Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          gHfj8aiH379U0ebSASD+9ZQyHbFtPL56n++gZ4z54eM=
Subject key identifier:   D7:44:32:05:7B:69:56:52:C1:D1:AD:82:75:CC:64:87:E7:2E:0D:3A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       63D40EB0BC95754D3AA16318454A29FD2BC04137
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa
Signing time:             Fri 03 Oct 2025 15:25:00 +0000
ROA not before:           Fri 03 Oct 2025 15:20:00 +0000
ROA not after:            Fri 02 Oct 2026 15:25:00 +0000
asID:                     18678
IP address blocks:        2800:310:d06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:0e:b0:bc:95:75:4d:3a:a1:63:18:45:4a:29:fd:2b:c0:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Oct  3 15:20:00 2025 GMT
            Not After : Oct  2 15:25:00 2026 GMT
        Subject: CN=D74432057B695652C1D1AD8275CC6487E72E0D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:6b:17:1f:ff:b4:3c:88:68:74:c5:88:40:
                    36:62:08:9a:8e:4c:1c:24:2b:0b:52:31:d5:f5:f0:
                    0f:5b:58:e9:ba:05:85:c4:59:da:e5:30:36:04:7f:
                    17:ff:c9:e2:49:b5:cf:dc:28:31:ce:c7:b9:59:9c:
                    6c:7f:c7:45:80:27:65:91:d7:84:0f:5f:62:6c:00:
                    46:13:11:ab:86:21:05:de:c9:e9:c8:48:33:ac:35:
                    b7:06:bb:db:ac:18:b3:a5:41:97:93:70:5f:ac:5a:
                    83:03:e4:51:a6:08:37:b1:33:c6:a7:97:a2:c6:7f:
                    68:34:c5:40:4c:12:da:45:b0:0a:85:7c:cb:d1:4b:
                    20:91:74:fc:53:bd:d2:dc:93:2f:88:69:97:fa:fc:
                    31:8f:17:f5:89:7c:e2:77:ef:cf:c5:f6:eb:b3:04:
                    85:88:f8:89:fb:28:1d:56:e8:b7:9e:e8:63:d3:f1:
                    3d:01:f4:08:61:ba:a0:a1:a0:59:fc:66:f5:ba:50:
                    b1:0e:b7:67:9a:4e:de:d6:78:89:39:53:ef:9e:79:
                    18:3d:b6:f4:a7:d2:32:01:b7:28:da:82:4b:ee:0a:
                    da:fb:4b:a2:69:a0:bf:4a:7c:12:ae:18:ed:4f:85:
                    6d:6a:dc:fc:43:a8:17:4d:1d:0e:65:08:77:ca:35:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:32:05:7B:69:56:52:C1:D1:AD:82:75:CC:64:87:E7:2E:0D:3A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:d06::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:4a:95:59:31:81:0b:54:ac:5f:6b:26:87:43:84:c4:b9:
         cc:f9:4f:50:34:34:53:29:fb:5b:fb:8c:c9:71:bc:97:ad:24:
         20:ac:0e:d7:92:f5:12:74:60:69:31:73:75:de:ba:04:8b:2a:
         5a:2a:f8:12:0b:0e:4d:71:75:40:c9:ee:91:44:aa:75:e2:5b:
         1d:03:f9:4c:32:7e:b6:da:5e:88:de:40:c3:df:17:d0:27:b4:
         93:b9:c3:67:70:c4:3b:88:b5:39:63:47:a1:0b:28:a3:d3:fa:
         bf:65:70:f2:0c:38:a8:c1:28:0d:ba:2d:31:e6:79:61:23:af:
         de:82:a9:e0:b9:47:c6:25:14:0c:5c:a2:cb:01:fa:52:d6:a8:
         7e:a2:f0:82:eb:fd:7c:d3:47:e7:66:e4:89:7b:dd:a2:05:af:
         30:a1:30:40:ac:91:dc:25:56:23:a9:37:40:25:bd:ec:a2:d9:
         45:ec:84:e4:88:f3:e4:7e:29:4b:9b:78:10:65:8f:24:72:14:
         2b:bc:dc:ca:32:1d:5b:d4:a3:9b:e1:6e:35:e1:8e:a4:0a:f1:
         ab:04:5e:ce:fb:b3:b9:d0:08:47:d4:cb:03:8d:e2:7f:7f:9b:
         2b:12:a1:ac:2c:c4:f5:c4:de:63:ca:79:ad:fd:8a:89:b5:68:
         8f:11:b2:c7
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUY9QOsLyVdU06oWMYRUop/SvAQTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTEwMDMxNTIwMDBaFw0yNjEwMDIxNTI1MDBaMDMxMTAvBgNV
BAMTKEQ3NDQzMjA1N0I2OTU2NTJDMUQxQUQ4Mjc1Q0M2NDg3RTcyRTBEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHVmsXH/+0PIhodMWIQDZiCJqO
TBwkKwtSMdX18A9bWOm6BYXEWdrlMDYEfxf/yeJJtc/cKDHOx7lZnGx/x0WAJ2WR
14QPX2JsAEYTEauGIQXeyenISDOsNbcGu9usGLOlQZeTcF+sWoMD5FGmCDexM8an
l6LGf2g0xUBMEtpFsAqFfMvRSyCRdPxTvdLcky+IaZf6/DGPF/WJfOJ378/F9uuz
BIWI+In7KB1W6Lee6GPT8T0B9AhhuqChoFn8ZvW6ULEOt2eaTt7WeIk5U++eeRg9
tvSn0jIBtyjagkvuCtr7S6JpoL9KfBKuGO1PhW1q3PxDqBdNHQ5lCHfKNXpNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU10QyBXtpVlLB0a2Cdcxkh+cuDTowHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTY0MzAz
NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQDQYwDQYJKoZIhvcNAQELBQADggEBAFP4SpVZMYELVKxfayaHQ4TEucz5T1A0
NFMp+1v7jMlxvJetJCCsDteS9RJ0YGkxc3XeugSLKloq+BILDk1xdUDJ7pFEqnXi
Wx0D+UwyfrbaXojeQMPfF9AntJO5w2dwxDuItTljR6ELKKPT+r9lcPIMOKjBKA26
LTHmeWEjr96CqeC5R8YlFAxcossB+lLWqH6i8ILr/XzTR+dm5Il73aIFrzChMECs
kdwlViOpN0Alveyi2UXshOSI8+R+KUubeBBljyRyFCu83MoyHVvUo5vhbjXhjqQK
8asEXs77s7nQCEfUywON4n9/mysSoawsxPXE3mPKea39iom1aI8Rssc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:17 2025 by rpki-client