Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330613a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6330613a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          CLcqV46TJfrIATb/dr2oFZQg6++rSnKZtmejjc7iUCA=
Subject key identifier:   27:7C:CD:67:1B:5B:60:4B:96:41:A5:37:C3:61:DE:E0:15:C4:12:BD
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       170B0617A1A0FA51A64B19492CB178A7A392F5D4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330613a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 03 Oct 2025 15:45:00 +0000
ROA not before:           Fri 03 Oct 2025 15:40:00 +0000
ROA not after:            Fri 02 Oct 2026 15:45:00 +0000
asID:                     18678
IP address blocks:        2800:310:c0a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0b:06:17:a1:a0:fa:51:a6:4b:19:49:2c:b1:78:a7:a3:92:f5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct  3 15:40:00 2025 GMT
            Not After : Oct  2 15:45:00 2026 GMT
        Subject: CN=277CCD671B5B604B9641A537C361DEE015C412BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:e8:f8:d9:94:56:f9:da:d5:dc:71:3a:ff:
                    88:e1:70:19:8b:a8:18:a5:95:db:87:42:b1:09:3d:
                    45:c5:5c:96:8a:22:f6:75:6f:ea:c5:68:eb:53:e9:
                    2f:49:c9:cc:89:8f:5b:1c:4a:4a:fe:70:3f:a5:48:
                    ae:b6:8e:20:2f:2e:68:f7:f9:2c:5a:15:75:ea:e7:
                    2d:6d:92:9c:77:1b:2a:ca:7e:4c:18:3c:4f:6b:c0:
                    07:e9:d1:54:06:41:13:5e:96:65:39:8c:c9:c8:b7:
                    db:e6:06:97:09:42:ab:33:55:cd:a7:a5:54:04:0d:
                    a8:e3:60:74:45:06:25:e3:59:7d:75:7d:0b:26:31:
                    04:27:8a:d8:f5:f9:f4:48:2e:f6:cf:cc:0c:2a:fa:
                    93:aa:c0:26:fe:8c:b1:34:cb:14:ca:7c:57:c2:4f:
                    71:bf:a7:69:ed:55:f2:ee:ac:fe:82:32:84:e3:c5:
                    cd:22:70:12:45:36:ca:71:4e:b9:1e:e0:0b:6f:f6:
                    8a:cf:6a:f6:65:72:a4:46:f0:90:92:57:85:9d:ce:
                    84:dc:e5:49:66:bb:d0:1c:fb:29:54:cf:59:c5:9e:
                    15:71:e0:cf:1c:29:4c:0f:3d:a0:c1:59:f7:b0:f9:
                    c8:c8:d0:75:f1:3f:d2:87:2c:ce:99:0f:8e:2a:e5:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:CD:67:1B:5B:60:4B:96:41:A5:37:C3:61:DE:E0:15:C4:12:BD
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330613a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:c0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:0d:cc:2b:70:ff:1d:40:af:a9:96:66:1b:c0:97:7e:47:
         f5:6f:10:f9:d5:ed:21:41:e2:38:d9:31:52:be:4a:8f:b5:a3:
         37:0f:59:73:9e:a6:74:31:b6:b6:01:49:27:87:32:fe:fc:e2:
         a9:5e:17:d8:c0:76:ff:6f:4c:02:f8:30:aa:2d:5b:a2:c1:7f:
         63:50:58:87:f3:ad:6e:e0:6b:05:d9:53:ef:4d:46:83:43:85:
         83:2d:57:d1:10:22:c4:2a:bc:8b:a7:81:1c:12:c1:4c:99:f6:
         b8:e1:19:50:64:2c:a3:a7:71:80:ee:b7:5a:24:d3:0f:7b:b8:
         d6:9e:2c:3d:d3:0e:58:60:88:35:22:17:38:93:43:d4:62:3f:
         d9:b4:36:e8:10:e8:0e:22:3e:e8:27:84:69:b5:6e:44:89:1e:
         ea:13:3a:1f:8e:d6:e9:e8:5d:91:b2:55:b0:35:30:7b:cd:ff:
         b3:30:f7:df:e9:7b:8c:1d:9c:de:e5:e4:57:ff:8b:3d:c7:5a:
         62:14:10:27:8e:bf:4d:47:5b:31:5c:7d:ef:ce:69:d2:18:6f:
         55:bb:a8:7b:72:8e:be:34:4e:21:35:b7:b2:75:ec:cc:8f:2c:
         7f:30:7d:73:c5:85:da:e9:1d:a2:5a:2c:c3:50:8f:25:1a:74:
         51:66:d4:82
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFwsGF6Gg+lGmSxlJLLF4p6OS9dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTEwMDMxNTQwMDBaFw0yNjEwMDIxNTQ1MDBaMDMxMTAvBgNV
BAMTKDI3N0NDRDY3MUI1QjYwNEI5NjQxQTUzN0MzNjFERUUwMTVDNDEyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v+j42ZRW+drV3HE6/4jhcBmL
qBillduHQrEJPUXFXJaKIvZ1b+rFaOtT6S9JycyJj1scSkr+cD+lSK62jiAvLmj3
+SxaFXXq5y1tkpx3GyrKfkwYPE9rwAfp0VQGQRNelmU5jMnIt9vmBpcJQqszVc2n
pVQEDajjYHRFBiXjWX11fQsmMQQnitj1+fRILvbPzAwq+pOqwCb+jLE0yxTKfFfC
T3G/p2ntVfLurP6CMoTjxc0icBJFNspxTrke4Atv9orPavZlcqRG8JCSV4WdzoTc
5Ulmu9Ac+ylUz1nFnhVx4M8cKUwPPaDBWfew+cjI0HXxP9KHLM6ZD44q5X5HAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUJ3zNZxtbYEuWQaU3w2He4BXEEr0wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTYzMzA2
MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQDAowDQYJKoZIhvcNAQELBQADggEBAGMtDcwrcP8dQK+plmYbwJd+R/VvEPnV
7SFB4jjZMVK+So+1ozcPWXOepnQxtrYBSSeHMv784qleF9jAdv9vTAL4MKotW6LB
f2NQWIfzrW7gawXZU+9NRoNDhYMtV9EQIsQqvIungRwSwUyZ9rjhGVBkLKOncYDu
t1ok0w97uNaeLD3TDlhgiDUiFziTQ9RiP9m0NugQ6A4iPugnhGm1bkSJHuoTOh+O
1unoXZGyVbA1MHvN/7Mw99/pe4wdnN7l5Ff/iz3HWmIUECeOv01HWzFcfe/OadIY
b1W7qHtyjr40TiE1t7J17MyPLH8wfXPFhdrpHaJaLMNQjyUadFFm1II=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:25 2025 by rpki-client