Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133383a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3133383a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          c03kufcEY5AwD+680rqhZZMCN8MRudwB7S4blPXZixU=
Subject key identifier:   2F:5E:94:BE:12:6D:32:ED:E3:46:47:41:84:D1:19:CA:53:7B:B6:13
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       702581043C570D450E9397CCA9764E0240D72CA2
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133383a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:00 +0000
ROA not before:           Fri 17 Oct 2025 13:15:00 +0000
ROA not after:            Fri 16 Oct 2026 13:20:00 +0000
asID:                     18678
IP address blocks:        2800:310:138::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:25:81:04:3c:57:0d:45:0e:93:97:cc:a9:76:4e:02:40:d7:2c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:00 2025 GMT
            Not After : Oct 16 13:20:00 2026 GMT
        Subject: CN=2F5E94BE126D32EDE346474184D119CA537BB613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:74:28:20:3a:b9:f3:0c:e1:e0:0b:be:01:
                    7e:64:6f:cd:b7:86:2c:e1:22:f8:ce:64:62:8b:f1:
                    b4:c3:23:b9:79:ab:eb:e7:09:1a:64:63:44:e7:25:
                    82:c1:88:f6:23:98:f9:ed:35:57:bc:d9:43:55:44:
                    fa:9b:87:6a:5a:c5:14:e0:e1:c8:b5:79:3b:8c:6f:
                    73:a8:bd:3f:17:87:92:26:e4:e3:fe:90:25:d2:51:
                    04:4c:ec:dd:b0:68:d1:62:90:45:84:3f:95:df:1b:
                    07:73:a7:82:ff:a1:1f:0f:b2:30:90:81:45:e9:23:
                    a5:52:ec:dc:f7:19:73:04:e0:16:9a:7e:80:bc:20:
                    ef:10:a9:d0:84:e4:2b:37:65:0e:f6:ae:ec:80:cd:
                    ea:45:38:b6:8a:62:b7:a0:0f:a0:c4:e0:41:41:04:
                    98:a1:e1:a8:da:a9:28:f6:47:41:c5:df:9a:21:6a:
                    62:bb:72:d7:02:40:95:d8:da:89:63:c1:77:9e:b9:
                    80:fb:47:d5:c5:17:cd:b0:ff:8f:b1:48:a1:ed:3f:
                    5a:00:99:b6:e0:48:1e:51:0b:26:5e:3c:84:84:b0:
                    ab:82:1e:85:dd:21:fa:28:d1:b3:7f:77:00:39:16:
                    fc:78:78:d4:6c:17:9f:7d:ab:d5:39:33:38:85:aa:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:94:BE:12:6D:32:ED:E3:46:47:41:84:D1:19:CA:53:7B:B6:13
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3133383a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:138::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:6b:8e:b6:f3:7d:1b:4f:d9:b0:9c:cc:f0:64:c3:74:34:
         ef:78:bf:72:d0:c5:df:9b:fc:b1:ec:49:93:35:0e:17:1c:28:
         6b:99:ab:0d:4e:5b:fb:0b:68:fd:1a:0c:d0:15:8a:39:94:ca:
         8f:4a:05:ad:9f:6d:c9:42:68:2d:c3:a6:6c:e1:1c:7c:15:7e:
         5e:8d:8a:12:f8:0f:63:39:42:3d:94:65:a2:cb:5b:92:a3:3a:
         8e:45:80:ed:03:99:04:0c:30:37:35:71:ca:84:07:4c:3a:fe:
         51:3d:5c:b1:f7:88:1f:69:b0:a1:cf:d2:03:a6:e1:4d:b6:76:
         bb:56:53:b0:f3:ef:09:88:56:6c:5c:91:ee:bd:97:14:4e:0f:
         6e:39:f2:1b:6b:cf:b2:3b:13:a8:57:29:a6:00:50:a1:35:44:
         79:51:4e:fa:49:24:50:48:ee:9c:60:71:e7:af:28:f3:ba:54:
         5f:39:c9:4b:3b:15:40:6e:e7:2c:67:8a:26:a4:8a:be:91:7a:
         09:54:ab:6f:f8:3a:8e:bf:5c:5d:9d:22:75:45:78:a4:56:29:
         f8:c6:10:a5:fc:38:f6:b0:71:30:54:7c:32:0a:96:ef:4b:2f:
         47:6a:0c:bc:f4:a2:d4:82:14:04:ab:08:3e:99:12:f9:cd:33:
         fe:b1:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:24 2025 by rpki-client