Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa
File:                     323830313a3133353a3a2f34382d3438203d3e20323733313635.roa (raw, json)
Hash identifier:          DNGIloyff979pHkch95fmVr/qp/ztpeEiA/u3ZIF50o=
Subject key identifier:   28:BF:4C:D7:BC:99:AF:24:BA:5E:39:1E:FF:AF:72:1F:CE:10:C0:96
Certificate issuer:       /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial:       236A6E37679EC772FFFB9740E4830AAF6CFB1E79
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa
Signing time:             Sat 27 Sep 2025 11:49:02 +0000
ROA not before:           Sat 27 Sep 2025 11:44:02 +0000
ROA not after:            Sat 26 Sep 2026 11:49:02 +0000
asID:                     273165
IP address blocks:        2801:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6a:6e:37:67:9e:c7:72:ff:fb:97:40:e4:83:0a:af:6c:fb:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
        Validity
            Not Before: Sep 27 11:44:02 2025 GMT
            Not After : Sep 26 11:49:02 2026 GMT
        Subject: CN=28BF4CD7BC99AF24BA5E391EFFAF721FCE10C096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:9e:c4:81:cd:27:4e:8b:9a:79:7e:1c:da:
                    e0:c2:28:17:c0:d5:33:7b:a0:7a:f3:33:35:fd:46:
                    d5:9e:f5:ab:ee:02:b7:1f:f0:ba:7a:f8:04:72:5c:
                    b2:a5:40:6a:73:6c:62:2c:c5:4b:8d:f1:36:30:1f:
                    fa:5b:ad:60:89:52:0c:7c:96:c8:3e:e1:f9:0d:39:
                    d8:d6:90:3d:b3:df:e9:cc:e3:63:de:9e:41:49:f2:
                    aa:3c:cb:24:5b:f6:d9:8f:d6:36:00:14:c4:d9:4f:
                    d6:eb:e7:af:86:8d:b6:da:84:a5:b0:2c:fa:61:94:
                    f9:d6:b0:61:aa:94:e2:69:43:8f:75:f5:2e:fc:45:
                    9f:e9:4b:2c:f3:5a:12:b7:13:e5:52:50:86:a6:bd:
                    51:da:aa:7a:b8:0b:b3:6b:8f:b7:68:67:2a:83:b9:
                    0c:9a:50:7d:f4:02:5e:d7:28:23:7f:46:70:36:c5:
                    c3:11:b1:b3:4e:4e:65:23:74:8e:a4:0e:d7:e4:8d:
                    5d:b6:07:83:e6:6a:59:25:43:4d:6b:17:98:a3:b0:
                    7a:72:35:c1:b8:52:d0:ee:3a:cf:05:8a:b0:b0:d1:
                    00:7f:c6:9f:43:cb:74:8a:fa:84:0b:d9:51:a7:f7:
                    88:f6:2a:d1:db:36:67:29:5f:5c:89:43:16:1a:73:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:4C:D7:BC:99:AF:24:BA:5E:39:1E:FF:AF:72:1F:CE:10:C0:96
            X509v3 Authority Key Identifier:
                keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:135::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:f4:ed:b0:e6:bd:49:07:e6:08:83:86:b6:8c:b8:bc:4c:59:
         d2:9e:76:f7:55:98:2b:08:99:d7:c5:8d:03:bd:fc:89:03:fa:
