Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa
File:                     323830333a6636303a3a2f33322d3438203d3e20323639383332.roa (raw, json)
Hash identifier:          Q+UAdup/BXiAk5+yw/wNHpwPWlh7y1sA8X90s2teG08=
Subject key identifier:   8C:14:7D:01:6E:92:D6:89:05:75:5E:37:C7:6F:F5:7A:0A:1A:13:84
Certificate issuer:       /CN=63AD082E201FA5D0985FD46C9DB7E461184583F4
Certificate serial:       41057867ED5E6481CF0011073AE01DE51A5B2FF1
Authority key identifier: 63:AD:08:2E:20:1F:A5:D0:98:5F:D4:6C:9D:B7:E4:61:18:45:83:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa
Signing time:             Thu 17 Jul 2025 15:25:47 +0000
ROA not before:           Thu 17 Jul 2025 15:20:47 +0000
ROA not after:            Thu 16 Jul 2026 15:25:47 +0000
asID:                     269832
IP address blocks:        2803:f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:78:67:ed:5e:64:81:cf:00:11:07:3a:e0:1d:e5:1a:5b:2f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63AD082E201FA5D0985FD46C9DB7E461184583F4
        Validity
            Not Before: Jul 17 15:20:47 2025 GMT
            Not After : Jul 16 15:25:47 2026 GMT
        Subject: CN=8C147D016E92D68905755E37C76FF57A0A1A1384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:8f:e8:1b:3c:8b:38:73:8b:ae:d5:96:34:
                    f7:f8:6f:77:f9:c6:ea:02:14:a1:1c:27:86:90:4f:
                    69:b7:5b:e1:56:cc:74:4e:37:21:4e:fb:0b:d6:83:
                    02:76:f9:b9:41:d1:40:54:05:e5:1e:70:c1:99:04:
                    5f:b1:29:1f:d7:5d:63:aa:84:73:24:a3:a7:69:66:
                    19:20:8e:6c:13:04:44:03:4a:9b:93:b3:a7:f6:17:
                    5f:b0:78:fa:22:72:d8:4a:d5:72:69:63:7b:cc:9b:
                    ce:7f:63:8b:1b:06:89:0a:c5:95:f7:9e:fd:b8:30:
                    f6:fe:29:50:ae:4b:09:55:c8:76:0c:f1:74:90:3d:
                    af:a1:0c:c4:39:a4:a8:3b:9f:95:b2:6e:9a:4d:75:
                    ab:00:12:09:df:55:7f:73:b0:b8:3c:bb:d8:a6:40:
                    8d:4d:ce:65:48:16:e1:33:65:a9:2a:18:ef:42:45:
                    e7:7a:03:be:e2:b9:ff:76:61:74:22:ec:b5:bd:02:
                    65:27:79:93:15:5e:2c:8d:3a:9e:47:1a:e4:79:b7:
                    32:78:86:6e:76:1e:ad:61:86:cc:f1:22:c9:65:85:
                    fc:fe:53:73:d5:cb:49:cc:0a:d3:90:f6:fa:f4:80:
                    ae:37:c2:79:f7:36:28:3e:0b:1b:52:36:bc:39:a9:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:7D:01:6E:92:D6:89:05:75:5E:37:C7:6F:F5:7A:0A:1A:13:84
            X509v3 Authority Key Identifier:
                keyid:63:AD:08:2E:20:1F:A5:D0:98:5F:D4:6C:9D:B7:E4:61:18:45:83:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63AD082E201FA5D0985FD46C9DB7E461184583F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33322d3438203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:2a:6a:0c:c3:71:57:ae:09:fa:60:8a:4b:44:f1:23:7a:
         b0:2e:cb:c5:22:1f:26:f2:91:55:eb:a7:ef:08:86:19:36:72:
         c4:52:07:8f:1d:c3:4e:45:27:cb:7f:63:26:c4:a3:87:a4:a3:
         12:ad:ea:41:6c:2c:d7:f6:56:72:fe:35:9d:bb:33:8a:6f:9f:
         e8:8f:d3:da:22:25:a8:e2:c2:63:10:0c:ca:17:de:66:50:64:
         b5:3e:98:8b:7d:55:5f:61:ea:43:78:00:94:63:76:9c:3a:09:
         8a:17:1c:da:ee:43:3c:26:72:d7:20:0f:c1:31:1f:e9:b0:41:
         0e:b4:ee:e9:95:d5:15:5f:0c:30:44:7b:6e:2e:49:5e:51:17:
         f0:dd:91:6c:4b:c8:0c:ca:83:f9:ff:ed:5a:ed:df:62:a2:d5:
         4a:67:86:c7:ea:47:17:37:60:6d:a4:39:17:a9:48:ac:de:8a:
         1d:0f:5a:82:0e:32:1f:96:1d:3d:f6:f1:69:34:d9:4d:1d:35:
         c6:01:f2:9e:fd:9c:8d:ed:59:98:5d:85:98:ce:9e:2e:75:6a:
         c6:76:aa:9b:75:64:09:ce:a6:b1:14:c7:b5:e0:f9:74:78:c5:
         c4:93:06:45:5e:5a:90:77:37:0a:7a:80:1d:81:a7:0e:b8:dc:
         60:7a:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:42:40 2025 by rpki-client