Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132653a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3132653a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          39aSXKLjClnip8a1OaNirqttpDs0gwtDno2+DbrRHGg=
Subject key identifier:   2C:1C:D5:69:7A:10:A7:E8:66:C8:0E:68:B0:3F:38:08:5E:74:30:59
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       1183A620F8389CC31E443A6009F27325140CD58A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132653a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:01 +0000
ROA not before:           Fri 17 Oct 2025 13:15:01 +0000
ROA not after:            Fri 16 Oct 2026 13:20:01 +0000
asID:                     18678
IP address blocks:        2800:310:12e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:83:a6:20:f8:38:9c:c3:1e:44:3a:60:09:f2:73:25:14:0c:d5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:01 2025 GMT
            Not After : Oct 16 13:20:01 2026 GMT
        Subject: CN=2C1CD5697A10A7E866C80E68B03F38085E743059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b6:16:fb:c6:67:43:54:80:04:eb:93:dd:f7:
                    02:01:8f:47:aa:d4:10:5d:4f:d1:ac:6f:d3:ce:56:
                    55:7c:1e:e1:c7:6e:ca:df:68:29:55:f3:69:a3:cc:
                    2b:53:6d:9e:02:5b:e3:d0:43:bc:80:7f:3f:c4:7c:
                    46:b9:c1:5d:62:08:16:0d:ae:ea:41:32:e4:6e:fb:
                    4c:ea:0b:b6:60:6e:eb:53:bc:20:88:cf:ed:b8:58:
                    cd:0a:41:87:90:7c:99:3f:40:5c:6b:a1:10:cd:19:
                    01:e2:a2:ba:a6:01:ee:a2:38:20:e6:7b:2c:ce:c5:
                    8d:b4:f6:cf:e5:f1:b4:9e:81:c4:d3:fb:ac:4c:71:
                    89:9b:f4:0b:f0:ab:ad:11:58:0d:27:a1:f8:11:a1:
                    30:2c:b2:f7:e5:e2:a5:e3:f2:6d:65:18:de:3b:10:
                    8f:81:ca:37:b5:a9:1a:c9:af:4f:aa:2b:09:67:fe:
                    22:82:7c:c3:85:4e:be:ad:b6:7f:9b:c7:a9:17:f9:
                    16:4a:48:b7:58:a6:7d:d3:f2:78:d5:3d:71:92:97:
                    4a:1b:6e:8f:50:c4:a4:5b:a2:d6:1b:3a:8a:a5:92:
                    53:8f:ab:98:92:eb:7a:d6:37:38:14:dd:6e:23:5e:
                    77:9a:d0:0f:4f:97:6d:12:47:d8:18:ec:e4:20:89:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:D5:69:7A:10:A7:E8:66:C8:0E:68:B0:3F:38:08:5E:74:30:59
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3132653a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:6f:0e:41:1b:4b:20:53:8d:23:a8:fa:26:8f:53:72:63:
         99:bb:96:47:7d:18:34:be:b7:5c:e6:83:25:a6:f0:e3:82:a7:
         6b:b3:fe:55:95:79:30:48:45:87:50:34:36:bd:aa:5f:96:e1:
         ef:e0:18:cf:7b:1a:50:63:f9:f9:c6:a8:ae:79:e5:29:e9:e0:
         c2:e1:5f:82:ef:c9:d5:ed:88:98:04:e2:69:58:44:01:c5:40:
         20:50:0c:2c:4e:8c:73:6a:65:b2:99:01:bf:f8:49:6d:44:d3:
         fe:bc:c7:eb:3c:b9:b1:bb:be:08:8b:1b:fa:f3:25:ca:c5:68:
         d1:a5:79:89:27:36:65:7c:a2:b2:21:93:74:83:9d:34:8c:78:
         4f:c7:87:91:7d:c0:d8:9f:46:0c:3f:d6:ee:69:58:39:c6:1e:
         39:ba:46:d8:43:5d:ca:c1:06:62:5a:b9:2b:cc:aa:c7:ec:80:
         eb:16:4b:60:e7:20:ee:be:aa:9b:25:59:be:f0:b8:5f:db:f5:
         05:65:a4:fe:69:50:00:cd:fb:b9:a4:7a:8a:1d:cb:fe:ce:fd:
         2a:ee:c7:ae:a9:e8:93:24:96:c0:a4:8a:24:c8:ad:21:c7:39:
         57:c9:a0:4c:85:a8:78:5d:77:31:34:76:89:b1:b7:f2:1e:75:
         b0:ab:af:56
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUEYOmIPg4nMMeRDpgCfJzJRQM1YowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTEwMTcxMzE1MDFaFw0yNjEwMTYxMzIwMDFaMDMxMTAvBgNV
BAMTKDJDMUNENTY5N0ExMEE3RTg2NkM4MEU2OEIwM0YzODA4NUU3NDMwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwthb7xmdDVIAE65Pd9wIBj0eq
1BBdT9Gsb9POVlV8HuHHbsrfaClV82mjzCtTbZ4CW+PQQ7yAfz/EfEa5wV1iCBYN
rupBMuRu+0zqC7ZgbutTvCCIz+24WM0KQYeQfJk/QFxroRDNGQHiorqmAe6iOCDm
eyzOxY209s/l8bSegcTT+6xMcYmb9Avwq60RWA0nofgRoTAssvfl4qXj8m1lGN47
EI+Byje1qRrJr0+qKwln/iKCfMOFTr6ttn+bx6kX+RZKSLdYpn3T8njVPXGSl0ob
bo9QxKRbotYbOoqlklOPq5iS63rWNzgU3W4jXnea0A9Pl20SR9gY7OQgieSNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQULBzVaXoQp+hmyA5osD84CF50MFkwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTMxMzI2
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQAS4wDQYJKoZIhvcNAQELBQADggEBAGx6bw5BG0sgU40jqPomj1NyY5m7lkd9
GDS+t1zmgyWm8OOCp2uz/lWVeTBIRYdQNDa9ql+W4e/gGM97GlBj+fnGqK555Snp
4MLhX4LvydXtiJgE4mlYRAHFQCBQDCxOjHNqZbKZAb/4SW1E0/68x+s8ubG7vgiL
G/rzJcrFaNGleYknNmV8orIhk3SDnTSMeE/Hh5F9wNifRgw/1u5pWDnGHjm6RthD
XcrBBmJauSvMqsfsgOsWS2DnIO6+qpslWb7wuF/b9QVlpP5pUADN+7mkeoody/7O
/Srux66p6JMklsCkiiTIrSHHOVfJoEyFqHhddzE0domxt/IedbCrr1Y=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:19 2025 by rpki-client