Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/323830333a376463303a3a2f33322d3332203d3e20323635373235.roa
File:                     323830333a376463303a3a2f33322d3332203d3e20323635373235.roa (raw, json)
Hash identifier:          V37fx/D8b6DoVDKTx7ifF2DSK1bwS3G+Yk9YW98k1iE=
Subject key identifier:   C2:80:4D:61:EB:92:FC:6C:3B:C4:34:FD:AC:27:B2:39:33:FD:E3:40
Certificate issuer:       /CN=38C175F6560828A6C6DF5D55DABC39D0E8C07B76
Certificate serial:       3B435E0225E25A5679770998DDE84E49C928CEAD
Authority key identifier: 38:C1:75:F6:56:08:28:A6:C6:DF:5D:55:DA:BC:39:D0:E8:C0:7B:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/323830333a376463303a3a2f33322d3332203d3e20323635373235.roa
Signing time:             Mon 09 Jun 2025 13:10:00 +0000
ROA not before:           Mon 09 Jun 2025 13:05:00 +0000
ROA not after:            Mon 08 Jun 2026 13:10:00 +0000
asID:                     265725
IP address blocks:        2803:7dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 02:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:43:5e:02:25:e2:5a:56:79:77:09:98:dd:e8:4e:49:c9:28:ce:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C175F6560828A6C6DF5D55DABC39D0E8C07B76
        Validity
            Not Before: Jun  9 13:05:00 2025 GMT
            Not After : Jun  8 13:10:00 2026 GMT
        Subject: CN=C2804D61EB92FC6C3BC434FDAC27B23933FDE340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:aa:38:98:5b:e0:95:f1:5e:70:89:3e:8c:
                    f3:c2:1f:84:94:70:b9:9f:23:c2:b9:28:aa:a4:58:
                    e1:33:ef:3a:b9:cb:da:3a:ec:3a:24:7b:b0:3c:6c:
                    11:87:69:0f:a9:73:ca:b9:7e:a8:09:2b:94:9b:36:
                    4b:41:99:9b:d0:fc:f2:5e:a5:3e:14:42:dc:25:9c:
                    e0:70:29:e8:9b:8f:f6:88:3b:6b:44:3a:7f:b1:53:
                    6e:cb:91:2c:da:a1:06:4c:ff:7b:f3:3d:77:19:43:
                    d9:68:d7:7e:61:8c:c3:5b:16:43:82:54:ab:eb:99:
                    28:4f:e9:5a:74:ef:2c:1b:53:80:3a:8d:ad:b1:6f:
                    a1:c3:0a:ca:38:81:63:90:0e:38:b4:cb:5a:f4:32:
                    27:e2:e4:24:a7:b3:a1:96:aa:f4:04:79:0e:c6:84:
                    87:2b:58:56:36:65:7b:fa:da:74:81:84:b2:ef:26:
                    b0:16:7a:81:9c:12:1b:e0:34:a7:33:ae:6b:db:9b:
                    fc:5e:95:e7:67:6d:85:73:59:ec:3c:c4:9d:67:4c:
                    d5:5a:94:1b:6e:fb:26:e8:16:5b:65:45:24:6b:6e:
                    66:5d:0c:53:fb:bf:ca:24:bb:f9:24:bf:cb:7e:8f:
                    d8:12:ab:be:6b:cb:94:16:80:75:96:7a:54:31:0c:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:4D:61:EB:92:FC:6C:3B:C4:34:FD:AC:27:B2:39:33:FD:E3:40
            X509v3 Authority Key Identifier:
                keyid:38:C1:75:F6:56:08:28:A6:C6:DF:5D:55:DA:BC:39:D0:E8:C0:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/323830333a376463303a3a2f33322d3332203d3e20323635373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:40:0f:b1:86:f1:de:40:1a:ba:a2:16:97:b3:05:7e:44:
         f3:4e:dc:29:28:2f:f0:a2:41:5c:4d:e3:1b:a5:6f:16:1e:7e:
         64:d0:84:90:b7:af:ad:d8:2b:38:2c:a2:f5:21:c7:28:87:9e:
         11:2f:bf:6a:b2:6d:4b:07:3f:94:b0:2c:f3:07:65:0e:05:86:
         2c:49:a6:fb:e3:27:73:5f:47:42:47:d2:d0:0e:ae:b8:16:0f:
         82:96:1a:52:61:f7:c8:1d:06:10:16:10:3e:9a:fd:94:e1:25:
         62:e9:f6:22:8e:32:36:74:b3:b6:e3:04:d0:c5:6b:52:17:ed:
         b1:ac:ab:2c:5a:60:d9:3f:af:50:91:d5:11:1e:5c:43:aa:25:
         0e:aa:fa:70:d3:00:3e:85:2c:b5:a6:00:70:34:94:75:57:0b:
         7a:2d:ee:6b:1e:1a:e7:76:f8:7a:24:34:c6:a1:58:6b:7c:e0:
         8d:45:63:60:c1:74:e0:db:3b:c5:18:20:10:78:21:a8:4c:9e:
         f4:7f:07:f2:ee:79:4e:c6:69:78:f1:23:16:18:18:33:39:0a:
         17:f0:f5:a4:bd:1f:86:2c:ea:ca:8f:aa:a7:f5:da:b7:5d:2c:
         b2:5c:93:dd:ba:04:26:d8:40:31:2a:bd:5d:a1:f1:b4:1b:ef:
         a6:be:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 14:42:21 2025 by rpki-client