Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa
File:                     323830333a626364303a3a2f33332d3333203d3e20323734303431.roa (raw, json)
Hash identifier:          WQF0WdjtLBO1gY0mqhrweW5uYqK/nUBZxO8h50LYfBg=
Subject key identifier:   3F:AF:FE:FE:17:9D:C8:3C:0C:BD:56:33:0C:FB:C2:6A:EA:70:C7:DF
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       2BD74D01BE494B8C64BDD24296426170B51F0EC3
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa
Signing time:             Fri 01 Aug 2025 13:20:00 +0000
ROA not before:           Fri 01 Aug 2025 13:15:00 +0000
ROA not after:            Fri 31 Jul 2026 13:20:00 +0000
asID:                     274041
IP address blocks:        2803:bcd0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:4d:01:be:49:4b:8c:64:bd:d2:42:96:42:61:70:b5:1f:0e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Aug  1 13:15:00 2025 GMT
            Not After : Jul 31 13:20:00 2026 GMT
        Subject: CN=3FAFFEFE179DC83C0CBD56330CFBC26AEA70C7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:69:3d:58:46:75:3c:4e:b9:78:e3:be:e7:
                    ef:f9:72:59:f7:c2:a7:53:9c:c0:e0:04:76:71:48:
                    58:d7:b9:f2:43:90:0e:8e:2c:2f:5d:55:12:c0:e8:
                    54:bd:d8:4b:33:83:5d:67:ab:85:77:16:31:57:9c:
                    32:af:02:ca:51:93:09:60:39:ad:bb:de:e2:da:03:
                    ea:a1:19:ec:ca:c1:ba:34:41:6d:f5:64:90:73:42:
                    6f:1a:04:4d:70:22:40:07:22:97:d7:87:96:2b:ec:
                    a3:8f:1a:98:21:b1:1c:a7:a8:54:1f:ef:d9:97:6e:
                    1b:1a:f8:6a:fa:8b:a6:68:ee:1f:82:f1:5c:92:3a:
                    5f:5d:c8:6c:6d:f2:89:7e:39:5c:47:52:ae:92:7f:
                    6c:36:fc:bc:5c:45:4e:63:a4:84:39:b8:2a:f0:7a:
                    a4:de:02:56:73:a2:02:9b:70:15:01:cb:ec:ed:59:
                    a4:3a:ab:60:9e:f9:a8:24:5b:19:28:17:67:2a:86:
                    f4:79:5c:80:25:11:22:3f:ec:8b:b8:a8:1e:7b:63:
                    a7:74:bf:ee:37:f2:85:62:7f:60:cd:ad:1a:a5:e6:
                    4a:23:0a:21:76:e8:49:48:46:3f:31:46:c1:70:50:
                    cb:3e:37:ba:2e:a2:fb:f7:92:ba:f0:40:6b:20:2f:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:FE:FE:17:9D:C8:3C:0C:BD:56:33:0C:FB:C2:6A:EA:70:C7:DF
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:18:eb:a7:f8:3b:9a:a3:d9:98:c6:40:e2:fe:6f:fe:fd:
         ba:91:cd:ae:d2:c6:2c:74:b5:0a:6b:68:9e:91:47:5d:73:13:
         82:5c:da:0b:3e:9a:58:05:e5:43:f4:f6:05:f0:c9:a6:de:97:
         9a:a8:e7:53:ac:1d:80:e5:3d:11:1c:b1:dd:81:cb:f8:d4:cb:
         0c:1a:a9:bf:2e:ae:e0:0a:56:31:c9:03:7f:12:89:c3:79:c4:
         7b:b5:f6:4d:42:2f:60:dc:d1:3e:c2:e6:12:ff:5e:e9:05:ed:
         36:52:01:ef:64:5d:ab:15:46:bf:18:f6:57:3a:96:be:e7:7b:
         82:f3:b4:4d:6e:2e:94:5d:ce:26:50:ce:d9:f1:43:74:36:af:
         4c:b5:f1:24:d0:bd:94:78:df:f7:09:23:eb:e2:ee:92:f1:02:
         12:b2:1e:ae:e5:0c:c8:03:e5:14:54:0f:8b:b1:61:0b:a5:d1:
         0b:33:2e:d6:05:4b:ff:92:71:f1:0c:f2:9d:0c:2b:18:3e:01:
         4a:3e:91:a0:d1:fa:87:04:9a:80:e6:a8:8a:24:42:38:66:57:
         d7:87:8f:dc:63:97:8e:18:1f:a3:d3:f2:bb:c5:77:3a:55:63:
         9e:60:a1:05:66:4b:f0:7f:35:e5:8f:c9:fb:63:35:78:8d:71:
         b7:c3:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:02 2025 by rpki-client