Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130323a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6130323a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          t/Q/pwXfZTPjmPFNEsgFLo/NDRoQUAm8H/crZt0vqJE=
Subject key identifier:   78:D7:AC:8F:19:B3:26:DC:F6:BF:95:53:DF:BA:A8:5A:97:86:FF:36
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5DBEBC328F9228163E668063AA83027331F443C4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130323a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 17 Oct 2025 13:20:01 +0000
ROA not before:           Fri 17 Oct 2025 13:15:01 +0000
ROA not after:            Fri 16 Oct 2026 13:20:01 +0000
asID:                     18678
IP address blocks:        2800:310:a02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:bc:32:8f:92:28:16:3e:66:80:63:aa:83:02:73:31:f4:43:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct 17 13:15:01 2025 GMT
            Not After : Oct 16 13:20:01 2026 GMT
        Subject: CN=78D7AC8F19B326DCF6BF9553DFBAA85A9786FF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:5f:8a:bf:0d:2d:f6:66:97:36:d0:ff:1a:
                    84:16:d4:cb:5b:dd:3b:5a:76:dd:59:71:2d:b9:d1:
                    e6:a8:6d:00:04:38:77:86:81:f3:e2:b8:ab:93:eb:
                    4a:8e:f3:36:fd:6d:9c:27:f1:27:32:fc:75:c0:6b:
                    b0:13:16:c7:89:59:fa:70:8e:a2:96:14:5e:0e:ee:
                    77:49:a6:c7:d6:ac:a3:f0:9d:63:ff:77:7a:7a:22:
                    82:35:43:11:86:dd:e6:84:c5:98:0f:72:3f:13:ef:
                    64:fd:92:7e:50:2a:78:e5:aa:04:df:91:98:cd:39:
                    91:6f:00:97:4b:91:81:4a:c6:66:06:47:72:02:ce:
                    fc:cf:87:73:dd:92:0f:03:f9:69:84:fc:ad:55:49:
                    6c:14:be:b8:f2:cb:62:ac:07:7e:24:5b:93:99:eb:
                    5f:51:f7:89:4e:d6:9e:3b:f6:a1:17:1a:3f:27:03:
                    aa:7d:25:37:d5:78:24:bc:c0:cc:a7:e5:9e:57:9a:
                    00:cd:91:5e:46:6f:c0:63:f8:68:4c:dd:97:c9:f0:
                    76:d9:86:45:d5:3b:06:d8:e4:77:01:fe:5d:d4:e5:
                    f8:88:b1:1c:54:07:30:c2:7f:16:9e:0d:6b:34:c8:
                    88:37:22:31:b2:ca:7f:83:37:b8:5e:d0:b7:72:86:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:AC:8F:19:B3:26:DC:F6:BF:95:53:DF:BA:A8:5A:97:86:FF:36
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130323a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:a02::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:32:c5:64:ea:a1:35:c4:57:52:1c:6f:3d:d6:e6:21:31:85:
         22:e7:6f:8c:ab:e6:64:ff:ce:dd:04:29:1b:2b:18:d6:cc:97:
         5b:4a:1d:81:bc:7e:e2:45:c8:47:56:28:5e:b5:67:6c:04:bb:
         94:16:99:bc:36:01:bc:e1:0d:81:7f:02:52:72:f9:e9:55:6a:
         19:8c:58:b0:86:ed:82:08:e4:46:07:80:b5:3d:3c:6a:cc:ef:
         1f:e8:f1:a5:b5:0e:67:0b:eb:b5:74:bb:8c:75:30:30:a9:17:
         95:1c:e3:ba:b3:ab:69:56:40:1f:0c:50:c8:ee:78:e5:4c:f3:
         ff:87:da:d0:00:29:e8:0d:7d:5d:04:81:95:c7:33:b7:1b:b3:
         d7:fb:25:d5:6d:f3:3c:8e:8b:68:1b:cc:07:dc:7f:c9:df:f1:
         c9:0e:a6:70:98:9d:36:68:c2:2f:c4:34:45:fe:a4:ac:2c:1b:
         53:df:5f:a2:1e:3d:a9:29:8e:e7:69:82:87:0c:fe:77:5d:78:
         e5:b9:10:60:85:a4:36:05:47:e3:ea:f7:c0:9d:41:a4:5e:32:
         7e:a3:85:32:7d:df:32:91:5f:fd:b2:09:5b:9d:11:f4:d9:e3:
         4f:89:ac:28:26:b3:31:f3:fc:87:74:89:40:ed:b9:c6:5c:f0:
         14:30:1d:54
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXb68Mo+SKBY+ZoBjqoMCczH0Q8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTEwMTcxMzE1MDFaFw0yNjEwMTYxMzIwMDFaMDMxMTAvBgNV
BAMTKDc4RDdBQzhGMTlCMzI2RENGNkJGOTU1M0RGQkFBODVBOTc4NkZGMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36l+Kvw0t9maXNtD/GoQW1Mtb
3Ttadt1ZcS250eaobQAEOHeGgfPiuKuT60qO8zb9bZwn8Scy/HXAa7ATFseJWfpw
jqKWFF4O7ndJpsfWrKPwnWP/d3p6IoI1QxGG3eaExZgPcj8T72T9kn5QKnjlqgTf
kZjNOZFvAJdLkYFKxmYGR3ICzvzPh3Pdkg8D+WmE/K1VSWwUvrjyy2KsB34kW5OZ
619R94lO1p479qEXGj8nA6p9JTfVeCS8wMyn5Z5XmgDNkV5Gb8Bj+GhM3ZfJ8HbZ
hkXVOwbY5HcB/l3U5fiIsRxUBzDCfxaeDWs0yIg3IjGyyn+DN7he0LdyhvdPAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUeNesjxmzJtz2v5VT37qoWpeG/zYwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTYxMzAz
MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQCgIwDQYJKoZIhvcNAQELBQADggEBABkyxWTqoTXEV1Icbz3W5iExhSLnb4yr
5mT/zt0EKRsrGNbMl1tKHYG8fuJFyEdWKF61Z2wEu5QWmbw2AbzhDYF/AlJy+elV
ahmMWLCG7YII5EYHgLU9PGrM7x/o8aW1DmcL67V0u4x1MDCpF5Uc47qzq2lWQB8M
UMjueOVM8/+H2tAAKegNfV0EgZXHM7cbs9f7JdVt8zyOi2gbzAfcf8nf8ckOpnCY
nTZowi/ENEX+pKwsG1PfX6IePakpjudpgocM/nddeOW5EGCFpDYFR+Pq98CdQaRe
Mn6jhTJ93zKRX/2yCVudEfTZ40+JrCgmszHz/Id0iUDtucZc8BQwHVQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:23 2025 by rpki-client