Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa
File:                     323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa (raw, json)
Hash identifier:          cGqXmbN3K0TrXThZZi64HJKZ8ut2PbYkXzgenwnGNmE=
Subject key identifier:   0F:0D:50:F5:11:7C:53:E2:DC:10:58:99:A5:65:F3:3F:54:98:53:D2
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       65C2E5CE49AF8E1F4EC984E64BD069B01B730C78
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa
Signing time:             Fri 01 Aug 2025 13:20:00 +0000
ROA not before:           Fri 01 Aug 2025 13:15:00 +0000
ROA not after:            Fri 31 Jul 2026 13:20:00 +0000
asID:                     274041
IP address blocks:        2803:bcd0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c2:e5:ce:49:af:8e:1f:4e:c9:84:e6:4b:d0:69:b0:1b:73:0c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Aug  1 13:15:00 2025 GMT
            Not After : Jul 31 13:20:00 2026 GMT
        Subject: CN=0F0D50F5117C53E2DC105899A565F33F549853D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:1e:db:70:7d:b7:ef:f7:ef:be:1d:6e:b3:
                    36:d1:f7:02:b5:81:9a:49:a8:e8:16:15:79:a3:c6:
                    58:b4:5a:e8:dc:42:87:b0:1a:4f:ff:a4:27:0c:aa:
                    df:0e:b4:06:e0:ce:39:77:57:62:71:79:8b:30:1a:
                    0c:c5:86:2b:55:22:e7:27:62:b6:6e:47:b4:ff:fc:
                    51:c0:46:5e:03:78:0b:7c:8d:fc:0d:07:df:42:64:
                    f7:3e:ff:8f:a2:12:0c:e3:81:8f:3e:40:1f:24:31:
                    99:12:da:3a:3d:4c:f9:ae:9b:f2:59:75:12:ed:27:
                    c1:ba:da:cd:8b:d5:e2:80:a7:e4:5f:fe:72:d0:6b:
                    2d:0a:b6:6c:07:01:4c:2f:05:4a:7c:8a:cc:ae:a1:
                    45:65:81:42:8f:07:8c:10:39:61:83:db:61:df:76:
                    ea:32:c9:7d:11:7b:af:96:0c:13:b8:ae:9a:e7:a1:
                    ff:98:c7:9a:88:28:0f:c7:9b:4f:ea:e0:53:0c:82:
                    ce:39:f7:38:6a:f7:26:52:c2:8b:f8:16:e9:c9:90:
                    b5:e2:82:0c:d1:de:04:2e:20:2e:bb:5b:07:f8:4d:
                    ad:86:ac:0c:d1:bc:07:40:d6:1a:85:ee:47:92:3d:
                    e7:51:6b:81:a9:f5:b9:d4:7f:5a:db:99:ca:9c:a0:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:50:F5:11:7C:53:E2:DC:10:58:99:A5:65:F3:3F:54:98:53:D2
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:76:84:74:ed:5b:68:2b:98:b6:ae:21:1b:ac:ee:6b:d3:ba:
         ba:14:10:27:1f:38:78:d3:1c:08:aa:22:a3:20:f8:23:0d:f7:
         63:72:3e:39:d8:9a:ce:c3:41:a3:ae:03:42:54:02:d5:d8:59:
         a0:fb:96:4e:6f:03:1a:1a:64:51:06:fc:9b:71:0e:cd:b7:83:
         6e:d6:89:1e:f1:51:32:c0:0a:6f:50:0f:73:e8:53:1a:82:e6:
         4a:90:d3:8f:10:f9:d6:4a:35:6a:62:b9:6a:5a:c3:2c:62:a4:
         49:73:71:88:7b:5f:31:0e:1e:a5:35:4f:db:24:64:97:86:97:
         19:29:5c:38:f1:6e:87:04:83:bb:3f:9f:c9:4e:52:df:13:67:
         f6:7d:50:55:77:40:f9:4a:16:ef:96:a7:2a:e0:ca:2d:0a:9a:
         68:19:84:76:aa:39:78:dd:1b:67:da:59:53:e3:3a:9d:ac:a7:
         cb:10:96:df:ce:8f:73:aa:ee:88:f4:e2:06:75:84:cd:ea:77:
         5a:ec:45:65:7a:d7:ce:49:99:cf:5f:7c:46:d3:1b:5f:f3:71:
         87:11:58:d3:34:20:90:cc:f7:8d:f6:89:ad:45:b2:5b:8f:26:
         48:4d:81:bb:ad:f8:7d:a0:ab:d0:61:d1:05:7e:c7:c7:b1:48:
         6f:03:4c:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:38:30 2025 by rpki-client