Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          XdZcq4m1MD5k0BVoW+3wBEA+mTJSRfVeNpi/fpNj8jc=
Subject key identifier:   19:F3:C7:F8:46:32:63:27:77:A2:77:C4:D1:BC:AE:5C:8A:23:47:1F
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       592314AEFC4C06CF071A3A88EBD1BB60A9925982
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 10 Sep 2025 15:44:21 +0000
ROA not before:           Wed 10 Sep 2025 15:39:21 +0000
ROA not after:            Wed 09 Sep 2026 15:44:21 +0000
asID:                     273920
IP address blocks:        2803:7b50:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:23:14:ae:fc:4c:06:cf:07:1a:3a:88:eb:d1:bb:60:a9:92:59:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Sep 10 15:39:21 2025 GMT
            Not After : Sep  9 15:44:21 2026 GMT
        Subject: CN=19F3C7F84632632777A277C4D1BCAE5C8A23471F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9f:ba:bd:21:70:3b:b2:a9:e1:c5:43:e3:59:
                    07:1c:e9:30:0d:af:0b:81:52:2e:90:e7:a2:d9:c5:
                    0c:b9:be:44:19:30:5e:97:d6:1c:d5:18:49:ba:c5:
                    7b:07:10:16:85:da:84:f6:02:ca:d7:98:69:f1:37:
                    c2:1d:63:82:59:55:3c:16:88:1c:0c:35:98:b6:c2:
                    39:18:af:ef:55:fe:d2:a9:17:6c:44:b5:af:fa:b7:
                    cc:d6:8d:72:f7:70:bc:e6:0c:76:a5:fc:df:06:2f:
                    30:0f:cc:bd:82:2c:b7:1c:34:4a:e2:02:d6:0a:98:
                    f5:bc:d6:a5:8e:d6:4c:4e:f2:60:fc:46:eb:8d:54:
                    ae:d3:76:9d:d1:a0:5a:41:0c:4d:b2:46:85:42:5d:
                    cd:13:4d:54:16:be:0e:03:c5:2e:d2:82:ee:a8:2e:
                    b3:d7:68:d2:6d:c3:6a:e4:4b:9d:69:5d:2d:dc:ad:
                    3d:8a:60:cc:0f:1d:0a:4f:41:ca:fc:cf:31:04:44:
                    52:83:e6:02:ee:9e:35:6b:59:1a:54:ce:26:29:e1:
                    4d:d2:db:30:9b:74:7a:32:31:e5:9c:49:62:07:cd:
                    df:60:5d:6f:3a:14:ca:3b:e2:18:fb:57:8e:b4:87:
                    60:5f:7d:81:49:43:89:7f:8c:5b:8d:75:07:40:4a:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:C7:F8:46:32:63:27:77:A2:77:C4:D1:BC:AE:5C:8A:23:47:1F
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:72:b1:01:bb:12:71:34:ee:a9:c8:e5:15:80:e4:7d:e0:
         6e:b0:be:4f:aa:b3:9f:9a:0f:a3:bd:97:86:58:9f:45:b4:bc:
         80:43:27:94:bc:c6:ef:4e:ce:92:ee:36:b4:26:cc:3c:a4:8d:
         ec:03:89:90:19:c4:65:1f:1b:25:65:38:25:cf:55:96:a6:d1:
         39:07:09:5b:06:e3:8e:b0:36:70:46:af:e0:00:33:4d:82:36:
         c0:1e:22:ef:f2:ff:3f:cc:15:7c:35:24:f9:f2:2a:56:dd:61:
         47:52:87:37:dd:9c:25:d7:36:24:07:e9:1e:0c:a2:9f:42:55:
         09:9b:08:8e:12:df:6d:ff:5b:1c:70:53:29:67:64:bb:15:4a:
         77:31:08:b5:eb:f8:36:85:65:e8:94:2a:5c:0a:e1:af:ef:43:
         8f:20:91:24:a1:ee:6d:df:d5:6c:df:7d:09:03:0d:2e:a7:72:
         ac:79:97:3e:a3:36:4d:77:62:2a:8e:18:19:75:07:84:55:2f:
         20:2a:b1:35:16:49:eb:6d:ce:64:84:76:99:5a:bb:37:a9:a7:
         8b:ff:ba:a1:ff:c0:c0:b1:dc:cb:56:9e:92:4a:58:17:36:a1:
         b4:01:13:c3:44:d0:bd:4b:80:8a:54:ab:a2:01:63:38:fe:4b:
         35:6d:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:21:38 2025 by rpki-client