Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530313a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3530313a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          fq0wsXww7EcwpWAwvD+0H+DxM+0nkLDu4B2nrmJZtAo=
Subject key identifier:   F3:00:B0:90:FC:34:CF:07:3B:9E:77:EA:C3:BD:BD:D1:FB:A7:72:09
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2725F31F901E1BB889C5E7E529B82C9F16C20E9A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530313a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:00 +0000
ROA not before:           Fri 17 Oct 2025 13:15:00 +0000
ROA not after:            Fri 16 Oct 2026 13:20:00 +0000
asID:                     18678
IP address blocks:        2800:310:501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:25:f3:1f:90:1e:1b:b8:89:c5:e7:e5:29:b8:2c:9f:16:c2:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:00 2025 GMT
            Not After : Oct 16 13:20:00 2026 GMT
        Subject: CN=F300B090FC34CF073B9E77EAC3BDBDD1FBA77209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:97:18:2e:f1:c9:8a:ea:a6:f4:ea:2a:45:
                    11:5e:47:1b:b4:a1:5e:77:ef:de:97:d2:50:9d:63:
                    e8:38:a0:1a:21:98:b9:e3:13:52:7a:ec:f8:0b:0d:
                    7e:01:fb:0b:2e:8d:21:61:e0:71:11:d0:45:c9:c5:
                    18:7a:e9:81:a9:3b:e9:bb:0a:38:ee:66:cf:9d:a4:
                    b7:f9:f0:45:2e:9c:e0:1f:d8:ed:ca:04:9b:ec:42:
                    05:cd:14:8a:a8:11:72:bf:65:ac:51:c5:ec:c1:c3:
                    b3:d9:cd:b0:73:82:a0:88:7e:63:a6:78:94:60:6c:
                    34:3b:79:b0:8c:55:b8:db:89:66:0b:a8:36:a4:4f:
                    6f:a5:f1:d5:ee:c4:dd:12:94:c7:57:1c:9e:b8:3d:
                    53:b2:43:fe:ed:85:15:b7:06:a8:e0:03:e9:16:9b:
                    35:a2:72:4b:6f:b1:f6:f8:3d:8b:60:23:f3:0d:10:
                    22:f3:0d:96:5c:f9:17:52:fa:2b:c0:70:0c:dd:89:
                    47:cc:7c:b0:af:e2:7f:92:26:72:d3:dd:66:13:3f:
                    42:3b:4c:4a:a2:0b:7f:52:16:da:fa:b9:2e:4f:96:
                    a6:cb:15:0d:7f:02:a0:3e:b5:f1:17:48:b1:72:1b:
                    5a:3b:57:ce:46:b1:97:e2:fe:52:a7:d7:27:ab:b9:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:B0:90:FC:34:CF:07:3B:9E:77:EA:C3:BD:BD:D1:FB:A7:72:09
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530313a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:501::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:4e:d8:3b:95:b1:ee:a2:b6:e0:55:d7:65:0b:42:d6:a7:6c:
         bd:d0:2b:ec:b9:2c:e9:aa:3c:11:bc:fe:38:9f:fb:23:c0:fd:
         b5:96:90:69:8d:43:9b:cc:25:72:b4:7f:a6:12:a1:6f:88:91:
         fa:ca:7c:53:06:1b:f2:57:55:bf:c0:0e:0a:de:82:20:f1:d1:
         86:f1:73:d2:62:d1:a9:c6:b5:c2:cc:fb:89:0b:d8:41:90:70:
         51:ec:99:0b:18:99:ba:5d:49:3d:8e:af:2b:6f:68:9c:83:72:
         79:5d:c0:41:00:6e:91:74:1e:30:31:29:2f:90:62:3b:6e:84:
         d8:3b:bc:81:f5:9b:a5:a8:d6:15:62:ba:c1:05:69:08:b4:b0:
         fe:11:3d:74:95:d4:29:d0:fd:d5:0b:cc:e6:0f:75:6e:68:71:
         5c:1c:1e:13:f2:15:07:f8:62:95:39:38:df:8b:73:4e:bd:56:
         88:14:2f:3f:1a:54:a5:15:9e:d2:ae:8d:e8:aa:de:80:be:9d:
         41:77:5c:68:7e:af:f0:0e:78:80:ac:74:80:c7:94:c3:64:9b:
         30:c3:18:88:4a:e6:21:e1:1a:51:f1:f9:bb:12:a7:27:f9:b0:
         93:24:22:df:13:bc:13:52:e9:92:67:92:4f:10:66:6f:f3:b2:
         43:d1:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:23 2025 by rpki-client