:88:fc:a5:82:7b:c1:a7:1d:e3:28:5b:4f:
                    ad:b5:7a:ad:01:f6:33:9b:9d:63:90:d6:2f:93:93:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:10:18:5A:32:1D:01:6B:E1:C3:04:E9:83:49:D2:C3:36:89:BF:FA
            X509v3 Authority Key Identifier:
                keyid:D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a313a3a2f34382d3438203d3e20323733313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:15:cd:b1:15:c1:c2:41:ff:26:4a:be:ca:47:ee:42:ac:8f:
         b7:70:1e:90:fa:7a:fa:69:9a:b4:d3:f2:32:1f:af:b8:67:08:
         7a:d8:da:d6:b5:24:e2:d3:3b:93:0e:7c:d8:31:32:16:d0:bf:
         b8:f3:db:7a:72:3b:95:8d:ec:79:a6:dc:e7:10:3c:ab:7b:61:
         c0:42:f1:3d:4c:28:af:b2:1b:7b:c8:78:59:98:ed:8a:00:3c:
         64:11:b9:f3:77:d2:00:f5:51:b4:ac:c7:fe:bf:1b:da:6a:a6:
         23:89:11:61:84:81:6c:7f:25:dd:de:12:ed:cd:e4:73:5f:9f:
         46:6f:52:b6:6e:7c:05:4d:ee:0a:1a:2a:70:c9:b2:b7:da:60:
         d9:5f:19:fb:95:19:46:6e:f5:ae:95:8a:a1:eb:c4:e5:96:b0:
         14:19:05:34:f7:1e:da:bc:12:1e:da:f5:7e:26:04:80:13:a1:
         51:34:93:0a:5d:84:6e:9e:3b:77:2d:49:e1:ed:4d:2c:89:68:
         df:cd:9c:cb:8f:cc:8d:98:d4:35:e0:d4:bd:fa:4c:dc:f4:58:
         07:9d:40:42:b7:3e:3f:49:e3:dc:69:cf:d0:f9:ee:20:73:37:
         14:52:ff:8a:f4:c4:d5:d0:86:69:92:72:4f:38:29:33:14:32:
         b4:99:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 18:19:55 2025 by rpki-client