Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3437203d3e20323734313535.roa
File:                     323830333a313964303a3a2f33322d3437203d3e20323734313535.roa (raw, json)
Hash identifier:          Rt28m9eoyinaE/tziE9AJzngAGuSUmp2i+EhIn7rPfo=
Subject key identifier:   8C:C4:6D:43:37:D7:F5:33:D3:29:92:8C:2C:70:8D:58:0A:1D:2C:13
Certificate issuer:       /CN=101B8A236C6EF2E51C52EE398D6997C8EB2D1052
Certificate serial:       4E6B287ABD8EB1A27CF7A3506F8E9A60CC9995B7
Authority key identifier: 10:1B:8A:23:6C:6E:F2:E5:1C:52:EE:39:8D:69:97:C8:EB:2D:10:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3437203d3e20323734313535.roa
Signing time:             Fri 17 Oct 2025 19:35:00 +0000
ROA not before:           Fri 17 Oct 2025 19:30:00 +0000
ROA not after:            Fri 16 Oct 2026 19:35:00 +0000
asID:                     274155
IP address blocks:        2803:19d0::/32 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6b:28:7a:bd:8e:b1:a2:7c:f7:a3:50:6f:8e:9a:60:cc:99:95:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B8A236C6EF2E51C52EE398D6997C8EB2D1052
        Validity
            Not Before: Oct 17 19:30:00 2025 GMT
            Not After : Oct 16 19:35:00 2026 GMT
        Subject: CN=8CC46D4337D7F533D329928C2C708D580A1D2C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:c7:d9:b7:71:3c:91:58:60:2b:e7:f9:19:
                    e5:47:52:b3:46:c3:71:ef:1d:3e:d6:5c:84:b3:54:
                    c4:63:5c:6a:a3:70:e5:21:87:7e:d7:61:f0:05:5d:
                    32:ef:a7:33:38:94:7b:a6:38:ef:a2:8c:0b:69:1a:
                    c4:bc:10:cd:01:d4:89:ee:57:f8:7c:55:2b:b0:bb:
                    52:72:14:b4:08:3b:75:4b:77:bf:92:f7:fa:64:d5:
                    5a:db:9b:84:37:5b:0a:38:b7:4d:80:a5:66:c1:74:
                    89:1a:51:b9:d1:41:6d:cd:84:60:f4:81:d2:68:63:
                    19:8b:93:54:4e:75:4b:56:83:8b:f5:da:ae:8b:21:
                    88:53:da:58:e6:4a:9e:91:eb:1b:2f:71:0b:ca:4c:
                    50:cb:69:c2:83:4f:3f:56:4f:6d:22:04:15:2b:7b:
                    a0:80:b5:84:ae:10:83:4c:a9:9e:f1:30:af:41:2e:
                    6c:5f:fe:e3:c7:c5:ea:58:d2:f8:78:ab:38:d4:2c:
                    34:45:93:22:a9:b8:c5:81:3c:42:71:5e:56:3b:0d:
                    7a:4b:ce:47:30:33:af:09:a5:33:1a:a8:a7:ef:8c:
                    5c:22:22:be:37:16:d5:4f:a7:3d:c5:df:bd:5e:fb:
                    db:35:d9:52:69:96:9d:fa:58:ad:38:ae:2c:a8:ac:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:6D:43:37:D7:F5:33:D3:29:92:8C:2C:70:8D:58:0A:1D:2C:13
            X509v3 Authority Key Identifier:
                keyid:10:1B:8A:23:6C:6E:F2:E5:1C:52:EE:39:8D:69:97:C8:EB:2D:10:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/101B8A236C6EF2E51C52EE398D6997C8EB2D1052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3437203d3e20323734313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:37:c9:e2:9a:76:38:9e:ce:68:98:e7:0c:d3:4a:c5:d4:3c:
         99:98:92:e2:ac:33:2c:48:8d:c9:34:cb:7d:ea:0c:2b:71:dc:
         b8:ff:8d:98:e0:36:ed:d5:e7:da:e0:be:b0:e4:68:ae:9a:5c:
         d7:55:41:c9:f6:ac:5e:42:e7:74:6b:20:5e:19:d7:01:d7:85:
         78:db:53:f6:8f:49:e7:b9:2f:70:93:fb:b4:e7:70:14:7d:23:
         7e:ee:b9:45:65:c5:01:c5:34:bf:09:57:9d:e9:1c:46:89:65:
         b4:2d:44:ac:1d:a0:f0:22:72:ea:5f:d8:86:29:64:bd:c9:76:
         3d:1a:de:6a:e3:6d:e2:0b:d5:65:43:ff:31:e9:5f:44:4b:40:
         39:20:d9:14:84:a2:17:00:64:f9:ff:7f:72:44:a6:be:01:d8:
         26:ad:9f:ac:2f:d0:49:28:fa:33:10:b3:22:f7:61:80:d4:96:
         0c:27:8e:6a:da:7d:1f:5e:2c:7a:26:77:26:14:80:bd:d8:e6:
         9a:eb:ad:dd:b3:44:66:6d:99:55:29:13:ca:c2:5a:d7:6d:5b:
         a9:3d:31:fb:26:fe:ba:78:9f:d5:9b:82:8a:4a:cb:81:b0:e2:
         90:7a:8d:e7:2b:60:58:97:4c:ae:e2:2f:94:05:a5:b0:2c:c3:
         b6:c0:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:54 2025 by rpki-client