Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/323830333a643135303a3a2f33322d3438203d3e20323733383236.roa
File:                     323830333a643135303a3a2f33322d3438203d3e20323733383236.roa (raw, json)
Hash identifier:          GuWc4BVX9ShttCd/v4h931RbjSbhVJOJIwrodbm55Ew=
Subject key identifier:   DF:5B:A3:A5:5F:90:1C:E1:DD:2D:A2:91:FB:AA:8D:09:7B:7A:26:84
Certificate issuer:       /CN=C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE
Certificate serial:       4BFD8EA50F1EBCB05BB1517E939C733CEB91CD74
Authority key identifier: C5:AD:C6:88:41:2E:A1:04:3B:CC:91:74:E3:54:CE:7B:CE:AE:2F:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/323830333a643135303a3a2f33322d3438203d3e20323733383236.roa
Signing time:             Tue 08 Jul 2025 02:24:45 +0000
ROA not before:           Tue 08 Jul 2025 02:19:45 +0000
ROA not after:            Tue 07 Jul 2026 02:24:45 +0000
asID:                     273826
IP address blocks:        2803:d150::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 11:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fd:8e:a5:0f:1e:bc:b0:5b:b1:51:7e:93:9c:73:3c:eb:91:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE
        Validity
            Not Before: Jul  8 02:19:45 2025 GMT
            Not After : Jul  7 02:24:45 2026 GMT
        Subject: CN=DF5BA3A55F901CE1DD2DA291FBAA8D097B7A2684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:f8:1d:c6:60:e7:d9:03:0a:f5:3f:1f:f9:
                    f5:7d:5f:e3:6b:e5:c1:5d:c0:5e:0e:0f:06:7e:77:
                    ef:62:60:85:2f:60:50:7a:ad:d6:e4:c4:66:24:cc:
                    52:be:93:90:2b:b4:4a:76:68:7d:3c:27:01:5a:28:
                    6c:dd:4e:2d:65:05:c5:35:69:35:ab:a5:8a:73:9a:
                    e1:ed:96:2b:ec:38:14:66:5c:1f:ad:fd:ef:a0:01:
                    c6:b6:39:5d:99:d3:2b:6b:f8:89:a4:8d:43:04:44:
                    47:ec:da:d9:bc:68:b8:fa:e5:0f:19:aa:b5:54:8f:
                    7a:c6:a5:cb:b1:7a:3f:c8:b7:0b:3a:96:cb:71:39:
                    1d:82:0a:8b:fc:bd:a3:f4:eb:60:96:0d:ce:b8:91:
                    da:c3:f2:00:1c:3e:b4:8d:06:a0:6d:01:c5:5d:e5:
                    56:20:b8:bd:3a:4b:97:ab:25:01:84:c6:40:a0:07:
                    64:19:15:99:e0:7b:82:f6:39:a0:3d:4f:13:fb:18:
                    20:1f:36:06:87:15:ec:21:ba:28:9c:20:c3:ac:c0:
                    72:8a:2d:22:06:c2:48:55:4a:63:7b:ba:e4:bb:f5:
                    55:92:8f:1b:72:7c:6f:77:85:61:91:4a:25:3b:58:
                    29:17:77:47:73:0c:57:1f:f7:d0:7f:7c:ff:3b:63:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:A3:A5:5F:90:1C:E1:DD:2D:A2:91:FB:AA:8D:09:7B:7A:26:84
            X509v3 Authority Key Identifier:
                keyid:C5:AD:C6:88:41:2E:A1:04:3B:CC:91:74:E3:54:CE:7B:CE:AE:2F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/323830333a643135303a3a2f33322d3438203d3e20323733383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d150::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:35:42:a9:40:86:de:8c:3b:d7:76:d5:1f:8f:6a:09:7c:b7:
         b0:58:cb:67:e1:30:a3:64:98:52:b2:3b:1c:2a:6a:61:16:ae:
         dd:92:78:32:d2:2d:4a:a4:d2:fc:5a:02:5c:e1:42:9e:79:fa:
         88:75:ad:7a:cc:0d:9f:68:95:ba:55:1f:80:c1:0b:00:ee:58:
         8a:97:cf:22:7e:a8:8b:7d:3a:5b:44:03:0d:66:00:5f:a4:e1:
         2a:11:be:f1:51:bd:2b:13:d6:b1:65:6f:c7:69:33:91:53:b4:
         82:fd:1b:05:86:45:ce:25:b2:a5:c5:30:ab:f2:30:b8:a5:9e:
         1a:24:8c:13:1c:25:63:0c:e5:70:05:ac:61:4e:ee:77:d5:6c:
         55:dd:4f:c3:f9:34:04:83:ba:f7:75:55:4f:9b:a8:e6:d7:d3:
         16:59:0b:24:fe:cb:a0:4f:cc:97:b3:d2:01:d7:c7:55:e8:38:
         26:f0:d9:33:ce:77:7f:ab:22:d3:62:87:fa:39:06:0d:ac:cd:
         5e:b6:17:eb:03:af:c8:73:45:d1:7f:4d:d5:dc:dd:37:21:f0:
         ec:aa:24:d5:44:e7:e2:7e:45:d4:1f:44:08:18:e2:5e:0f:47:
         49:21:8f:e9:c9:6e:5c:f8:5f:62:65:1f:6b:a6:7c:84:4c:fa:
         70:c1:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:21:25 2025 by rpki-client