Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/323830333a633564303a3a2f33322d3438203d3e20323734313639.roa
File:                     323830333a633564303a3a2f33322d3438203d3e20323734313639.roa (raw, json)
Hash identifier:          eP391IljvLpGFj+birW1+R4ADvtpgMdRhobCMyViFiU=
Subject key identifier:   9E:CF:76:F2:94:3D:9D:C9:BD:3F:8F:98:B0:E4:7A:3B:4E:3C:91:F0
Certificate issuer:       /CN=842E84C1A082BB30C1DA63F7E0826D406CE77567
Certificate serial:       0E987450CB63B38857112344BBC9322B19F12D23
Authority key identifier: 84:2E:84:C1:A0:82:BB:30:C1:DA:63:F7:E0:82:6D:40:6C:E7:75:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/323830333a633564303a3a2f33322d3438203d3e20323734313639.roa
Signing time:             Mon 21 Jul 2025 06:10:00 +0000
ROA not before:           Mon 21 Jul 2025 06:05:00 +0000
ROA not after:            Mon 20 Jul 2026 06:10:00 +0000
asID:                     274169
IP address blocks:        2803:c5d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:98:74:50:cb:63:b3:88:57:11:23:44:bb:c9:32:2b:19:f1:2d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842E84C1A082BB30C1DA63F7E0826D406CE77567
        Validity
            Not Before: Jul 21 06:05:00 2025 GMT
            Not After : Jul 20 06:10:00 2026 GMT
        Subject: CN=9ECF76F2943D9DC9BD3F8F98B0E47A3B4E3C91F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:13:66:76:56:d9:ac:fc:fe:8a:ee:7a:cb:
                    ef:9c:db:74:33:c4:21:4b:7d:87:64:38:d1:2b:19:
                    6b:57:5e:de:db:5b:59:69:0b:06:2f:33:7e:a0:c8:
                    e7:6f:91:37:fd:c0:dd:d4:50:08:0d:24:e9:00:a2:
                    60:75:bb:35:be:49:5e:aa:84:6d:d3:52:64:56:26:
                    70:69:96:f5:95:9a:39:8b:f9:65:5b:c0:bc:15:3f:
                    d3:5a:f5:fb:a1:a4:c6:73:5b:d4:a4:94:0c:d3:67:
                    4f:b8:2f:fa:ef:d6:b9:47:9b:74:07:14:11:12:1f:
                    6f:fe:87:12:28:5b:44:92:61:03:ce:32:27:55:cb:
                    5f:d8:a2:2d:99:10:16:e6:23:70:e7:cb:38:c1:f4:
                    51:fd:89:b5:9c:3a:1b:8f:3c:42:31:3d:a2:45:ae:
                    ee:15:e5:39:08:fb:66:00:72:ea:0f:85:24:a4:d4:
                    b9:e3:c1:f6:d3:31:3c:5e:84:1d:7b:0a:b8:57:24:
                    5c:a8:a7:5e:75:61:07:74:8c:1d:2f:1b:83:ff:8f:
                    48:89:18:23:7e:74:30:a1:cc:0e:5d:cb:50:9e:1c:
                    06:74:45:bb:80:58:19:2a:1b:2a:65:ef:4b:70:80:
                    e2:77:fa:b0:e8:ca:66:5d:0b:d8:c2:4a:62:3c:bf:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:76:F2:94:3D:9D:C9:BD:3F:8F:98:B0:E4:7A:3B:4E:3C:91:F0
            X509v3 Authority Key Identifier:
                keyid:84:2E:84:C1:A0:82:BB:30:C1:DA:63:F7:E0:82:6D:40:6C:E7:75:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/842E84C1A082BB30C1DA63F7E0826D406CE77567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F2A718D89AAEB78A5755DDAB7B3669F7B7BE29476A5C908D7126D83C89575E3/0/323830333a633564303a3a2f33322d3438203d3e20323734313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c5d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:00:00:8d:6b:89:d7:71:1c:da:db:be:cc:af:8c:d8:a2:
         c3:08:3b:b0:4a:27:fd:72:c7:e8:ac:3e:10:ee:76:3a:1b:20:
         22:a3:93:13:8e:ae:54:82:c2:ff:da:04:9c:6c:89:8d:0b:2e:
         d4:49:9c:87:a8:18:e5:74:78:18:ba:66:56:33:98:7e:c2:2a:
         ba:1a:c0:7f:56:d4:c9:f2:ad:b2:32:65:b3:01:19:26:af:1a:
         1f:7c:1a:1b:4e:85:6a:8b:24:c5:6f:33:8c:ba:99:6d:ea:09:
         37:d0:bb:d0:ec:8d:b4:e8:7f:07:df:18:87:81:e4:b6:92:24:
         ae:e6:ac:b3:6c:1e:52:73:4d:9e:26:17:37:c4:78:b4:c3:95:
         c0:9c:57:b1:ff:48:bb:e0:bb:91:a7:05:25:6a:88:eb:2a:63:
         4a:0d:22:b4:0a:98:d8:e6:09:ab:5c:51:ea:bf:03:21:93:e2:
         72:b2:fb:ab:c7:c9:bd:40:0f:d6:9e:bd:97:0f:05:ca:36:3b:
         bf:d7:77:04:5b:a8:37:34:04:fa:ba:1c:6f:f0:f5:8b:ab:f0:
         31:07:4f:ac:97:a5:4e:4a:34:de:da:18:e5:32:a8:98:6f:dd:
         06:f1:02:18:94:bf:1a:5a:d9:d4:ac:4d:09:2c:8f:f4:69:0f:
         86:62:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:28:11 2025 by rpki-client