Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa
File:                     323830333a6236303a3a2f33322d3334203d3e20323639373937.roa (raw, json)
Hash identifier:          vg8gtoi+yYS21Z+y9lJLUAUsriwiv1Ec6O4eTKzfotE=
Subject key identifier:   C0:24:22:38:98:A5:4B:B6:70:6B:74:AC:A8:56:D4:3C:C5:68:47:32
Certificate issuer:       /CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
Certificate serial:       44204F1D9882E730EE784B31F2E4EC77F897C370
Authority key identifier: 0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa
Signing time:             Mon 08 Sep 2025 18:43:53 +0000
ROA not before:           Mon 08 Sep 2025 18:38:53 +0000
ROA not after:            Mon 07 Sep 2026 18:43:53 +0000
asID:                     269797
IP address blocks:        2803:b60::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 13:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:20:4f:1d:98:82:e7:30:ee:78:4b:31:f2:e4:ec:77:f8:97:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
        Validity
            Not Before: Sep  8 18:38:53 2025 GMT
            Not After : Sep  7 18:43:53 2026 GMT
        Subject: CN=C024223898A54BB6706B74ACA856D43CC5684732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:33:96:e1:76:bc:d2:e4:f4:53:01:cc:89:
                    56:a5:be:71:c1:39:b5:51:f4:aa:23:63:8f:1a:b6:
                    2a:4f:07:49:0f:82:d6:99:2e:b4:28:bb:9d:d7:1a:
                    ca:17:d1:82:6d:54:53:47:e6:7b:fe:c3:6d:41:7b:
                    e7:b9:07:b7:0b:6b:68:e7:f8:d2:a5:da:e8:57:63:
                    6c:7e:e8:11:e6:8e:4b:4a:41:d5:27:ff:8b:fd:60:
                    1e:67:e5:5c:c1:0f:ca:15:1b:d1:16:1c:97:e6:12:
                    a5:81:49:10:2f:23:bb:21:97:a4:78:e8:6b:49:4f:
                    9a:c0:ca:48:fe:6f:10:92:38:1d:3c:3a:c7:25:37:
                    c5:1c:85:79:61:5b:df:90:48:cf:c0:a7:d9:06:62:
                    d2:b3:e1:16:ea:d9:17:2e:75:4a:7c:bf:5b:6a:ae:
                    15:24:b0:ff:ca:d6:4e:14:cc:14:47:84:a7:12:55:
                    4e:c6:c3:19:fd:2d:a5:03:11:20:fc:06:a4:4f:7b:
                    50:82:08:fa:52:b8:a1:ed:dd:3f:85:d5:3e:87:87:
                    82:ee:6c:c4:48:d8:ba:0f:ba:cf:41:34:29:5a:ee:
                    02:6f:83:e0:fe:e4:41:ec:00:ff:2a:32:da:53:c9:
                    eb:84:e2:33:c4:00:1f:66:ed:25:0e:53:c4:8d:5d:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:22:38:98:A5:4B:B6:70:6B:74:AC:A8:56:D4:3C:C5:68:47:32
            X509v3 Authority Key Identifier:
                keyid:0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:94:ca:0a:81:99:75:3c:52:c5:bd:2d:4d:5e:b3:a5:80:20:
         73:07:42:5b:20:02:f0:c3:db:24:e5:6f:be:3f:f0:80:7d:30:
         a8:85:d9:8b:b6:13:4f:61:8e:ca:c3:09:00:89:32:5e:fb:24:
         2b:8d:d9:7b:6b:ad:39:9a:4c:ca:f9:e0:54:26:b4:07:6e:1e:
         36:23:c2:59:83:42:df:8e:6f:2f:fa:be:21:83:6a:79:8f:16:
         7a:c2:6c:93:18:eb:59:4d:51:e3:29:d6:e9:c1:3e:e6:fc:da:
         1f:63:9a:03:48:9a:3e:38:ac:ad:f8:1a:0d:f9:3f:45:00:11:
         bc:38:0f:19:32:f0:7f:9d:ca:0f:42:02:26:72:96:d8:04:7e:
         95:9c:97:d5:d2:45:74:2b:17:7e:c9:c4:16:39:f2:5f:4c:79:
         c5:36:17:33:41:d2:97:e4:f4:8e:a2:25:06:ba:c9:e2:e8:16:
         86:bf:83:d8:9b:7c:c0:ce:39:e4:6c:18:cd:c4:21:5a:6c:73:
         cc:40:72:fe:ab:7d:f2:48:9c:a9:3b:43:39:73:af:b2:55:a0:
         28:49:fa:29:6e:0a:e4:9a:fd:5d:61:70:ab:d9:ac:27:77:5f:
         d2:d8:eb:b0:51:91:64:1f:93:1a:b3:9e:d3:1c:19:41:ec:a4:
         12:7d:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:40:26 2025 by rpki-client