Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a313030303a3a2f33362d3336203d3e20323635383535.roa
File:                     323830333a376635303a313030303a3a2f33362d3336203d3e20323635383535.roa (raw, json)
Hash identifier:          85wsRV63wnWNH2G9VY26tCp/gvXlqVG+5rzlA4YV8mc=
Subject key identifier:   CD:30:E2:1E:48:97:11:47:62:C3:EB:F5:55:5A:65:CD:82:E8:32:BA
Certificate issuer:       /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial:       3C3E421AFB441BE845C758A2957169095C6773C8
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a313030303a3a2f33362d3336203d3e20323635383535.roa
Signing time:             Thu 29 May 2025 23:25:01 +0000
ROA not before:           Thu 29 May 2025 23:20:01 +0000
ROA not after:            Thu 28 May 2026 23:25:01 +0000
asID:                     265855
IP address blocks:        2803:7f50:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3e:42:1a:fb:44:1b:e8:45:c7:58:a2:95:71:69:09:5c:67:73:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
        Validity
            Not Before: May 29 23:20:01 2025 GMT
            Not After : May 28 23:25:01 2026 GMT
        Subject: CN=CD30E21E4897114762C3EBF5555A65CD82E832BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:54:94:4d:50:10:36:09:58:4d:df:77:fa:
                    69:07:34:bd:71:44:ce:93:e6:24:5a:6e:bf:1a:91:
                    6a:40:8b:bd:56:0f:f8:28:7f:7d:82:3f:bb:b7:00:
                    71:24:00:88:b3:76:39:8e:30:fe:10:d0:b9:e2:3d:
                    54:9a:f2:0c:c0:4c:c9:c5:7f:55:b7:12:41:1e:34:
                    ca:94:74:06:81:83:c6:ac:32:33:25:ed:52:bb:f9:
                    02:43:f9:44:99:a0:6d:b8:77:a0:d2:11:c3:c7:83:
                    8c:28:86:cb:1a:75:85:5a:d1:a7:39:08:b7:9c:bc:
                    e2:5c:6c:a7:0f:3c:18:ef:75:52:01:85:fb:09:48:
                    88:21:d5:9e:0e:9a:53:35:b6:06:84:0d:80:60:51:
                    e1:3d:5c:ea:10:13:24:2a:37:bb:37:24:9c:0f:5b:
                    90:92:7b:db:05:99:d7:3d:5b:12:05:f1:cf:b3:4a:
                    40:20:7f:10:0e:d2:c5:73:8d:e9:20:34:f8:98:ba:
                    1c:79:0a:21:e3:53:87:49:7e:d4:f8:cb:ea:e3:c7:
                    df:a1:02:52:4b:6f:35:19:e6:ba:80:bd:90:3e:c2:
                    fd:03:44:0b:63:1a:7f:77:47:e0:d1:0a:9e:fe:89:
                    3b:ad:8f:d3:78:4b:ad:08:72:62:b3:eb:46:c5:35:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:E2:1E:48:97:11:47:62:C3:EB:F5:55:5A:65:CD:82:E8:32:BA
            X509v3 Authority Key Identifier:
                keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a313030303a3a2f33362d3336203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f50:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:70:4b:5b:37:a9:2d:45:81:09:48:06:46:60:e0:28:bd:
         3c:eb:2e:40:49:2c:95:8f:ff:92:4e:7c:67:73:34:5f:72:62:
         60:f1:45:0b:66:32:0f:42:cd:1c:e8:f2:15:8d:ea:58:1c:e2:
         57:94:ec:66:83:81:75:ed:18:16:02:a7:de:96:fa:29:01:ee:
         05:a4:48:a7:76:18:13:45:70:2b:58:52:2a:10:7f:ec:87:ba:
         00:ba:96:75:f9:f4:4f:45:1e:4f:1e:d0:d1:0e:bd:fb:30:eb:
         a1:18:40:19:4a:23:84:2f:2f:e3:17:2f:c7:08:b0:5c:65:96:
         7c:4d:5e:a1:ed:b5:52:ab:7a:b8:58:ab:0e:71:dd:71:ed:a6:
         a4:18:9a:2d:d2:d0:1b:7b:62:91:c3:14:e5:37:3f:15:32:17:
         6e:73:17:7c:dd:db:09:cf:1a:ee:10:08:e5:55:d6:75:12:a2:
         bb:72:e9:33:c3:97:c7:21:e7:e9:9a:5c:8f:6c:97:49:a9:a7:
         e4:fe:3a:66:67:93:7b:2a:42:b6:da:c3:b7:1c:d7:87:34:f5:
         c7:b5:72:d0:57:65:77:41:a7:a0:64:5b:f2:42:72:cd:0b:2b:
         8c:a7:b8:63:b5:cb:0d:7a:cd:fb:99:db:06:fd:a2:49:43:a8:
         df:53:53:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 21:20:15 2025 by rpki-client