Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa
File:                     323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa (raw, json)
Hash identifier:          IDWSff1xwB1cHP2N3cIi8YAtuLWHDMt0jdHDDOi2TCU=
Subject key identifier:   32:D5:7E:38:DB:F0:D3:D4:D0:21:A7:E3:0A:14:A9:03:C6:72:E9:75
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       322C79DFC2C8830CF0475CEA5AC3FAC4F56D4BF5
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa
Signing time:             Fri 13 Jun 2025 12:30:00 +0000
ROA not before:           Fri 13 Jun 2025 12:25:00 +0000
ROA not after:            Fri 12 Jun 2026 12:30:00 +0000
asID:                     264741
IP address blocks:        2803:7740:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2c:79:df:c2:c8:83:0c:f0:47:5c:ea:5a:c3:fa:c4:f5:6d:4b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Jun 13 12:25:00 2025 GMT
            Not After : Jun 12 12:30:00 2026 GMT
        Subject: CN=32D57E38DBF0D3D4D021A7E30A14A903C672E975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:b8:eb:ae:ae:e4:5f:c4:21:c0:0c:01:27:
                    e2:a6:2b:98:a7:32:38:98:c5:f3:4b:cd:4f:7f:00:
                    0a:bd:8e:b6:9f:0d:ec:47:01:12:b4:36:2a:d1:27:
                    86:63:ba:87:9f:0c:98:76:b9:8e:ff:5b:ef:a8:ae:
                    b6:f6:21:fd:44:f3:b5:0a:54:e7:8e:52:f2:fe:8a:
                    2d:0e:3d:c2:e7:0b:ca:de:4e:a2:d0:f9:2d:5a:58:
                    bb:1e:fb:26:23:4f:14:dd:53:5a:9c:6f:5b:33:14:
                    95:b1:4e:2c:fe:52:cf:09:1c:db:9e:24:dc:7e:5f:
                    3c:d5:26:61:be:fd:2b:8c:b4:8e:1c:88:0b:b4:d8:
                    0c:99:d2:dc:df:7a:6b:e3:67:17:d6:c9:b6:eb:11:
                    8b:b3:12:bb:4c:31:87:d9:88:dc:19:45:e3:b7:64:
                    00:2f:76:e1:3c:af:7a:56:d7:b0:f5:f1:48:13:e6:
                    c2:37:e4:07:8f:d9:fe:45:5a:a4:72:22:15:24:1c:
                    75:51:ed:46:a1:57:8f:c1:13:b7:44:e3:4a:94:6d:
                    d7:f1:40:dc:81:6e:94:2d:41:c9:44:c9:9a:c2:43:
                    fb:9e:4c:42:f5:6f:42:bd:a8:f2:63:84:d2:96:c7:
                    0e:fd:b5:d8:5c:85:6f:b8:ee:3d:21:1f:89:0e:92:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:7E:38:DB:F0:D3:D4:D0:21:A7:E3:0A:14:A9:03:C6:72:E9:75
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3130303a3a2f34302d3430203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:1d:d2:6a:d9:51:68:f6:95:2a:26:a4:65:8a:26:cf:03:
         2b:c5:1f:f5:7d:15:2f:3b:78:4a:dd:01:65:39:37:61:df:d2:
         e9:a2:10:a0:b3:ee:57:01:49:1d:13:e2:00:ec:c0:bb:ea:aa:
         48:78:06:6a:e8:8e:76:64:06:e7:b1:ea:09:58:39:63:5b:f1:
         40:25:d7:93:3d:37:3c:b2:7c:bb:4d:3e:dc:9a:ae:20:d6:32:
         cf:42:dc:43:2a:df:2f:d4:87:c9:14:7a:e5:99:1e:9f:1b:61:
         f6:8f:b5:5c:da:3d:46:35:3a:2d:18:16:ec:5d:12:0d:79:26:
         05:58:02:36:1a:b9:b9:80:cf:19:d9:aa:5a:76:b5:33:4c:38:
         05:c6:03:3b:3c:ad:98:eb:3a:b2:1c:30:81:fd:eb:e2:46:67:
         c5:05:a1:47:1e:ee:3d:f2:fa:f2:73:74:8d:3c:70:5b:c2:44:
         73:af:cc:20:0a:bc:f9:da:49:d3:94:25:25:53:02:c6:a4:b3:
         25:ed:c4:1c:3f:0a:eb:81:05:9c:b3:26:dc:69:28:58:18:61:
         57:04:ff:91:6d:2b:87:66:7d:14:f9:a9:37:0c:e5:3e:b0:b5:
         e5:5f:87:79:d5:23:da:87:d7:6c:a4:c0:4c:ed:77:59:3f:7a:
         22:6f:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:17:30 2025 by rpki-client