Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa
File:                     323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (raw, json)
Hash identifier:          oJnk7HghAfllaWlCWdC4nj4Eg5ypd+tMzoPry4NKeww=
Subject key identifier:   C0:DB:CA:10:1D:A6:6A:01:27:F4:F7:EF:20:6E:B9:B3:4B:B6:A1:03
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       4FEB6717FB266A408CDD2228171ED360D134BCD3
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa
Signing time:             Tue 22 Jul 2025 17:26:14 +0000
ROA not before:           Tue 22 Jul 2025 17:21:14 +0000
ROA not after:            Tue 21 Jul 2026 17:26:14 +0000
asID:                     263195
IP address blocks:        2803:7e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Aug 2025 22:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:eb:67:17:fb:26:6a:40:8c:dd:22:28:17:1e:d3:60:d1:34:bc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Jul 22 17:21:14 2025 GMT
            Not After : Jul 21 17:26:14 2026 GMT
        Subject: CN=C0DBCA101DA66A0127F4F7EF206EB9B34BB6A103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:d4:ae:23:6a:fe:7e:7d:4b:a7:41:f3:52:
                    81:9e:af:85:20:f4:08:eb:93:c0:30:85:e2:10:50:
                    f9:17:51:d4:e1:42:df:9a:47:29:27:66:b9:2d:f4:
                    36:9e:6a:8d:39:e6:d6:fc:7b:47:7e:1a:f6:49:05:
                    fc:51:9a:e5:15:30:4f:a0:7c:34:3f:30:05:6c:f4:
                    83:47:57:4b:bb:28:85:d1:cb:c3:79:bc:c7:59:d7:
                    12:58:8b:8a:d2:41:20:1f:29:28:6d:03:a3:00:77:
                    86:cb:8a:9f:84:8b:f5:69:99:f8:9f:40:da:ad:ea:
                    9e:85:13:93:ce:fc:ed:15:6d:d4:41:d7:b3:36:64:
                    04:89:98:df:b7:fd:3f:6e:a0:31:cd:72:e4:92:3a:
                    ee:31:de:8d:02:1b:20:3d:4c:be:e1:2a:43:8f:56:
                    78:4e:a6:84:d8:1a:c4:f1:e3:d1:26:38:30:22:ab:
                    3b:18:97:f7:88:ee:4f:09:11:b7:7b:d8:72:cf:79:
                    71:75:8f:33:77:66:6a:3a:a0:0a:c6:7d:48:a2:b6:
                    b2:86:1b:cb:e7:8e:5d:24:2f:f5:f5:39:44:f3:ec:
                    f3:80:fe:d8:c8:88:e9:67:70:bb:4d:44:fa:d8:06:
                    73:cf:19:49:7c:a5:19:35:b2:92:53:a7:a2:18:95:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:CA:10:1D:A6:6A:01:27:F4:F7:EF:20:6E:B9:B3:4B:B6:A1:03
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:d4:83:7f:56:1f:c1:63:da:fd:c9:18:3b:85:85:bb:bc:
         6a:72:78:72:7e:03:59:5d:44:36:9d:ae:b1:12:08:d7:44:6c:
         21:8c:03:87:d4:43:d3:1a:56:c6:f0:b8:d9:38:d8:4e:8c:9b:
         0d:05:8c:22:d3:4f:d3:ba:6d:98:9a:12:eb:19:af:33:96:31:
         e8:7c:ae:b1:e5:5d:b8:be:80:36:26:de:50:48:ba:00:02:1e:
         62:cd:1c:9c:aa:d6:1b:f1:21:ab:0d:33:42:4f:c7:ab:5e:f6:
         2b:41:7b:0d:bb:50:eb:b5:78:73:bf:ec:b2:ff:ff:68:04:51:
         8f:fb:fa:8d:d4:13:95:24:ed:13:f2:54:af:d3:85:c2:2f:c3:
         b0:f2:fa:4d:24:2c:ed:55:48:0d:b0:fa:7a:5f:22:e1:ea:c0:
         5a:61:83:6d:01:4c:b4:98:b4:1b:46:2b:cc:b0:88:4f:a2:76:
         39:08:49:49:96:93:4e:7d:ab:77:a7:81:dc:2d:c5:5b:10:db:
         27:0b:58:49:aa:1a:02:f0:e6:e3:eb:f5:d8:45:95:0d:37:b1:
         4f:54:9f:61:7f:0e:ee:05:5d:45:1e:0a:2c:0d:5d:c2:07:c2:
         ab:a8:52:3c:47:ca:5f:23:fb:63:60:a2:22:fa:cc:52:d0:82:
         69:87:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 22:10:40 2025 by rpki-client