Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030363a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a333434303a393030363a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          SZi3B6s1w4luZu3sk9CEk1h0desN8c3+v7Kvma0Udz4=
Subject key identifier:   03:72:72:7D:49:D2:8A:90:74:07:D7:88:0F:1F:79:AE:67:F0:EB:5C
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       3538396DD754DFC2DA92BD88CA34536D09E6713F
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030363a3a2f34382d3438203d3e203634313132.roa
Signing time:             Mon 21 Jul 2025 20:26:00 +0000
ROA not before:           Mon 21 Jul 2025 20:21:00 +0000
ROA not after:            Mon 20 Jul 2026 20:26:00 +0000
asID:                     64112
IP address blocks:        2803:3440:9006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 02:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:39:6d:d7:54:df:c2:da:92:bd:88:ca:34:53:6d:09:e6:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Jul 21 20:21:00 2025 GMT
            Not After : Jul 20 20:26:00 2026 GMT
        Subject: CN=0372727D49D28A907407D7880F1F79AE67F0EB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:f8:9c:d0:db:5d:c3:dc:da:ee:5c:86:0b:
                    af:74:f4:24:5a:0a:25:d5:f1:5a:fb:0b:c3:8c:20:
                    9f:c2:1f:86:62:3a:f5:b5:37:74:a7:ba:8d:19:a9:
                    62:07:db:29:26:e5:61:df:43:c6:98:85:be:1f:f3:
                    ab:70:8a:77:23:64:ed:40:fd:3e:28:40:3f:ad:93:
                    65:92:4d:1c:1d:a2:e5:b7:df:f9:7e:37:31:90:b6:
                    40:4e:7c:8b:ae:38:16:07:42:51:51:e0:97:a3:91:
                    fa:d6:c1:cf:a9:a2:2e:df:e7:d9:04:2c:e0:b7:86:
                    81:2e:03:f0:30:fd:e0:60:5a:da:5f:b4:0a:07:de:
                    71:2a:81:ee:42:90:80:79:80:49:d6:a3:dc:fd:ac:
                    10:51:01:08:36:d9:7c:59:ac:01:9d:93:9a:1d:da:
                    04:8f:7d:ca:58:52:a5:60:08:d9:e4:75:61:da:2f:
                    c5:d4:35:41:2f:46:32:8d:a5:f4:32:f7:7c:bf:1f:
                    03:10:b5:c6:a7:cb:06:6f:5d:5b:4c:49:61:e7:9e:
                    04:4f:69:fb:f1:41:cc:2e:ee:88:ee:84:c0:d8:aa:
                    04:87:b6:6d:44:58:08:6e:1f:f3:9e:db:a5:06:61:
                    87:73:56:43:b5:42:91:3b:7f:67:92:6c:36:bb:5d:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:72:7D:49:D2:8A:90:74:07:D7:88:0F:1F:79:AE:67:F0:EB:5C
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030363a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9006::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:7e:80:a1:20:96:38:3f:b2:6d:25:4f:0b:54:40:07:e8:
         3f:d7:78:2a:03:a0:1c:a9:b7:da:42:4e:e9:73:54:2c:b4:51:
         44:a3:37:a1:64:c9:ac:cd:8e:76:ce:9c:ca:96:91:47:1c:b5:
         17:67:e7:7a:36:24:a9:d2:f2:d7:11:9b:8a:b8:d5:2b:6d:66:
         46:52:6d:79:86:83:ed:37:cd:4b:74:a1:f2:d7:f2:2a:c3:21:
         47:aa:f2:72:5a:f4:bb:ce:7f:59:58:80:7d:f4:6a:09:21:85:
         85:6b:6a:05:e0:c1:23:ce:c8:c0:ac:77:6c:7a:1b:1f:48:85:
         83:1d:c1:3b:15:24:c5:60:2f:90:c8:3e:6f:52:ce:95:d0:3f:
         77:a4:cd:ca:80:a8:27:1d:e0:76:4c:5a:49:04:6c:74:3f:bb:
         25:7c:be:96:b4:b0:41:5b:ad:6d:d6:42:df:01:a2:7e:58:c2:
         09:42:4a:91:dc:90:39:3c:d0:3d:d2:24:ab:fa:c7:6a:1d:8e:
         1e:4f:8a:f8:90:61:3a:d7:96:d5:8d:ff:69:f6:a5:15:50:70:
         a1:d0:c9:43:03:55:c8:fb:ff:24:18:83:45:82:1f:9e:bd:75:
         80:7a:1e:6e:d3:79:98:1b:3e:bb:9f:c1:91:93:27:87:8b:b5:
         46:15:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:39:00 2025 by rpki-client