Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa
File:                     323830333a626435303a3a2f33322d3438203d3e20323733383737.roa (raw, json)
Hash identifier:          tXd9Tlt83SdB7WqGrWbESsOhnu9l5TRWsIRJqlHtoyk=
Subject key identifier:   77:86:E3:0B:7C:CC:E8:5A:9D:A6:50:AB:CE:FB:22:39:B0:F2:DF:95
Certificate issuer:       /CN=F2ECF09BD6E585A198B1436B606F23E5D8DA7722
Certificate serial:       46097FE0F4D1A8A1418E6031C2FCE4CD00E83246
Authority key identifier: F2:EC:F0:9B:D6:E5:85:A1:98:B1:43:6B:60:6F:23:E5:D8:DA:77:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa
Signing time:             Thu 12 Jun 2025 02:21:50 +0000
ROA not before:           Thu 12 Jun 2025 02:16:50 +0000
ROA not after:            Thu 11 Jun 2026 02:21:50 +0000
asID:                     273877
IP address blocks:        2803:bd50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:09:7f:e0:f4:d1:a8:a1:41:8e:60:31:c2:fc:e4:cd:00:e8:32:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2ECF09BD6E585A198B1436B606F23E5D8DA7722
        Validity
            Not Before: Jun 12 02:16:50 2025 GMT
            Not After : Jun 11 02:21:50 2026 GMT
        Subject: CN=7786E30B7CCCE85A9DA650ABCEFB2239B0F2DF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:7a:4c:52:d2:fc:3f:09:fd:93:6f:6e:e1:
                    04:d2:b5:b3:6f:1b:3c:65:34:8a:9c:86:2d:0e:0f:
                    5e:56:32:d2:7f:bc:b0:58:3d:4d:0f:c9:7a:17:21:
                    ce:6f:96:28:fe:fc:0c:1c:60:cc:5e:c4:c9:ae:ba:
                    e6:50:d9:72:43:3a:18:93:ef:1f:14:ad:8d:b7:33:
                    c1:f2:c3:fb:89:f5:0b:84:a6:7c:fd:82:27:4f:5b:
                    62:5b:06:f5:51:10:bf:ef:a6:ca:be:22:e4:15:ea:
                    d6:8b:91:2a:cb:b4:24:59:1d:0c:fd:4d:05:ff:4c:
                    c8:78:30:bf:5d:1a:f1:dc:36:99:fd:ac:0c:af:db:
                    9c:d7:bd:c3:85:94:24:2d:92:27:0b:8c:dc:95:29:
                    47:ad:15:9f:c5:c4:f7:ab:22:89:04:ef:d6:12:d6:
                    14:11:9d:be:8f:f0:25:14:3c:ee:42:0b:03:96:62:
                    cf:a4:2d:b2:de:0c:ef:e3:8d:6a:21:cc:94:24:80:
                    f8:bc:20:4e:35:56:be:5b:5a:2e:e0:37:4e:64:44:
                    8d:25:fe:3e:9d:03:27:b6:29:77:70:ee:40:ad:f6:
                    2d:45:83:86:f1:73:10:f1:f6:1a:53:97:fd:8c:b8:
                    b8:51:f5:cc:04:39:bd:11:ab:5f:b4:12:9c:67:98:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:E3:0B:7C:CC:E8:5A:9D:A6:50:AB:CE:FB:22:39:B0:F2:DF:95
            X509v3 Authority Key Identifier:
                keyid:F2:EC:F0:9B:D6:E5:85:A1:98:B1:43:6B:60:6F:23:E5:D8:DA:77:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:f7:24:a3:09:9f:ac:be:c8:ed:21:69:a5:d9:3f:41:0b:
         87:21:ae:4d:6b:1d:ce:47:eb:cd:76:8e:9e:83:60:3b:9e:fa:
         bf:ea:d4:62:e4:38:7a:21:19:a4:28:49:db:95:ee:6f:01:7e:
         da:d4:e2:cb:fa:2c:f8:b5:04:20:40:4b:c2:e5:cd:6e:b6:8a:
         49:85:64:b4:3a:b9:9f:ca:50:74:c3:68:27:24:57:d7:51:5a:
         76:19:26:c5:02:e5:06:8c:bb:f0:a6:2f:a0:3f:16:fc:bb:34:
         b8:ea:e3:a3:35:c0:8a:85:cd:05:05:85:4b:7d:db:9f:b8:f2:
         79:74:20:00:d9:48:59:33:39:07:f3:4c:24:c5:2e:6a:5d:a8:
         52:5e:6e:bf:14:c0:fe:75:57:13:06:56:b6:91:7e:1f:c7:90:
         e0:8c:64:78:ba:f1:a9:fa:a0:72:8c:7f:e1:91:7d:ce:58:a9:
         08:cf:c0:30:14:f8:83:e7:89:b2:6d:95:49:56:f5:c6:82:23:
         64:50:66:04:9d:6f:34:1b:54:00:38:25:ce:78:bc:3b:13:41:
         81:d8:62:a5:25:75:ac:b6:fe:a0:90:84:58:bb:bb:4a:30:8a:
         98:24:18:6b:72:e7:88:2d:fe:15:07:b6:5b:c2:c5:be:c3:31:
         6f:3b:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:34:46 2025 by rpki-client