Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a343a3a2f34382d3438203d3e20323733313538.roa
File:                     323830333a633235303a343a3a2f34382d3438203d3e20323733313538.roa (raw, json)
Hash identifier:          Yupalib8T5bgo5HdrktD4iIbNOmdEyUb9JH/TTgB1MA=
Subject key identifier:   A9:B6:C9:EC:80:AF:91:2E:37:62:A4:FB:03:0B:B9:CB:28:24:DA:78
Certificate issuer:       /CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
Certificate serial:       4ECD3753463FB76973B3144E735C49FA7E664684
Authority key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a343a3a2f34382d3438203d3e20323733313538.roa
Signing time:             Fri 04 Jul 2025 17:40:01 +0000
ROA not before:           Fri 04 Jul 2025 17:35:01 +0000
ROA not after:            Fri 03 Jul 2026 17:40:01 +0000
asID:                     273158
IP address blocks:        2803:c250:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 20:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:37:53:46:3f:b7:69:73:b3:14:4e:73:5c:49:fa:7e:66:46:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
        Validity
            Not Before: Jul  4 17:35:01 2025 GMT
            Not After : Jul  3 17:40:01 2026 GMT
        Subject: CN=A9B6C9EC80AF912E3762A4FB030BB9CB2824DA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:10:45:ac:bb:0f:eb:50:63:94:47:80:99:
                    9d:da:37:9f:8e:2f:75:0e:55:f0:7c:e8:39:c2:58:
                    73:5f:60:41:82:3c:46:44:68:a3:83:35:e7:2d:96:
                    fe:eb:0c:42:27:a0:d7:bd:f9:25:9e:f3:b5:67:8a:
                    81:ac:a9:29:82:a1:40:fb:19:5a:72:a2:99:b7:1a:
                    5a:5d:b1:66:54:9f:82:80:f3:ef:63:29:96:c3:9f:
                    18:96:50:2a:c7:af:2e:c3:21:a7:47:ae:c9:2a:6e:
                    92:4b:8f:85:2d:16:9b:de:6c:79:12:48:f1:f3:fb:
                    32:65:d7:e6:77:bf:a2:35:1c:5b:5b:69:47:5b:fe:
                    97:ea:8b:b4:be:85:e6:d8:72:52:04:54:55:63:6e:
                    d1:a3:27:4e:74:e5:dc:88:32:82:19:6f:4a:34:71:
                    58:c7:a4:1f:d3:25:e8:1b:9b:eb:73:44:9b:91:aa:
                    3c:6b:48:8a:0f:fd:86:fe:5b:4f:cb:9b:ff:e0:ab:
                    9a:26:7c:79:d4:2a:22:56:79:05:94:24:4d:1f:35:
                    aa:e6:3f:19:e0:43:16:20:dd:b0:e0:93:df:9f:fb:
                    88:ce:d9:90:bd:d4:ca:e6:14:59:6e:dd:df:d2:86:
                    97:9b:31:25:f7:22:27:e6:f0:c8:5d:6d:76:d6:21:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:C9:EC:80:AF:91:2E:37:62:A4:FB:03:0B:B9:CB:28:24:DA:78
            X509v3 Authority Key Identifier:
                keyid:D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a343a3a2f34382d3438203d3e20323733313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:55:ab:cf:b4:ed:e0:12:1f:4e:37:d1:8b:4c:70:5e:d7:04:
         07:08:7a:43:1b:05:bc:1b:be:89:9b:cc:9c:2d:97:61:f1:d5:
         01:57:06:0f:5c:7a:83:a7:93:51:b9:e9:4e:83:4b:0b:1f:d3:
         41:74:51:41:c2:a6:a9:98:88:8e:b1:fc:64:d7:47:61:dc:69:
         0e:5b:32:18:07:d4:4e:e6:dd:f9:e2:e7:a4:1e:39:fe:ac:ae:
         7c:ef:1c:c1:1f:30:97:35:d3:9f:74:66:52:0d:23:ce:62:86:
         64:33:fd:50:dc:93:9a:50:3a:b3:ad:1b:41:3b:3a:8d:b9:06:
         9d:cf:87:af:c3:46:f0:98:ae:e9:f2:39:6c:b6:8c:84:24:13:
         bb:0e:92:9d:1c:73:d8:02:69:ab:3b:6e:d2:77:d6:bc:13:3f:
         5b:79:92:b9:db:2b:33:ab:89:86:2e:65:3a:17:22:26:2b:57:
         73:fb:53:93:05:b1:7c:8f:e7:a8:6f:82:fb:e0:b8:de:29:da:
         7d:35:a4:70:63:b2:1a:af:3b:50:e8:be:c9:27:61:57:db:56:
         2d:d8:29:8f:a1:b6:c3:2f:8f:23:f2:d2:b0:38:eb:1e:b0:2d:
         32:ee:28:fe:73:74:64:8a:2a:e2:09:93:c4:66:d2:36:bf:92:
         56:16:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 18:21:38 2025 by rpki-client