Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          ZityqKUV3OnNTGYm7bgKaDdZuX7Pxg554gbStY4GM4I=
Subject key identifier:   EE:C0:A1:57:CF:0B:D9:FC:E8:0D:45:8D:69:CF:85:76:4E:02:F5:4F
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       5D46D22D165624C3BB9CC7B6D6161D90C5F36EBC
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 01 Aug 2025 01:10:02 +0000
ROA not before:           Fri 01 Aug 2025 01:05:02 +0000
ROA not after:            Fri 31 Jul 2026 01:10:02 +0000
asID:                     273832
IP address blocks:        2803:8950::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:46:d2:2d:16:56:24:c3:bb:9c:c7:b6:d6:16:1d:90:c5:f3:6e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Aug  1 01:05:02 2025 GMT
            Not After : Jul 31 01:10:02 2026 GMT
        Subject: CN=EEC0A157CF0BD9FCE80D458D69CF85764E02F54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:c7:c5:61:1f:fb:a0:37:83:c7:c1:16:69:
                    25:26:70:e5:ab:45:ab:d0:5f:d5:06:e1:e7:48:23:
                    98:64:ae:e9:d7:ac:30:06:54:7e:56:15:6f:43:2f:
                    ba:3c:ab:ae:c2:41:16:af:2b:be:ee:1d:06:32:aa:
                    4b:a2:84:a3:c3:53:ff:23:b2:e3:21:7f:3b:7b:83:
                    6b:51:c0:6e:91:38:e6:3d:15:0f:06:e2:ba:66:d5:
                    3c:44:16:f7:d4:e5:66:26:48:04:84:48:d9:60:e4:
                    14:66:6f:33:84:40:29:e9:7e:ae:fe:ca:c9:35:48:
                    4f:4e:e2:a0:4d:cc:c0:c4:94:34:fb:c0:62:4f:77:
                    15:b4:1b:3b:94:14:0b:0a:67:73:2f:cf:dc:29:3a:
                    0a:79:70:46:43:ef:16:90:9b:8a:39:fe:32:a4:66:
                    df:75:ee:cd:c1:f0:d4:9b:d4:0a:79:03:1d:34:c3:
                    c3:be:0d:b1:f2:68:7a:a7:5c:cb:ea:b3:ec:44:c8:
                    7b:fa:89:96:dc:f5:82:6a:fa:95:74:80:c0:6d:67:
                    47:16:b6:ba:31:b1:83:09:7d:da:b5:6c:37:57:c9:
                    b0:20:80:97:00:39:ad:62:85:22:7e:7c:2b:a8:6e:
                    08:d3:99:26:f8:73:f9:bf:26:a1:5b:8e:26:6e:34:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C0:A1:57:CF:0B:D9:FC:E8:0D:45:8D:69:CF:85:76:4E:02:F5:4F
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950::/42

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:b7:f1:ce:3a:dc:3e:fd:6e:f6:7a:44:12:29:aa:c6:51:
         02:16:57:e2:4f:5c:51:cf:76:86:71:c4:d6:01:d3:88:a2:78:
         1c:74:57:be:a5:9e:ad:2d:d8:ba:d8:d2:68:44:81:30:e3:42:
         83:fe:b5:99:96:6b:f0:ed:6e:5c:83:20:08:bb:3f:44:59:34:
         e4:3c:03:1a:db:8b:f2:e8:a3:e1:3c:43:77:1a:0c:84:d5:e8:
         5a:83:db:e0:be:08:e2:10:90:fd:3f:df:bc:e8:69:7a:99:e7:
         f3:f4:72:56:01:ba:58:bc:c5:dc:a7:d3:da:28:e1:c3:ef:42:
         90:21:76:8f:38:39:91:ec:05:60:5d:d2:13:08:46:e1:f7:c0:
         16:7b:00:5c:8d:31:c3:47:7a:04:ac:93:29:bc:07:92:d2:5e:
         9a:16:31:a1:33:f2:6c:1b:37:21:e6:6d:7b:08:4f:23:b2:b8:
         62:e9:bf:ff:db:1c:76:4c:98:20:f9:da:b4:19:92:37:b3:a6:
         0d:20:e7:3b:b5:62:bf:56:32:69:bc:e3:d6:3b:65:ed:c1:2e:
         da:d3:f7:82:6f:ec:58:80:93:73:19:9d:62:03:c3:46:51:89:
         46:c4:1b:64:c3:db:08:36:64:b4:3a:00:9e:9e:82:9b:e0:43:
         3a:2a:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:25:39 2025 by rpki-client