Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3332203d3e20323633373530.roa
File:                     323830333a396261303a3a2f33322d3332203d3e20323633373530.roa (raw, json)
Hash identifier:          QOMvJBDBVKYWry6bIk07PF9NV61HbM/5WPDcFZ8z+V0=
Subject key identifier:   C6:92:76:29:0C:1B:F8:C8:16:5B:F1:D6:A4:B3:66:D9:AF:B3:3B:90
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       526875CD39ACE04233F831AF72C07E490202DFB4
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3332203d3e20323633373530.roa
Signing time:             Fri 03 Oct 2025 13:49:26 +0000
ROA not before:           Fri 03 Oct 2025 13:44:26 +0000
ROA not after:            Fri 02 Oct 2026 13:49:26 +0000
asID:                     263750
IP address blocks:        2803:9ba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:68:75:cd:39:ac:e0:42:33:f8:31:af:72:c0:7e:49:02:02:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct  3 13:44:26 2025 GMT
            Not After : Oct  2 13:49:26 2026 GMT
        Subject: CN=C69276290C1BF8C8165BF1D6A4B366D9AFB33B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:01:6d:63:ac:2c:a0:2c:c0:64:2d:69:a2:
                    5c:5b:0f:e2:7b:5a:e0:b1:2b:38:40:3d:90:a3:bd:
                    85:44:c4:94:51:c2:74:58:ae:9c:a9:5e:2c:fb:18:
                    c5:8c:a6:a7:b3:33:8c:19:1b:ff:9f:4e:71:a5:2f:
                    60:d1:1f:3e:84:bd:f4:1b:4f:0c:e5:4e:42:6c:e5:
                    c6:f9:7c:76:48:8e:e7:e0:ec:ff:6f:b7:99:ff:74:
                    b6:62:e6:45:e9:36:50:fb:e4:61:b3:d9:e9:b3:74:
                    94:3e:89:6b:db:f0:1b:6f:fa:f2:d2:49:a3:1c:77:
                    20:47:b2:25:cb:69:c9:76:82:8f:a6:05:7b:b1:d8:
                    b4:8d:6a:0a:7f:0c:1c:3b:cf:d8:4f:24:47:3b:ba:
                    aa:da:39:dc:55:33:01:61:bd:18:cb:0f:4a:53:c1:
                    ba:3b:fe:ac:ca:66:68:e7:ca:6f:a7:a1:25:12:47:
                    01:c6:3d:6c:b2:d6:ba:f0:6a:b0:96:71:7c:01:06:
                    9d:d1:46:00:d7:51:16:7e:81:10:49:43:a6:04:2e:
                    ba:25:2a:04:ef:ab:75:71:66:e9:7c:f5:d9:9a:4c:
                    75:8b:ee:fd:66:af:4c:2c:cd:12:87:d9:40:a0:f2:
                    df:63:a7:28:ac:2b:dd:be:8e:92:6c:62:1e:4c:e2:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:92:76:29:0C:1B:F8:C8:16:5B:F1:D6:A4:B3:66:D9:AF:B3:3B:90
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3332203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:21:9b:84:8d:42:aa:7c:3e:68:a3:73:87:d7:50:b5:22:4b:
         a7:db:5e:8c:32:49:38:41:0c:7f:a8:b0:34:02:3a:9f:7e:1e:
         71:30:a1:54:23:15:5a:99:12:16:3e:5f:57:a3:83:51:67:a9:
         7c:d5:1c:f9:3c:2c:fc:f8:dc:13:cf:fd:e4:45:22:06:83:7f:
         dc:94:d8:3d:73:eb:ed:bf:20:cc:8b:f0:a3:7f:ab:d9:4c:59:
         41:82:a4:b2:67:e1:fe:13:17:12:fa:e2:d3:02:86:f1:0a:1c:
         8e:b7:f9:b0:5c:cb:48:31:58:7a:fd:bb:07:ce:06:b5:98:d4:
         79:cb:a9:e3:91:09:61:ba:01:df:de:6d:f1:ba:a3:2b:e7:73:
         dd:09:f2:55:43:90:c6:7f:f2:00:0f:58:c4:09:4f:22:96:7c:
         4e:d4:94:26:64:15:78:eb:a5:b0:4c:31:a7:cf:75:ac:c8:a2:
         e2:74:e8:7c:7e:b0:ec:8e:57:a3:a2:72:67:60:46:3c:52:ef:
         f2:51:a6:b7:4d:9c:f5:cd:31:3a:73:58:1d:c0:b0:fa:5a:85:
         af:b6:cb:75:a8:22:da:7a:27:8c:be:2c:5d:2a:e4:a2:90:23:
         35:78:33:4f:df:51:c5:68:47:04:1d:33:8f:af:29:4e:57:3d:
         3b:c5:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:27 2025 by rpki-client