Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132633a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3132633a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          cQR/8rr9JgyvNv6oRyzwRfpNHuRQ2/J6l3V07BVP8GU=
Subject key identifier:   C3:21:6C:93:A0:E9:99:1F:9E:2B:BF:23:61:C4:88:AA:01:E5:EB:B0
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       568EF703C113194F4B4C3CBF489489C114C1844C
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132633a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:01 +0000
ROA not before:           Fri 17 Oct 2025 13:15:01 +0000
ROA not after:            Fri 16 Oct 2026 13:20:01 +0000
asID:                     18678
IP address blocks:        2800:310:12c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:f7:03:c1:13:19:4f:4b:4c:3c:bf:48:94:89:c1:14:c1:84:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:01 2025 GMT
            Not After : Oct 16 13:20:01 2026 GMT
        Subject: CN=C3216C93A0E9991F9E2BBF2361C488AA01E5EBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:fe:06:6f:bf:ca:46:8a:66:29:0b:ee:a3:
                    85:38:34:ea:fb:3c:81:e1:15:4c:33:d6:50:b8:e7:
                    de:45:46:11:e6:83:33:39:8d:a9:d5:42:8a:93:f0:
                    46:77:23:39:a8:25:34:8c:6c:f5:eb:f3:47:83:5f:
                    d5:2a:61:d5:d3:18:fa:ed:8c:09:ac:15:e6:fd:e5:
                    d0:ee:4a:53:52:40:90:63:d9:2b:45:06:62:8a:ef:
                    16:67:f5:6b:8d:99:84:f0:77:ac:5a:41:e0:c4:ec:
                    e4:81:0c:0a:71:7c:07:c3:f6:b9:a5:8f:2b:0d:65:
                    cb:9d:e0:f1:b7:5e:bf:af:be:3e:77:29:5f:e9:99:
                    54:70:c6:83:62:17:87:2d:a1:71:72:51:de:00:8c:
                    8c:a8:a1:57:70:5b:30:28:2c:aa:c6:33:58:a8:54:
                    a1:5f:09:e1:31:df:3d:85:c7:93:68:40:29:4d:35:
                    e1:88:c4:50:51:09:4a:60:86:cd:76:70:96:cc:6f:
                    e8:6b:44:e2:1f:88:de:93:fc:21:ad:e2:ef:d7:c0:
                    8b:c4:47:c4:57:48:51:93:da:b1:0d:f5:81:d4:9d:
                    44:27:c9:d8:10:1f:af:e9:f9:28:78:16:4d:d4:8f:
                    0a:04:12:c3:5d:33:cc:a4:9d:b8:0e:fc:76:36:d1:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:6C:93:A0:E9:99:1F:9E:2B:BF:23:61:C4:88:AA:01:E5:EB:B0
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132633a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:12c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:91:26:f7:7e:8f:d6:19:9c:c0:86:ad:51:7a:b5:81:33:73:
         b9:12:f3:bd:56:01:1f:2b:7a:c5:90:cf:c5:71:74:59:8b:37:
         8c:47:dc:24:24:65:0c:ab:04:45:30:00:81:4b:01:58:de:c6:
         f7:f9:a0:5a:bb:a6:5a:b3:32:72:3d:7f:b6:43:34:38:c4:4a:
         6b:53:97:60:61:23:b9:d2:16:cf:f7:41:75:68:de:da:8f:90:
         05:20:6c:9b:20:df:15:4f:70:7b:c6:eb:be:b2:57:23:ce:47:
         98:07:3f:0d:44:e6:f0:49:4a:bc:20:91:c3:93:dd:6a:e2:ab:
         55:03:84:1a:86:c2:e7:f2:c0:44:2a:2a:66:4b:e5:0d:e2:a8:
         6d:c7:a6:dc:9f:7a:85:9c:27:18:6a:bb:b1:f0:82:bb:fc:21:
         6f:72:5f:6b:50:af:b6:3e:1b:0e:27:64:5e:4b:b5:98:50:03:
         65:f1:8e:7a:67:b3:aa:7b:3a:15:b6:c0:ec:dd:ef:21:64:b7:
         d2:11:7a:da:59:b6:6f:0e:72:4a:1e:f8:f5:e6:18:96:87:e4:
         a8:ec:54:e7:ba:ef:0c:9a:27:7e:90:bc:50:5f:2a:b9:a1:07:
         43:7a:55:04:74:01:f7:ac:a6:c5:ee:2f:6a:fd:fa:79:0d:c5:
         ca:66:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:29 2025 by rpki-client