Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530343a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3530343a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          pY6n9+Sj6kam/cKYvWhlWuRi/EnpWkDIJDl7s6Y4qqM=
Subject key identifier:   E7:E3:97:37:CF:00:E8:04:34:5B:65:E9:21:28:A2:4B:2D:49:01:EF
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       42DD4654F326CB185C23D627B826E372BAB4ACE7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530343a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:00 +0000
ROA not before:           Fri 17 Oct 2025 13:15:00 +0000
ROA not after:            Fri 16 Oct 2026 13:20:00 +0000
asID:                     18678
IP address blocks:        2800:310:504::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:46:54:f3:26:cb:18:5c:23:d6:27:b8:26:e3:72:ba:b4:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:00 2025 GMT
            Not After : Oct 16 13:20:00 2026 GMT
        Subject: CN=E7E39737CF00E804345B65E92128A24B2D4901EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:06:d0:48:09:10:c2:4d:7e:a3:e6:2d:41:
                    76:1e:25:61:ea:48:90:1a:41:c2:14:37:dc:2d:7b:
                    87:19:88:7d:44:eb:e1:15:3b:8f:87:32:49:db:f3:
                    d6:3d:20:ce:43:2d:8b:c8:e2:5f:2f:71:f7:7b:87:
                    0a:a7:86:82:d3:0f:16:f3:12:55:58:b6:3d:39:52:
                    22:e3:1f:5a:3e:c1:35:c3:c4:ec:94:46:c6:5c:59:
                    59:95:1a:e2:db:11:d8:f2:c8:e6:c7:0f:4b:7d:03:
                    69:ef:75:d4:94:d2:fe:dc:fa:63:12:db:95:bb:72:
                    ac:c1:61:5c:f2:bd:66:e4:17:14:f3:1a:c2:40:f1:
                    55:66:00:ac:a9:eb:df:36:a9:79:94:bd:cc:15:1e:
                    0b:42:5b:ac:75:0f:b5:7a:fd:4f:c4:93:d1:cb:16:
                    83:59:03:77:2e:da:07:fe:3e:d2:72:7a:b2:0a:3f:
                    41:76:48:23:b1:e2:c7:ed:55:ad:34:91:71:44:eb:
                    bd:92:37:c3:48:16:14:ef:64:13:11:a4:0e:f8:bc:
                    20:f5:d6:6f:bf:3d:2c:78:5a:e1:ce:87:91:83:4d:
                    63:9f:06:4e:c4:80:c7:27:43:8b:d1:d1:19:91:58:
                    05:76:72:0e:4f:21:d4:5b:c7:2e:76:42:9e:75:79:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:97:37:CF:00:E8:04:34:5B:65:E9:21:28:A2:4B:2D:49:01:EF
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3530343a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:504::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:99:f0:18:43:30:c3:fb:2b:92:53:e2:c4:bd:60:fa:ac:32:
         2e:b7:22:1d:26:3c:70:18:51:63:ca:bb:ea:be:91:e2:b3:b6:
         ff:b0:98:25:d3:9f:24:a6:c1:72:b8:8a:31:2c:95:77:86:cc:
         89:a2:04:cb:23:6c:b4:93:e6:a1:eb:1c:b2:60:92:b3:7f:84:
         cc:d9:48:9b:b3:2a:93:bc:85:79:7c:56:5f:f6:f8:4e:d3:4f:
         26:37:0b:f8:5b:54:6b:d5:93:57:c9:75:74:4d:42:e4:85:df:
         a6:1f:a0:d2:52:59:81:a2:9b:0c:81:a4:a7:6b:04:2e:51:72:
         a4:d0:d4:d3:2b:de:15:f0:56:19:11:39:34:57:c1:8a:3c:e4:
         8e:c9:a4:74:33:6d:d1:1a:b8:8d:41:91:33:99:7c:5d:15:ba:
         a1:e3:a1:6e:dd:90:83:2b:61:19:3b:7e:e5:c3:62:8c:69:b9:
         e2:0e:9f:a4:34:35:d9:b0:c6:3c:10:44:7f:a1:be:71:40:7c:
         96:ba:45:e1:e1:17:ce:ee:8c:7b:02:a6:b5:17:30:c3:f8:66:
         12:85:03:d6:3e:75:49:e3:ab:a2:72:13:6b:ce:69:e7:67:03:
         05:85:70:5b:9c:b1:f2:38:3f:f5:c8:29:d2:d6:48:7a:f9:71:
         0e:15:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:16 2025 by rpki-client