Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          dD6zqeLqQzD4i92uBJ9f91igzqT5nKS/JDbt2s8WPc0=
Subject key identifier:   3D:01:79:44:62:06:0A:A4:3F:35:15:8F:4D:04:01:B0:A6:98:3F:E1
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       6F7522BDF487493210A864428747EFDFA883958B
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 01 Aug 2025 01:10:03 +0000
ROA not before:           Fri 01 Aug 2025 01:05:03 +0000
ROA not after:            Fri 31 Jul 2026 01:10:03 +0000
asID:                     273832
IP address blocks:        2803:8950:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:75:22:bd:f4:87:49:32:10:a8:64:42:87:47:ef:df:a8:83:95:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Aug  1 01:05:03 2025 GMT
            Not After : Jul 31 01:10:03 2026 GMT
        Subject: CN=3D01794462060AA43F35158F4D0401B0A6983FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:b5:a7:49:82:f4:94:d2:2b:c6:d2:94:22:
                    4d:6a:e1:5f:0c:68:d3:24:81:7a:02:dc:91:6e:31:
                    67:a7:2a:6d:eb:92:b3:c0:57:cc:66:f2:3f:1d:6c:
                    09:2f:0e:f4:50:7d:17:e1:a0:0a:a8:11:b6:3b:36:
                    76:04:28:84:24:50:17:4c:44:94:a6:3e:80:d9:2e:
                    c2:88:0e:f2:51:54:89:19:66:f0:0c:76:81:fd:65:
                    a2:3c:35:07:34:65:04:59:d5:8f:af:9b:f8:c3:c3:
                    84:80:e1:49:ba:67:8f:9e:95:3b:94:f3:5a:0a:89:
                    3b:05:98:9d:56:6c:54:0b:bf:da:4d:31:0c:c6:27:
                    18:3a:9a:3b:ab:3c:9f:29:ea:63:a6:e7:1d:88:ed:
                    04:f1:f9:69:b2:61:e5:13:53:ca:e0:aa:ec:a3:63:
                    47:0f:52:81:c5:bd:e1:d4:41:d3:14:51:34:c9:8f:
                    5d:d4:b2:0a:aa:29:ea:c1:3d:11:6b:d5:fb:2c:bb:
                    ae:75:c6:32:5e:a0:00:d8:ab:de:bf:f3:f3:e0:61:
                    b5:4c:fc:ef:9a:b1:97:55:ff:3f:fa:7f:9d:48:4b:
                    7d:aa:60:81:73:42:1c:6f:1a:c9:37:3b:84:95:54:
                    54:52:ad:f8:e8:85:ad:69:25:0b:cd:4a:a6:92:3b:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:79:44:62:06:0A:A4:3F:35:15:8F:4D:04:01:B0:A6:98:3F:E1
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         39:53:33:9a:02:f5:98:18:73:b8:14:ae:c0:f2:3c:f9:76:65:
         a7:f5:f5:d2:5d:8b:40:08:6c:b9:f3:df:6e:ab:0e:39:27:30:
         cb:19:9c:ac:c8:78:d4:a1:bd:05:1c:14:a8:61:94:7e:cc:e6:
         22:9b:92:bd:48:52:11:22:90:87:54:c5:e9:9b:3a:a7:c5:fc:
         34:7e:d8:7c:74:25:da:f8:44:6b:5d:d3:74:2a:f8:0b:39:ed:
         d5:3f:61:13:7b:5b:e1:e1:f3:33:03:fe:87:e5:dd:eb:96:09:
         2c:09:5c:d8:c1:fa:e0:77:7a:bd:8f:7f:3c:28:5d:1b:74:7b:
         09:7c:93:a9:4b:10:93:e5:bc:ff:64:73:75:99:ff:34:75:fd:
         44:6f:78:36:0e:a5:3b:db:d3:3a:96:33:11:5b:7a:b9:a8:35:
         17:e2:54:9f:f9:b4:56:c9:b6:5c:ea:b7:90:94:53:78:43:ec:
         83:aa:01:5a:30:20:6b:b8:64:7c:42:18:3d:7c:cd:3e:21:2b:
         f9:f0:ee:be:94:40:7a:6c:d9:0f:b9:ed:c8:b5:5a:32:e0:6f:
         d4:50:92:19:ea:86:0f:f1:1e:52:36:f1:76:51:f4:fe:c2:42:
         7f:a7:63:d8:4d:aa:3b:d8:e4:97:6d:7a:d4:16:0f:aa:9f:97:
         81:63:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:45:08 2025 by rpki-client