Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          nByyzD2SJcPh8hXeHVaEHBSKjSawS9j/uj/NFSPT/Lk=
Subject key identifier:   56:EC:A3:BC:0A:24:49:B1:59:61:27:8E:85:B5:67:72:85:D8:A7:BC
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       22C389790C60E9AA670795B3282D8143EEF1C768
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 10 Sep 2025 15:44:20 +0000
ROA not before:           Wed 10 Sep 2025 15:39:20 +0000
ROA not after:            Wed 09 Sep 2026 15:44:20 +0000
asID:                     273920
IP address blocks:        2803:7b50:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:89:79:0c:60:e9:aa:67:07:95:b3:28:2d:81:43:ee:f1:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Sep 10 15:39:20 2025 GMT
            Not After : Sep  9 15:44:20 2026 GMT
        Subject: CN=56ECA3BC0A2449B15961278E85B5677285D8A7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:5a:bb:1c:be:f7:26:2e:32:bb:55:ff:70:
                    ea:2f:10:18:12:8b:84:23:3b:e3:10:5e:fc:42:35:
                    98:f3:6b:9e:d3:af:32:6a:d1:c5:bc:af:ce:b0:b4:
                    ff:dc:82:92:1a:b4:d4:b1:e5:af:7c:c4:f1:b4:fd:
                    91:e4:e3:87:d0:7c:65:77:04:95:76:87:ba:ae:62:
                    8d:a3:af:c4:cd:ff:a3:fb:39:1e:c8:39:eb:71:a5:
                    4d:10:f2:8a:ec:bd:b0:85:c0:03:ba:0b:b4:9f:52:
                    ab:25:90:26:e9:a6:65:f0:69:cb:02:be:b4:28:0a:
                    75:38:e9:f6:e5:91:a7:78:27:ef:8e:68:1f:be:71:
                    5c:25:6d:cc:8e:37:7a:e7:7e:5b:39:4e:53:07:b2:
                    f5:4a:d2:f2:85:08:2b:41:78:97:4f:e7:91:52:f2:
                    bc:5e:21:22:72:2a:62:6b:53:84:a3:fc:30:d2:38:
                    94:27:41:ff:b2:c1:13:dc:a0:d4:ab:07:99:e7:67:
                    7a:f8:ed:68:33:15:e2:82:91:f1:97:2d:a5:79:c0:
                    68:ac:76:b3:20:c9:2f:5e:bf:67:67:8f:65:92:a7:
                    e2:8b:53:77:d7:50:3d:cc:e0:0f:99:a4:c7:da:ac:
                    68:10:55:38:13:0a:fb:f9:0b:ef:74:3d:63:87:e4:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EC:A3:BC:0A:24:49:B1:59:61:27:8E:85:B5:67:72:85:D8:A7:BC
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:24:9f:63:9b:c0:23:92:f2:27:75:7c:0c:0f:db:fb:a0:
         26:b4:d9:26:ea:e0:09:1a:19:4d:d2:fc:c9:03:e1:fd:c5:ce:
         b8:ce:c5:6e:cb:bd:3f:f4:a4:b3:40:4e:bc:b2:b5:9a:0f:cd:
         39:7c:43:9f:c7:06:07:9a:42:72:7f:a1:c0:76:c1:c9:cc:87:
         a3:b9:0a:ef:18:3e:ef:67:0d:08:1a:74:20:e1:13:de:25:38:
         d1:6b:50:17:53:44:64:da:7a:98:08:5b:6f:55:47:d4:45:fa:
         53:0c:70:08:04:f7:40:23:0f:53:d0:42:34:29:f6:6f:00:eb:
         c4:1d:6a:a6:af:7a:2d:75:ac:61:36:c7:31:d9:d5:38:4f:29:
         5e:78:99:70:d7:2c:53:61:57:3a:07:bb:a8:de:16:be:c2:cc:
         79:78:d5:e5:c4:3c:52:5e:0b:02:25:12:d6:50:17:17:2a:01:
         5f:08:3e:83:93:6e:36:90:c3:e1:dc:c0:d2:c0:2c:04:19:5f:
         28:4f:2a:29:6a:57:aa:ed:75:06:15:c8:2a:ab:28:73:fa:e4:
         b7:00:6b:65:51:80:24:f9:6e:e5:c9:b3:04:94:a7:75:5d:cf:
         f3:6a:27:ec:02:32:75:b1:0b:0c:1f:5c:0b:91:ae:4b:b3:17:
         02:5e:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:21:39 2025 by rpki-client