Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa
File:                     323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa (raw, json)
Hash identifier:          T6xOAkdiQFAVAyZSSyLQUJoeY1m5i65rc5WsP5eWWT8=
Subject key identifier:   0A:C2:85:A7:35:EE:1E:C3:C6:68:4B:E1:5A:D5:36:34:F7:A5:53:6E
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       11F6C7D41D5B8EDC8CF09E01F368AD3EBDC9F08C
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa
Signing time:             Mon 21 Jul 2025 20:26:02 +0000
ROA not before:           Mon 21 Jul 2025 20:21:02 +0000
ROA not after:            Mon 20 Jul 2026 20:26:02 +0000
asID:                     64112
IP address blocks:        2803:3440:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 02:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:c7:d4:1d:5b:8e:dc:8c:f0:9e:01:f3:68:ad:3e:bd:c9:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Jul 21 20:21:02 2025 GMT
            Not After : Jul 20 20:26:02 2026 GMT
        Subject: CN=0AC285A735EE1EC3C6684BE15AD53634F7A5536E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:3a:27:8b:03:5f:7c:2b:b7:7f:0c:e5:9f:
                    52:a6:64:85:21:e4:a0:ee:bb:b1:b2:88:e0:5c:6c:
                    c7:9e:41:8e:d4:52:ad:98:67:f2:f4:55:84:13:61:
                    4b:84:e7:71:7c:d4:e7:ea:c7:5c:45:e6:cc:a2:44:
                    b4:05:91:1a:e0:a7:a3:3e:41:b0:b1:58:15:9a:e2:
                    18:46:d2:4e:99:cd:09:24:ed:f9:68:6c:1a:18:f0:
                    c4:16:d6:40:4e:2c:5d:f6:74:ce:b8:02:77:23:fb:
                    46:b8:49:2d:5a:cc:d3:32:b8:f0:f2:0e:ce:3c:7b:
                    07:d3:17:20:29:ff:ca:29:7e:f6:ff:b3:23:7b:1e:
                    8a:0b:74:86:41:78:62:1d:0a:dd:b5:f2:69:85:75:
                    26:9e:ab:7c:68:97:40:f4:d3:62:25:fb:d8:7c:d7:
                    a8:24:5b:70:db:38:a0:e4:45:85:a5:2d:15:87:7e:
                    1a:1f:0c:d5:f1:64:f6:58:0e:8d:22:8e:52:30:1d:
                    ad:ff:80:36:76:75:23:95:3d:5a:d0:8d:d6:a5:d5:
                    76:1c:2f:00:4b:92:fc:a0:92:e7:5d:c5:f8:6f:78:
                    fb:02:ee:87:52:b3:93:38:9b:10:1a:a6:35:8c:d3:
                    a7:d8:b8:a0:e4:4c:d7:bd:1d:a7:45:89:44:23:47:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C2:85:A7:35:EE:1E:C3:C6:68:4B:E1:5A:D5:36:34:F7:A5:53:6E
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:1e:96:e9:d0:15:b3:d6:af:0e:5b:16:cb:1d:e2:c3:03:04:
         b9:ec:08:c8:af:3f:a2:06:1a:2f:a6:96:b7:10:4c:2a:fb:9e:
         53:13:16:78:3f:e6:74:d9:9e:9c:57:12:60:ad:01:46:c6:10:
         37:5a:c4:24:82:60:3d:a3:01:e7:05:e9:cb:19:8b:cb:3b:6c:
         bc:41:18:80:03:5f:3b:70:34:e1:f3:d7:25:14:94:bd:dd:b9:
         b4:3e:e6:ea:75:b3:f6:09:74:8f:41:29:d5:eb:ff:f0:db:d1:
         13:c5:0e:fa:58:b4:58:9a:18:36:1f:0e:d1:04:e0:eb:89:94:
         43:58:e9:dd:0d:78:27:6d:8d:09:92:87:54:52:6c:a0:75:13:
         65:01:d1:94:fd:d0:16:6c:13:1a:4a:d5:39:43:64:d1:2a:c8:
         cc:23:03:f7:fb:89:b6:1a:e9:45:c1:a2:75:8f:c9:4d:e9:b2:
         37:c1:4a:28:0d:80:3c:a4:ef:22:da:47:0d:a7:da:6b:cc:c8:
         3f:61:6a:40:96:fc:7b:30:24:5f:50:31:c5:e3:64:3d:57:50:
         1c:af:6a:2f:f2:a1:0c:d6:35:61:db:56:8d:9a:51:70:61:16:
         d5:b9:74:5d:44:c9:13:57:3e:b7:8e:72:9a:e5:e3:cb:7f:41:
         3a:2c:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:39:01 2025 by rpki-client