Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa
File:                     323830333a386434333a3a2f33322d3438203d3e203532323632.roa (raw, json)
Hash identifier:          ol+WGUJwN3KaZ40P8+OKnEPwTsSKIS7goZA6KDUtTyk=
Subject key identifier:   0E:D1:7A:81:73:82:8B:09:2E:ED:9A:75:D5:55:11:A5:4C:EA:6E:F8
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       51A3F8C1B1758DD89E2D661994693DBC545541AF
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa
Signing time:             Tue 29 Jul 2025 17:55:00 +0000
ROA not before:           Tue 29 Jul 2025 17:50:00 +0000
ROA not after:            Tue 28 Jul 2026 17:55:00 +0000
asID:                     52262
IP address blocks:        2803:8d43::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a3:f8:c1:b1:75:8d:d8:9e:2d:66:19:94:69:3d:bc:54:55:41:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Jul 29 17:50:00 2025 GMT
            Not After : Jul 28 17:55:00 2026 GMT
        Subject: CN=0ED17A8173828B092EED9A75D55511A54CEA6EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:7a:57:89:bd:a0:20:05:44:61:12:72:75:
                    1a:1e:63:3a:d6:fc:d8:fe:e9:d8:e9:85:f0:a2:ea:
                    62:57:51:36:33:e6:f9:09:55:fc:61:b0:b0:45:d0:
                    6d:56:21:e9:18:38:aa:e5:82:74:e8:bf:16:58:f2:
                    4d:02:5f:58:90:eb:ad:f4:09:8a:f6:d0:bc:a9:01:
                    f7:de:5e:6f:7a:32:25:ec:e2:8d:03:39:ac:77:dc:
                    8a:f4:8b:9b:da:87:d6:c1:95:da:58:ce:8f:dc:1b:
                    d9:b4:8b:70:1a:3b:42:2c:49:1a:e3:06:61:d3:9e:
                    14:00:31:0a:52:63:96:6c:b9:e0:3c:04:03:5c:37:
                    a6:63:84:3b:14:d4:95:ba:16:97:c2:bd:e3:bc:3e:
                    10:52:a3:ae:e2:db:24:1b:6c:26:ce:c8:0a:21:40:
                    28:c2:24:73:44:1e:81:cf:9a:d0:9b:1f:ce:33:fd:
                    d5:50:d4:c5:20:a3:87:2b:61:12:f2:7f:f2:83:f6:
                    0a:ff:36:05:9e:f6:77:ee:87:2d:2a:fe:8e:90:6f:
                    b9:71:d2:ab:64:68:c7:a5:45:21:88:b1:c3:eb:6c:
                    a3:63:87:32:b8:b1:9f:a0:0a:c6:18:cc:d1:fa:ab:
                    9a:a0:a0:2c:6c:98:08:59:42:30:79:2a:c1:24:38:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D1:7A:81:73:82:8B:09:2E:ED:9A:75:D5:55:11:A5:4C:EA:6E:F8
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3438203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d43::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:e3:4c:8e:41:53:1d:d6:fc:64:09:0b:3b:81:8a:29:01:
         43:ac:4c:c6:26:90:fa:49:13:07:0e:a9:96:25:dc:e9:bd:c6:
         a5:9f:e2:f6:9c:05:b5:f4:df:4b:28:d4:75:cc:e5:e2:ae:3c:
         bf:af:f4:46:78:8c:eb:b7:cb:f5:19:e4:17:c1:f8:25:18:0d:
         9f:56:a4:f4:f7:83:64:bc:38:05:cd:75:5f:69:97:28:5b:00:
         c7:c2:28:d1:c0:ec:63:de:45:a9:a4:37:95:0b:6f:b9:a2:fa:
         ca:6e:7f:38:86:cf:a1:0b:27:3a:36:e0:e4:e1:e9:a0:1d:44:
         54:bb:b4:9c:49:f5:c8:d9:88:7d:0b:ae:4d:75:66:31:29:38:
         4e:f8:b9:b3:7b:5a:27:22:b4:80:bd:f6:72:ac:a8:b1:38:6f:
         e2:4c:86:65:c0:5d:a9:b2:f1:5e:66:85:18:3e:9b:ab:73:f2:
         93:78:a2:90:0b:d8:4c:c9:7e:5c:7e:38:0a:31:a5:63:34:33:
         07:2d:b3:ac:59:6f:64:21:cf:a1:fb:bb:a8:27:c1:1a:61:84:
         07:fc:6f:fd:09:f9:d8:e3:a2:80:3b:04:e0:69:3c:c1:37:f9:
         6e:65:f4:28:3b:be:7b:6b:53:8b:c7:c8:08:b5:f7:bb:c9:6a:
         dd:f9:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:45:17 2025 by rpki-client