Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa
File:                     323830333a393164303a3a2f33322d3332203d3e20323734313336.roa (raw, json)
Hash identifier:          bA35BMjIns3GMrsBPP9xlP0l4oaOPU1GF7/pFPv/Y9A=
Subject key identifier:   CB:5B:2E:E2:8D:B1:27:D6:B6:3F:3D:25:B1:5D:A1:3C:6E:0A:CD:4A
Certificate issuer:       /CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
Certificate serial:       5FE629724C9EB0F68C2180643BB2CC40333AD4A2
Authority key identifier: 1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa
Signing time:             Thu 04 Sep 2025 15:15:00 +0000
ROA not before:           Thu 04 Sep 2025 15:10:00 +0000
ROA not after:            Thu 03 Sep 2026 15:15:00 +0000
asID:                     274136
IP address blocks:        2803:91d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 21:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:29:72:4c:9e:b0:f6:8c:21:80:64:3b:b2:cc:40:33:3a:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
        Validity
            Not Before: Sep  4 15:10:00 2025 GMT
            Not After : Sep  3 15:15:00 2026 GMT
        Subject: CN=CB5B2EE28DB127D6B63F3D25B15DA13C6E0ACD4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:81:72:4a:18:16:5e:f6:6c:ad:80:8a:dd:
                    90:f4:29:8e:19:fe:85:08:d7:8e:67:a4:ad:cb:c5:
                    16:c5:39:db:b8:18:db:7e:a5:1c:68:ab:05:0a:92:
                    a2:b3:af:0a:36:41:11:8a:7a:54:c5:35:2b:7f:85:
                    a0:68:c8:74:a8:24:cc:d1:2a:9d:44:38:0a:fa:6e:
                    19:97:bb:68:f1:14:c0:e1:27:bc:a9:20:38:d1:21:
                    1b:45:b4:a7:e6:55:1e:5b:56:42:62:b7:89:04:e4:
                    27:03:3c:64:55:d3:b5:0d:68:4c:3d:6a:6e:b5:2a:
                    a6:e2:78:a9:78:8b:31:aa:e8:7c:77:a9:85:36:b6:
                    2b:9d:7c:c6:12:7d:b7:ac:b8:b6:54:2a:76:8d:77:
                    f0:e2:fd:8a:72:a0:1b:88:05:0f:d7:0e:5c:f7:84:
                    2f:5a:de:f6:ef:5f:81:61:52:aa:96:e1:b3:dc:5e:
                    da:46:f9:58:fa:96:3a:bc:8c:4b:81:1b:3f:9c:18:
                    88:cc:9f:2a:68:bb:e3:93:0d:1b:03:a1:f8:a1:65:
                    1d:73:16:72:32:56:45:b7:33:2f:79:01:c7:59:5f:
                    7f:80:a7:56:83:ce:73:57:51:eb:82:48:d8:8e:29:
                    08:cb:db:b3:3a:8c:77:9e:12:b0:97:2b:4c:51:37:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:2E:E2:8D:B1:27:D6:B6:3F:3D:25:B1:5D:A1:3C:6E:0A:CD:4A
            X509v3 Authority Key Identifier:
                keyid:1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:91d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:0a:6e:e3:b1:24:b5:af:fc:f1:36:3a:00:0f:d5:b7:18:
         f7:6c:3e:47:cc:e8:b5:37:ea:b7:02:f7:0b:9e:bd:6a:a2:93:
         74:49:91:95:d0:52:d4:8a:c1:96:42:27:60:21:15:79:59:9c:
         3d:76:f3:23:c9:de:5c:35:58:2e:68:01:f6:d9:33:16:d2:e4:
         04:a5:ac:07:7e:cb:d7:58:0a:e2:75:18:11:38:2f:fd:d5:c9:
         13:fc:68:f2:b5:07:f6:8a:7e:a2:c0:96:ab:d5:e7:48:7a:7f:
         00:e3:fb:7f:f3:d9:df:c7:1c:56:2f:f8:b0:8f:5c:7f:7e:f3:
         ca:bc:ae:d2:61:f1:0f:c9:f0:dd:6c:b8:5e:33:98:dc:86:b6:
         68:7a:07:1a:7a:49:3b:8a:85:f4:b5:59:1f:ce:1e:54:bd:b9:
         ac:f7:c8:94:38:f5:8f:d5:b8:fe:8e:dc:bc:9f:3c:db:c9:03:
         6f:84:4d:40:0e:31:4c:af:14:25:9a:e8:55:0a:56:d0:5a:c7:
         86:a5:27:28:a0:fc:0f:e7:1c:92:ed:ff:75:d1:f4:6f:5a:71:
         cd:55:d8:f9:20:df:36:24:71:dc:57:a8:74:e7:65:58:cc:6a:
         22:47:04:42:4f:0a:64:60:93:6a:f6:92:60:18:3f:6d:f4:76:
         27:4f:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:55 2025 by rpki-client