Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          8CyMirdEpPKuzUIhtKiGSxchLxwiiiEbzrA+as0t0Hc=
Subject key identifier:   67:99:B3:D3:C6:1F:B2:D9:3B:97:41:C4:89:DE:3E:5C:B2:E5:3B:4B
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       08B6C528787041225D579E7E2429B364CB7C43C7
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 10 Oct 2025 12:49:55 +0000
ROA not before:           Fri 10 Oct 2025 12:44:55 +0000
ROA not after:            Fri 09 Oct 2026 12:49:55 +0000
asID:                     262191
IP address blocks:        2800:b70:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:c5:28:78:70:41:22:5d:57:9e:7e:24:29:b3:64:cb:7c:43:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Oct 10 12:44:55 2025 GMT
            Not After : Oct  9 12:49:55 2026 GMT
        Subject: CN=6799B3D3C61FB2D93B9741C489DE3E5CB2E53B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6f:fc:42:fe:4e:af:cd:a2:77:e5:5a:35:3e:
                    4d:58:b9:d9:22:54:b5:fd:28:5a:f9:b4:e7:ad:f5:
                    86:41:6e:c0:f0:c9:4d:2c:83:12:43:fa:c9:6a:2e:
                    4d:79:fd:e7:7c:e0:ef:71:d0:4b:33:41:9c:f1:f1:
                    f1:e8:59:be:c7:7f:55:5e:65:35:37:fe:b3:73:51:
                    56:28:46:fe:6c:82:60:7e:d7:b0:09:45:72:6d:0e:
                    15:81:23:f3:4d:f1:a8:14:c4:c8:96:13:c2:e6:6b:
                    ce:90:c3:97:04:a8:77:51:40:60:76:f5:d6:2d:e5:
                    99:cf:73:67:2e:b5:5c:f6:c2:dc:34:75:57:5b:93:
                    c2:2d:5d:36:2e:13:2e:c0:cb:71:72:d7:20:57:9c:
                    0f:83:e4:f6:3b:7c:cd:53:27:a3:86:b3:d3:4d:00:
                    6a:38:40:a7:fd:0c:b8:ce:e2:48:a2:9c:5d:e7:43:
                    57:04:21:43:fd:c7:de:2c:a3:fd:2d:ec:74:06:41:
                    68:9b:36:fb:2c:69:79:7d:cd:0a:98:e4:13:b2:3c:
                    4e:78:b3:4d:ea:f4:9e:34:38:12:eb:e3:9d:87:57:
                    c1:8c:38:d1:bd:48:03:62:8e:e7:ef:4f:e0:03:a0:
                    70:e3:b2:67:be:3f:e7:9f:7a:95:90:c7:69:06:a1:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:99:B3:D3:C6:1F:B2:D9:3B:97:41:C4:89:DE:3E:5C:B2:E5:3B:4B
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:3d:d3:63:53:2a:8a:74:c6:44:d6:ff:d7:d9:42:46:d5:
         eb:ba:cf:8e:f2:23:76:f0:47:1e:2f:8a:10:32:ec:14:a1:fc:
         1f:1c:7f:f9:d8:0a:b1:30:2d:16:f2:7b:a2:32:ed:3b:3e:42:
         30:81:a0:6a:31:55:3e:eb:e9:99:46:72:cb:59:d2:61:5f:79:
         5a:ca:a9:40:b9:a7:f7:7d:22:54:0a:66:0e:e0:d7:b7:c3:01:
         1f:2e:2f:f8:27:f3:34:70:78:85:11:68:0b:83:49:d0:21:f2:
         ad:e9:a9:29:62:c6:aa:85:9a:5c:e6:4b:a6:ac:4a:3d:ab:7a:
         c3:6d:b4:c7:9b:2a:dc:f6:bf:90:a5:a9:06:50:ba:bc:79:04:
         d6:f6:34:cd:b3:cc:9d:0c:fc:e2:e1:5a:c1:2c:d6:1c:1e:c2:
         18:ac:1e:61:24:5e:b8:bd:14:53:7f:0d:96:cb:2d:96:95:e0:
         f5:af:d2:9a:3a:d0:ff:80:8e:b3:cf:47:46:ec:e2:47:cd:cb:
         2d:7e:f6:f2:98:56:a4:79:20:10:38:11:07:b5:47:5b:e9:1c:
         51:42:d8:77:db:1b:06:ed:fa:69:82:25:d0:a9:88:92:35:20:
         a6:9e:75:88:3e:10:d4:32:17:0f:2b:05:37:2d:2d:c0:1a:bd:
         d6:f5:a1:c4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCLbFKHhwQSJdV55+JCmzZMt8Q8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTEwMTAxMjQ0NTVaFw0yNjEwMDkxMjQ5NTVaMDMxMTAvBgNV
BAMTKDY3OTlCM0QzQzYxRkIyRDkzQjk3NDFDNDg5REUzRTVDQjJFNTNCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7b/xC/k6vzaJ35Vo1Pk1Yudki
VLX9KFr5tOet9YZBbsDwyU0sgxJD+slqLk15/ed84O9x0EszQZzx8fHoWb7Hf1Ve
ZTU3/rNzUVYoRv5sgmB+17AJRXJtDhWBI/NN8agUxMiWE8Lma86Qw5cEqHdRQGB2
9dYt5ZnPc2cutVz2wtw0dVdbk8ItXTYuEy7Ay3Fy1yBXnA+D5PY7fM1TJ6OGs9NN
AGo4QKf9DLjO4kiinF3nQ1cEIUP9x94so/0t7HQGQWibNvssaXl9zQqY5BOyPE54
s03q9J40OBLr452HV8GMONG9SANijufvT+ADoHDjsme+P+efepWQx2kGoZu7AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUZ5mz08Yfstk7l0HEid4+XLLlO0swHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMyMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwACUwDQYJKoZIhvcNAQELBQADggEBAAsuPdNjUyqKdMZE1v/X2UJG1eu6z47y
I3bwRx4vihAy7BSh/B8cf/nYCrEwLRbye6Iy7Ts+QjCBoGoxVT7r6ZlGcstZ0mFf
eVrKqUC5p/d9IlQKZg7g17fDAR8uL/gn8zRweIURaAuDSdAh8q3pqSlixqqFmlzm
S6asSj2resNttMebKtz2v5ClqQZQurx5BNb2NM2zzJ0M/OLhWsEs1hwewhisHmEk
Xri9FFN/DZbLLZaV4PWv0po60P+AjrPPR0bs4kfNyy1+9vKYVqR5IBA4EQe1R1vp
HFFC2HfbGwbt+mmCJdCpiJI1IKaedYg+ENQyFw8rBTctLcAavdb1ocQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:42 2025 by rpki-client