         5f:09:3a:ba:52:b2:94:38:6d:9a:44:26:20:9b:2a:1e:f6:d7:
         ad:9d:d4:d8:5d:c4:c8:64:e5:92:29:7a:1f:7a:5b:75:1c:90:
         9e:c0:c1:95:b5:92:20:6a:f3:d3:16:33:45:ca:2f:39:91:7e:
         ec:23:35:92:6e:4d:06:f6:27:38:3c:8f:92:ea:a2:83:50:1b:
         11:2e:d0:d9:85:80:42:0a:59:be:ea:19:11:9a:f4:04:2b:31:
         fb:d6:df:27:e2:ad:83:57:7f:9f:af:3c:8e:a4:4d:c4:ce:cc:
         6c:e0:1d:be:3d:aa:39:1c:2d:3d:9c:96:a6:4c:62:54:68:4e:
         a9:3c:f6:ac:6b:2b:f8:15:3b:33:3e:79:51:bd:8b:11:63:94:
         60:d7:13:3e:7d:5e:47:a6:23:51:2d:97:62:ca:81:45:f3:d3:
         13:58:7a:de:60:61:2b:8e:92:c0:17:94:dc:2a:c8:e8:e0:4f:
         27:48:17:b3:aa:71:ea:99:e3:17:4d:44:2c:48:d1:2f:f8:3a:
         b2:92:ed:a5:20:f1:f0:e0:0b:5a:8a:92:d6:be:1b:b3:72:c7:
         2a:0e:7e:2f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUI2puN2eex3L/+5dA5IMKr2z7HnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRGODE0N0JGOTk2MjZEMTdBRkVFOTFFMTI0MjIzMDE0
NTlEMkM1NTAeFw0yNTA5MjcxMTQ0MDJaFw0yNjA5MjYxMTQ5MDJaMDMxMTAvBgNV
BAMTKDI4QkY0Q0Q3QkM5OUFGMjRCQTVFMzkxRUZGQUY3MjFGQ0UxMEMwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvp7Egc0nTouaeX4c2uDCKBfA
1TN7oHrzMzX9RtWe9avuArcf8Lp6+ARyXLKlQGpzbGIsxUuN8TYwH/pbrWCJUgx8
lsg+4fkNOdjWkD2z3+nM42PenkFJ8qo8yyRb9tmP1jYAFMTZT9br56+GjbbahKWw
LPphlPnWsGGqlOJpQ4919S78RZ/pSyzzWhK3E+VSUIamvVHaqnq4C7Nrj7doZyqD
uQyaUH30Al7XKCN/RnA2xcMRsbNOTmUjdI6kDtfkjV22B4PmalklQ01rF5ijsHpy
NcG4UtDuOs8FirCw0QB/xp9Dy3SK+oQL2VGn94j2KtHbNmcpX1yJQxYac2iLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKL9M17yZryS6Xjke/69yH84QwJYwHwYDVR0j
BBgwFoAU9PgUe/mWJtF6/ukeEkIjAUWdLFUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkRFN0ZGOUMzQTY2NTYxQUZFM0I4RDc3QTZGM0QwNjAw
ODI2Q0ZBRjQyQjFBMERBREEwNTkyQjlFMUQyRTk1LzAvRjRGODE0N0JGOTk2MjZE
MTdBRkVFOTFFMTI0MjIzMDE0NTlEMkM1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNEY4MTQ3QkY5OTYyNkQxN0FG
RUU5MUUxMjQyMjMwMTQ1OUQyQzU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZERTdGRjlDM0E2NjU2MUFGRTNCOEQ3N0E2RjNEMDYwMDgyNkNGQUY0
MkIxQTBEQURBMDU5MkI5RTFEMkU5NS8wLzMyMzgzMDMxM2EzMTMzMzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQE1AAAw
DQYJKoZIhvcNAQELBQADggEBAIv07bDmvUkH5giDhraMuLxMWdKedvdVmCsImdfF
jQO9/IkD+l8JOrpSspQ4bZpEJiCbKh72162d1NhdxMhk5ZIpeh96W3UckJ7AwZW1
kiBq89MWM0XKLzmRfuwjNZJuTQb2Jzg8j5LqooNQGxEu0NmFgEIKWb7qGRGa9AQr
MfvW3yfirYNXf5+vPI6kTcTOzGzgHb49qjkcLT2clqZMYlRoTqk89qxrK/gVOzM+
eVG9ixFjlGDXEz59XkemI1Etl2LKgUXz0xNYet5gYSuOksAXlNwqyOjgTydIF7Oq
ceqZ4xdNRCxI0S/4OrKS7aUg8fDgC1qKkta+G7NyxyoOfi8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:01:16 2025 by rpki-client