Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          eCaEFSjE7aZuQizaw6/baM+QHao5Mv042kghMe+uIo0=
Subject key identifier:   89:C4:16:A9:A9:8F:55:F6:18:33:11:24:B7:1B:F2:A4:52:A3:F3:54
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       092BE17B5A0442E67BD3633F196C67A5CF38469F
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 22 Jul 2025 17:26:14 +0000
ROA not before:           Tue 22 Jul 2025 17:21:14 +0000
ROA not after:            Tue 21 Jul 2026 17:26:14 +0000
asID:                     262589
IP address blocks:        2803:7e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Aug 2025 22:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2b:e1:7b:5a:04:42:e6:7b:d3:63:3f:19:6c:67:a5:cf:38:46:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Jul 22 17:21:14 2025 GMT
            Not After : Jul 21 17:26:14 2026 GMT
        Subject: CN=89C416A9A98F55F618331124B71BF2A452A3F354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:81:06:4e:82:31:12:ae:c4:b5:bd:63:d7:
                    45:80:e5:20:c6:6c:84:9b:49:e9:b0:70:0d:fd:76:
                    c6:ab:a4:d4:3d:24:1e:80:66:e4:5f:8b:5a:d1:b0:
                    0e:1f:8a:cf:82:6f:6e:56:18:ef:3b:b7:cf:37:2c:
                    a9:14:d5:40:d1:a4:56:11:78:30:d6:0b:5d:ce:39:
                    c1:e9:13:41:d6:6a:ed:39:5a:9d:0a:eb:1d:69:01:
                    16:08:5c:a5:53:5f:9f:3c:9f:01:60:9a:59:23:4f:
                    43:0a:49:8d:b1:99:26:f6:f6:0e:ca:e9:24:24:79:
                    2c:a0:3d:b3:74:9b:e0:f3:ee:e5:35:47:3f:0e:74:
                    5f:a3:3a:a0:3c:a4:eb:44:b8:dd:fe:8d:d7:4a:df:
                    19:6a:b6:46:ac:d7:52:91:a5:8d:ec:a2:06:23:8d:
                    16:ce:28:75:fb:b6:0d:90:f9:e4:da:0d:22:83:b1:
                    d6:b1:75:8f:9c:3a:dd:d9:58:8f:c6:7b:49:97:00:
                    55:6c:9a:2f:66:c8:aa:7c:01:1e:57:8c:02:db:ea:
                    1a:49:32:2c:1b:04:0d:55:dc:eb:c2:d7:cf:27:af:
                    40:e9:4f:30:53:fd:5d:cd:3d:0a:3c:72:db:24:52:
                    73:a6:f2:83:16:ce:be:1c:30:6b:77:81:82:1f:1c:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C4:16:A9:A9:8F:55:F6:18:33:11:24:B7:1B:F2:A4:52:A3:F3:54
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:80:c3:fc:51:3c:36:16:e7:1a:17:d4:a6:6b:64:2a:22:
         b4:c2:b7:f2:4f:8d:31:28:3e:f6:d9:3c:4d:43:13:06:2f:a6:
         0b:f4:bb:04:ab:44:a1:63:45:3c:ab:c9:50:63:25:95:7c:a1:
         b3:d9:ae:c6:76:79:8c:8d:74:6b:e7:d3:16:64:4f:9e:c8:d2:
         3b:60:fa:d0:a4:30:f0:5d:7f:20:92:1d:84:15:48:00:67:16:
         8f:f5:1d:b0:4c:41:00:7a:d4:71:c3:69:aa:bf:51:e6:eb:2a:
         dd:1e:9e:5b:f0:2b:fb:8d:ca:cb:05:19:f8:f6:0d:a7:77:04:
         7c:1a:62:bf:e9:bd:e1:46:2a:f2:6e:d3:56:6f:56:d1:63:d4:
         ca:6f:3a:fe:a3:ea:0d:6f:0e:a8:dd:37:38:78:e8:cb:91:56:
         7e:f5:b1:80:f9:5a:08:f3:b0:48:f3:94:d9:ac:b3:2b:da:9e:
         28:a9:40:e5:4a:50:04:a7:7b:a6:3a:a4:e4:52:81:28:28:2c:
         a7:95:03:a7:c0:a9:2b:4e:5a:2a:b9:32:39:6e:db:74:c4:8a:
         fe:f1:bf:cc:c8:1b:d4:c4:24:a8:e3:5b:32:2f:39:4b:89:30:
         e8:27:a9:ed:04:5a:e2:69:43:69:27:fc:04:1a:89:3c:c0:a1:
         7c:73:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:55:17 2025 by rpki-client