Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa
File:                     323830333a623932303a3a2f33322d3438203d3e20323636363737.roa (raw, json)
Hash identifier:          sw6nkt9b9iqdr60xcay/FVy4gA8YzFll2pTYR/j7YAM=
Subject key identifier:   84:6F:DB:FD:46:C7:EF:B4:E2:A4:57:36:E0:2E:DC:3A:E2:51:66:1D
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       3CD8D89A981E3378C2B88D6335CDE1ED90415316
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa
Signing time:             Thu 29 May 2025 21:20:34 +0000
ROA not before:           Thu 29 May 2025 21:15:34 +0000
ROA not after:            Thu 28 May 2026 21:20:34 +0000
asID:                     266677
IP address blocks:        2803:b920::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 17:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d8:d8:9a:98:1e:33:78:c2:b8:8d:63:35:cd:e1:ed:90:41:53:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: May 29 21:15:34 2025 GMT
            Not After : May 28 21:20:34 2026 GMT
        Subject: CN=846FDBFD46C7EFB4E2A45736E02EDC3AE251661D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:88:8c:29:f3:16:50:d6:89:02:78:85:31:
                    13:5d:3d:9b:3a:cf:e2:1c:1b:03:dd:b1:74:45:7a:
                    61:c4:09:c2:04:c2:ab:44:ed:1e:09:ea:d8:0f:46:
                    e6:62:77:5e:7b:bf:23:71:43:1e:f2:fa:03:c6:67:
                    ac:d1:a1:f3:73:68:2c:f6:78:fc:77:64:7e:8f:fb:
                    1a:d6:bd:57:db:37:5d:a0:40:29:83:5b:81:ab:80:
                    67:f7:b4:cb:2f:30:42:2d:7f:26:9b:7c:29:d8:c7:
                    43:4d:84:d4:27:09:e4:3b:da:8a:7c:9f:9e:27:9a:
                    11:8f:d9:3d:a4:5b:5f:c1:3a:70:b7:fc:8e:61:72:
                    0f:19:a8:7b:94:e0:49:b4:69:4f:ac:d9:a8:18:f4:
                    7d:34:7d:d5:41:73:4f:90:18:9e:76:58:8a:0e:a6:
                    18:ad:f6:b8:5b:b4:3c:11:87:a6:5f:92:12:d6:79:
                    0a:2f:20:16:3c:3d:a8:3d:8b:de:42:c6:56:45:0f:
                    3d:48:b7:a0:7a:24:cc:e4:12:9d:c6:c6:57:13:11:
                    3c:a1:18:b7:65:e1:86:9b:15:1f:f2:5e:53:92:8a:
                    4c:7a:4f:7d:64:42:5b:eb:25:53:01:85:71:d2:88:
                    19:fa:1b:5f:e7:57:06:92:5c:26:0f:8c:37:8c:2e:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6F:DB:FD:46:C7:EF:B4:E2:A4:57:36:E0:2E:DC:3A:E2:51:66:1D
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b920::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:79:31:95:7d:87:86:8a:71:4b:be:67:6f:87:41:eb:ae:
         a2:0b:f4:00:30:b9:3a:3c:9a:26:a9:55:9a:ba:f2:bf:c3:15:
         29:c9:de:b7:e3:4e:89:d3:ce:e5:2a:80:77:d5:b1:e0:27:13:
         f0:d6:70:e4:ce:17:b0:c3:da:c5:bd:08:03:e4:de:a9:02:1f:
         01:19:68:c6:b7:fd:79:bc:1d:e9:2e:2a:6a:ef:f2:3c:e3:1d:
         1b:41:11:46:32:da:9d:bc:df:a4:8e:48:ce:fb:40:a7:20:ca:
         ad:e0:20:d0:84:35:cf:4e:3f:83:6c:02:48:92:1e:e8:62:c7:
         2a:29:61:97:2f:a5:f9:69:63:92:d9:c4:6d:52:72:24:4b:0a:
         cf:0b:90:8b:cf:69:61:11:e0:51:a5:45:44:70:9f:0f:07:84:
         14:96:d8:4e:d4:fc:d8:bc:3a:bd:a6:36:70:b1:96:e2:22:37:
         cf:70:4a:3a:db:a5:36:af:50:25:87:aa:cc:bb:7c:ea:b5:f8:
         b7:e0:bd:fc:22:3c:a3:20:4f:0d:b4:7e:ac:65:db:b7:3d:f1:
         03:72:80:01:48:9f:8f:97:df:a3:28:84:2b:55:4c:dd:fd:4e:
         fd:ae:e0:6e:4b:29:31:d5:42:51:af:d2:93:09:56:6c:07:67:
         3c:0d:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:30:12 2025 by rpki-client