Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa
File:                     323830333a363131303a3a2f33322d3438203d3e20323731393839.roa (raw, json)
Hash identifier:          lG95mL3vLY/9TuXlkpn0j2tFl1ruL5r73fogJHnV6eg=
Subject key identifier:   33:B0:68:F2:74:74:B0:4A:DE:C1:31:E0:AB:E2:19:A3:81:C3:53:F2
Certificate issuer:       /CN=175AC29B5CA355618758E7B44A8954A9ECF7B318
Certificate serial:       2DCF7E439CA23807C8D954E4C214321350A59F03
Authority key identifier: 17:5A:C2:9B:5C:A3:55:61:87:58:E7:B4:4A:89:54:A9:EC:F7:B3:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa
Signing time:             Tue 05 Aug 2025 21:40:00 +0000
ROA not before:           Tue 05 Aug 2025 21:35:00 +0000
ROA not after:            Tue 04 Aug 2026 21:40:00 +0000
asID:                     271989
IP address blocks:        2803:6110::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cf:7e:43:9c:a2:38:07:c8:d9:54:e4:c2:14:32:13:50:a5:9f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175AC29B5CA355618758E7B44A8954A9ECF7B318
        Validity
            Not Before: Aug  5 21:35:00 2025 GMT
            Not After : Aug  4 21:40:00 2026 GMT
        Subject: CN=33B068F27474B04ADEC131E0ABE219A381C353F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:d3:b9:cb:66:85:a1:20:b1:d5:52:7c:1a:
                    7f:35:d9:49:a0:cd:24:4d:1d:26:23:36:f9:19:e0:
                    0d:7a:f6:20:8f:fb:36:e5:3f:2b:ad:56:91:25:37:
                    30:b7:78:fd:79:a3:2b:57:39:19:f2:c6:45:a8:06:
                    a4:c7:80:c7:6e:47:44:04:6d:38:e8:8c:e9:82:f0:
                    16:df:9d:66:08:b0:61:08:f6:9c:14:bf:c9:8c:9e:
                    73:b5:f9:b5:e4:6a:79:0e:b8:8b:c9:92:49:73:ad:
                    2c:f8:a8:20:f0:36:59:31:c7:9d:14:22:4d:69:0b:
                    6f:f7:1d:80:66:69:58:ee:be:df:50:18:6d:59:60:
                    04:61:2f:c6:5c:e3:28:2c:69:79:7e:67:dc:e4:bb:
                    14:db:df:ac:a0:8e:c8:75:49:10:2b:7d:ea:19:e1:
                    c9:ab:ad:9f:1b:0f:f3:cd:89:c1:ed:3e:cb:73:e2:
                    65:ca:51:ab:60:c3:d3:9e:6e:a6:48:e6:08:e8:61:
                    1a:f5:39:c8:47:aa:e2:f4:65:73:32:9c:82:92:08:
                    f2:55:7c:14:3a:f1:a1:41:15:87:32:f1:e1:76:c5:
                    81:55:20:8e:b8:5b:7b:77:d3:92:96:e2:48:d2:8f:
                    d1:60:50:dd:18:0b:81:a7:bb:9c:4d:42:e6:4c:db:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:68:F2:74:74:B0:4A:DE:C1:31:E0:AB:E2:19:A3:81:C3:53:F2
            X509v3 Authority Key Identifier:
                keyid:17:5A:C2:9B:5C:A3:55:61:87:58:E7:B4:4A:89:54:A9:EC:F7:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6110::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:8e:a0:2c:5f:77:27:cc:79:da:50:d8:30:ab:83:61:d8:
         67:5a:d7:0e:16:85:b8:7b:ff:f8:0a:93:cc:ac:8c:63:b5:e2:
         f8:b0:2f:d2:ff:38:a4:fd:0f:75:b2:15:e5:eb:1f:89:a1:52:
         f8:6a:ba:9c:7e:30:89:c1:1d:08:54:ce:5c:ed:cf:31:ca:ad:
         ca:74:80:e8:1e:97:39:dd:d3:15:26:ff:be:06:2d:30:cb:f9:
         e6:d0:66:5d:01:9e:1f:36:d2:3a:66:ac:11:4d:6f:03:83:54:
         dc:9b:af:7c:50:4d:0a:80:8a:4d:91:ea:38:d8:4f:6b:91:3d:
         ff:fc:e9:f8:4d:40:01:0b:b4:62:82:39:4f:28:33:e9:12:b2:
         d1:67:49:29:38:78:cf:ea:87:0a:33:ed:c5:fd:4d:02:f7:f5:
         09:d6:a7:7f:ad:61:58:18:00:92:8d:f2:8a:c5:d9:64:ac:fd:
         59:00:3f:59:32:8c:00:16:18:54:2f:39:8c:37:79:41:8a:fe:
         b3:ba:32:2c:29:8e:97:43:f5:f0:18:9c:62:8f:27:f9:c0:1e:
         00:85:de:34:fd:c4:45:39:61:27:ec:d5:00:57:6f:37:e5:e4:
         91:a2:31:a4:de:db:ad:91:24:32:ee:62:84:61:18:30:4a:9f:
         92:4f:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:03:49 2025 by rpki-client