Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/323830333a393130303a3a2f33322d3634203d3e203532343039.roa
File:                     323830333a393130303a3a2f33322d3634203d3e203532343039.roa (raw, json)
Hash identifier:          nCPJIV9EotGmPKak9mWN6kodMsZ88M6//nlxf5gDNc0=
Subject key identifier:   C6:76:50:3E:ED:78:A5:F3:65:D0:1A:50:04:4C:33:DA:00:66:97:DB
Certificate issuer:       /CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
Certificate serial:       737066271F6D10305C5179F6160E914F65332069
Authority key identifier: 77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/323830333a393130303a3a2f33322d3634203d3e203532343039.roa
Signing time:             Wed 11 Jun 2025 02:30:00 +0000
ROA not before:           Wed 11 Jun 2025 02:25:00 +0000
ROA not after:            Wed 10 Jun 2026 02:30:00 +0000
asID:                     52409
IP address blocks:        2803:9100::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 03:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:70:66:27:1f:6d:10:30:5c:51:79:f6:16:0e:91:4f:65:33:20:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
        Validity
            Not Before: Jun 11 02:25:00 2025 GMT
            Not After : Jun 10 02:30:00 2026 GMT
        Subject: CN=C676503EED78A5F365D01A50044C33DA006697DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:87:39:e8:c7:41:1f:47:83:d3:79:93:46:
                    c8:53:da:1b:6b:5c:a4:22:96:c3:61:0a:5d:2e:92:
                    a6:04:48:6e:ff:32:60:16:19:7d:a2:e0:11:fc:31:
                    d2:e5:12:04:8b:fd:5a:d7:5c:95:6c:30:7e:2d:db:
                    cf:fa:63:67:86:07:7e:c7:db:5e:43:15:7a:27:61:
                    c3:c3:06:54:a3:25:26:12:99:83:f8:5c:88:b3:cf:
                    96:08:8d:bc:01:a7:98:1a:ac:bb:5b:e3:07:0b:a3:
                    0c:d9:90:b0:71:e3:8c:0f:d9:18:0f:b4:a9:a3:23:
                    fd:7a:fa:d6:61:7e:31:83:fb:38:f9:35:76:00:ab:
                    c9:98:f8:14:84:c0:94:15:73:74:15:d6:e2:f4:36:
                    bc:de:05:bb:98:1f:1f:2d:b2:cf:9d:51:db:44:ef:
                    69:11:86:59:2b:9a:bd:cf:d8:17:b0:20:1f:ce:de:
                    34:b1:50:5b:f7:51:34:c2:00:7a:74:39:e3:75:7c:
                    43:b1:b4:27:ea:c1:7a:01:69:01:0d:f1:12:08:6d:
                    ac:b0:ba:45:cb:80:04:fd:c5:e4:68:a6:0f:d4:94:
                    8d:84:88:98:30:02:c7:b7:83:8c:a2:d0:df:a2:b4:
                    6a:4e:d2:3e:4c:34:bc:eb:c4:96:96:fe:4e:b9:e7:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:50:3E:ED:78:A5:F3:65:D0:1A:50:04:4C:33:DA:00:66:97:DB
            X509v3 Authority Key Identifier:
                keyid:77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/323830333a393130303a3a2f33322d3634203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9100::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:d6:a9:50:c4:66:c4:a8:5d:1b:d3:a4:72:66:0e:43:24:
         cc:3c:c6:38:c9:a5:8d:03:05:1b:27:98:8d:3b:f3:98:56:8a:
         87:ec:d5:c2:48:f0:e2:5d:ce:97:18:96:44:e6:0f:c2:c6:f2:
         f3:af:59:71:c3:ba:27:a1:4e:02:81:57:0f:97:15:dc:5f:01:
         64:13:ce:86:5a:17:fb:ea:de:95:0c:bf:18:9f:0f:af:91:2c:
         66:18:c3:a0:09:0a:27:1b:db:70:7f:9e:26:57:65:e8:04:e5:
         de:f6:6a:20:71:0d:43:6a:80:a6:74:51:e2:70:0f:6e:1e:0c:
         74:bf:9f:5f:50:eb:e2:79:eb:9e:af:9c:17:41:b0:49:6a:bb:
         aa:7c:e4:80:08:99:44:be:85:ee:87:14:2b:81:f8:7c:16:a3:
         4e:0e:a8:60:e9:41:f3:8a:65:8c:b5:32:45:5d:46:db:c9:98:
         09:79:e1:93:96:e4:7e:36:5d:80:6c:3d:2a:87:ea:ef:93:49:
         03:b5:d3:05:3c:75:d9:4f:86:c0:60:47:b0:14:18:e4:de:39:
         e5:86:61:20:ea:48:69:1e:43:b6:5d:1a:9b:9d:07:95:f2:82:
         ef:b1:17:8c:48:5c:3b:56:21:57:42:b2:89:e0:89:91:8b:f1:
         96:e8:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:23:56 2025 by rpki-client