Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/323830333a373031303a3130303a3a2f34302d3438203d3e20323731383132.roa
File:                     323830333a373031303a3130303a3a2f34302d3438203d3e20323731383132.roa (raw, json)
Hash identifier:          kYDvdum+4aMFS8BOa+s5WF6QM5hqfk/o8OTjpcD91XI=
Subject key identifier:   F4:0A:29:55:38:CC:B1:38:F9:4E:87:22:60:F3:2B:98:90:CB:D5:57
Certificate issuer:       /CN=F88F8CEC4ED73C3BEE56165859EDC027E71C14D2
Certificate serial:       55EB846206767E07B7F3E7625D6033C6E64BDCDB
Authority key identifier: F8:8F:8C:EC:4E:D7:3C:3B:EE:56:16:58:59:ED:C0:27:E7:1C:14:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/323830333a373031303a3130303a3a2f34302d3438203d3e20323731383132.roa
Signing time:             Fri 20 Jun 2025 13:25:00 +0000
ROA not before:           Fri 20 Jun 2025 13:20:00 +0000
ROA not after:            Fri 19 Jun 2026 13:25:00 +0000
asID:                     271812
IP address blocks:        2803:7010:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:eb:84:62:06:76:7e:07:b7:f3:e7:62:5d:60:33:c6:e6:4b:dc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F88F8CEC4ED73C3BEE56165859EDC027E71C14D2
        Validity
            Not Before: Jun 20 13:20:00 2025 GMT
            Not After : Jun 19 13:25:00 2026 GMT
        Subject: CN=F40A295538CCB138F94E872260F32B9890CBD557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:d5:19:2b:ce:cd:e2:99:d0:f9:c8:cc:ac:
                    5f:8c:a1:1d:f2:71:5f:67:3b:f9:f5:e1:91:c3:0b:
                    70:4d:50:ad:07:47:7e:52:b4:37:f4:db:7f:65:f2:
                    3b:b1:fe:79:3d:64:e5:d4:79:69:f4:90:81:53:67:
                    1f:93:95:82:ad:26:f4:70:3d:c8:a9:f7:0b:0f:ab:
                    6b:07:28:9b:ba:00:ce:24:cd:9d:e2:3e:e1:e4:e0:
                    48:ad:d9:3d:60:83:27:d1:aa:f2:69:d7:fc:e7:21:
                    ef:2f:1d:76:dd:ce:8e:a1:a4:53:4c:b1:1d:8c:43:
                    28:1b:93:71:06:e9:2d:c6:74:63:8e:ed:2a:f1:4b:
                    ee:45:a4:16:c7:5d:c5:d2:1a:e5:9b:7b:ec:68:b1:
                    b0:64:ab:1f:f3:d7:3f:51:e6:be:21:71:98:d7:d7:
                    a9:b9:6d:33:df:4d:b1:2a:5f:d6:79:b5:fa:68:ba:
                    33:8a:c4:ed:5e:e2:99:67:57:32:36:f8:56:80:7d:
                    63:8c:36:18:1b:44:a9:82:3a:75:54:8f:f6:17:95:
                    fd:49:55:c1:e2:31:ec:30:f9:f3:2c:5e:9b:62:89:
                    b5:2c:b0:32:1b:e4:62:05:0f:08:90:c0:a2:43:09:
                    b1:5d:2f:ca:55:bc:8a:57:a2:36:c5:59:f1:02:6b:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0A:29:55:38:CC:B1:38:F9:4E:87:22:60:F3:2B:98:90:CB:D5:57
            X509v3 Authority Key Identifier:
                keyid:F8:8F:8C:EC:4E:D7:3C:3B:EE:56:16:58:59:ED:C0:27:E7:1C:14:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F88F8CEC4ED73C3BEE56165859EDC027E71C14D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8BFEBEB32AD42790D56BD09F800F47464C83FC438DEE3335DA6569213C56C37/0/323830333a373031303a3130303a3a2f34302d3438203d3e20323731383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7010:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:e6:1f:88:00:e1:a3:4f:7f:ae:04:0f:a9:9a:d7:1b:3c:
         5a:aa:07:23:8b:95:09:e7:5f:6f:d3:9f:cb:b9:8d:8b:25:56:
         67:5c:65:f9:1d:af:31:69:88:72:f2:3d:00:79:62:84:73:94:
         31:47:09:74:38:52:dd:77:a0:8a:01:0c:ad:e1:74:99:31:91:
         1f:3d:4b:90:78:b3:d6:4d:dd:ee:af:35:9f:53:9d:7b:b4:8c:
         9f:5d:35:dd:9e:23:a4:ef:39:3f:d6:25:9a:e1:63:25:e2:1f:
         75:96:78:96:27:30:37:80:eb:f4:7f:53:e0:89:43:85:a7:29:
         38:6e:26:8b:fb:d9:1e:8d:c4:94:12:c3:96:e1:93:2e:df:11:
         54:70:97:a2:66:e5:da:60:bf:8a:1d:8f:8b:94:8e:0a:c6:0f:
         f7:6f:03:6f:a6:b4:60:50:06:18:c7:46:ef:3c:74:c1:6b:76:
         5f:54:ef:84:1c:ed:2e:97:bb:b0:fb:96:bd:b4:92:2f:b7:97:
         3a:1e:de:a0:01:bc:c3:4c:f3:42:c0:60:86:83:6d:ca:79:cc:
         a8:21:e3:55:bf:82:9a:35:bc:b5:bb:f8:b2:52:c0:01:8b:0c:
         2c:56:dd:94:70:e0:73:cf:72:c5:dd:33:08:81:60:6a:a9:65:
         27:5b:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:28:43 2025 by rpki-client