Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030323a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a333434303a393030323a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          8BEZMdi5+G2ggJUl5ar/PATm9j6rD14pFavUqHoiqTc=
Subject key identifier:   1F:E9:F6:00:82:83:80:0F:C9:71:9D:22:D8:DD:21:97:E2:10:AA:B8
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       3F3693F28DE16A3D2728D6BB18A292B7D943F8CB
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030323a3a2f34382d3438203d3e203634313132.roa
Signing time:             Mon 21 Jul 2025 20:26:01 +0000
ROA not before:           Mon 21 Jul 2025 20:21:01 +0000
ROA not after:            Mon 20 Jul 2026 20:26:01 +0000
asID:                     64112
IP address blocks:        2803:3440:9002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 02:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:93:f2:8d:e1:6a:3d:27:28:d6:bb:18:a2:92:b7:d9:43:f8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Jul 21 20:21:01 2025 GMT
            Not After : Jul 20 20:26:01 2026 GMT
        Subject: CN=1FE9F6008283800FC9719D22D8DD2197E210AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:c3:a4:5d:f0:00:0c:bd:28:4d:c5:1c:ed:
                    ad:35:b2:75:b6:db:65:69:fd:83:96:a8:1b:20:e8:
                    cb:52:fb:a2:b3:91:90:6b:80:6c:e1:69:66:da:ce:
                    21:36:f5:38:07:d2:50:bf:bd:dc:6d:13:eb:01:a6:
                    9d:7e:b7:ff:49:1b:29:fe:51:3d:0d:52:08:e3:3c:
                    a4:e6:7d:b3:74:fa:10:2d:7f:e5:09:c1:a0:e1:f3:
                    a9:fb:0f:dd:6f:27:d6:3a:5b:d4:87:61:cc:cc:51:
                    2e:b1:2d:f0:7a:96:0c:6b:f8:6a:70:d5:b7:0b:66:
                    50:ba:d8:ef:29:13:a1:ea:d3:f5:93:80:aa:87:96:
                    24:f8:2a:80:d1:09:12:ab:41:89:3c:dd:a7:26:54:
                    bb:b7:bb:c5:68:1c:33:1e:72:28:57:fc:af:ea:70:
                    7f:d9:23:7f:fc:ae:4a:66:c0:ef:e0:45:81:7b:3c:
                    b5:d6:81:5c:8e:c2:72:88:56:cc:78:79:8f:52:de:
                    48:42:e2:01:ac:e6:9b:fb:2d:34:ba:7a:27:e9:e0:
                    88:ba:12:52:00:ba:cc:26:65:d8:9a:7d:33:8f:6e:
                    74:60:f3:7a:03:b3:77:cd:60:5e:2f:06:54:2c:9a:
                    0d:14:1b:81:9b:f0:3a:0f:7a:3e:63:c0:58:8f:ae:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:F6:00:82:83:80:0F:C9:71:9D:22:D8:DD:21:97:E2:10:AA:B8
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030323a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:b6:3a:82:b9:29:15:5e:90:30:32:27:b5:c3:42:5e:94:
         ec:bd:75:25:e1:08:ff:d1:79:1c:26:8c:f3:bd:bb:99:10:8b:
         aa:85:d5:eb:78:e1:b4:f0:9c:4e:16:cc:6a:f4:02:00:70:07:
         24:26:6f:2d:fe:19:e6:1a:f2:ab:b1:64:f3:11:13:8e:26:f7:
         a5:d5:de:b3:a9:2a:4a:79:cf:67:ed:5a:3f:5b:59:b5:b9:d9:
         d2:6e:76:a8:9d:d3:14:f4:6c:cc:6a:f3:82:85:54:1f:04:67:
         1f:ab:d7:f6:57:3b:7c:0e:cc:14:76:9e:8b:6b:20:ce:e1:69:
         2f:17:c0:d4:ab:f2:3c:a2:d5:7a:1c:dd:e2:79:44:2d:b2:00:
         31:63:7b:e5:7c:af:cb:b4:cb:dd:f8:3c:d1:26:fa:3a:47:85:
         3c:6d:6f:04:21:6f:e9:bf:27:e8:5a:04:9a:ac:b7:74:dc:af:
         ec:96:ee:fb:e4:3c:47:e5:b6:1c:8c:2b:b5:61:1b:53:71:d7:
         94:ac:c6:5d:81:80:a8:b4:d7:f4:c6:71:b2:12:61:6a:cb:0f:
         e5:ff:c4:51:26:58:5e:cb:13:92:90:d0:ad:b5:e9:e3:66:ca:
         cf:53:6a:a9:82:df:6f:9f:59:00:04:03:dd:42:a7:eb:fc:29:
         c0:00:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:39:06 2025 by rpki-client