Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/323030313a313232613a3a2f33322d3634203d3e20323733323836.roa
File:                     323030313a313232613a3a2f33322d3634203d3e20323733323836.roa (raw, json)
Hash identifier:          NMlOJE/vQm37Grl2h+Q+cYwXjoLF53tYV2O9zBHGXgE=
Subject key identifier:   AC:6D:AE:1F:B8:C0:17:DE:DD:36:33:A6:E0:04:46:32:36:AF:FD:A9
Certificate issuer:       /CN=F317B5F7C42B76D837E0F17E9D3F49A3020B03FD
Certificate serial:       2FD7CF2EF6AF13CA1EC159A36C88538FBB895F6A
Authority key identifier: F3:17:B5:F7:C4:2B:76:D8:37:E0:F1:7E:9D:3F:49:A3:02:0B:03:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/323030313a313232613a3a2f33322d3634203d3e20323733323836.roa
Signing time:             Wed 15 Oct 2025 21:10:00 +0000
ROA not before:           Wed 15 Oct 2025 21:05:00 +0000
ROA not after:            Wed 14 Oct 2026 21:10:00 +0000
asID:                     273286
IP address blocks:        2001:122a::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d7:cf:2e:f6:af:13:ca:1e:c1:59:a3:6c:88:53:8f:bb:89:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F317B5F7C42B76D837E0F17E9D3F49A3020B03FD
        Validity
            Not Before: Oct 15 21:05:00 2025 GMT
            Not After : Oct 14 21:10:00 2026 GMT
        Subject: CN=AC6DAE1FB8C017DEDD3633A6E004463236AFFDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:25:cd:40:85:64:e3:27:55:7a:49:33:52:
                    3c:85:a1:d0:09:28:c0:e0:01:63:52:82:44:59:29:
                    b2:68:ad:03:e2:7b:dd:a5:c0:91:fa:95:d2:fc:80:
                    90:98:e6:d6:1f:bc:5a:e8:ff:f0:d2:b0:fc:b6:5b:
                    8c:bb:65:68:39:46:6b:f9:d7:cf:1c:bb:dc:08:41:
                    c4:86:fc:cc:93:33:31:6f:08:3f:39:d8:a5:1c:4f:
                    c4:e8:31:56:31:71:6d:ad:71:7e:59:73:53:0b:23:
                    57:83:ad:02:eb:4a:fd:e7:89:f9:eb:cb:59:77:a1:
                    b2:f9:c2:9a:1f:6c:50:41:e7:f8:8b:19:8a:7e:b5:
                    63:2d:b8:b8:03:3c:c6:3d:f9:81:78:2c:70:22:7c:
                    b9:b9:b7:06:bd:f2:c4:8f:79:bb:4e:59:9f:17:26:
                    da:c6:d8:08:0f:e2:24:40:b2:c9:94:49:b0:61:c0:
                    ee:73:7c:16:04:12:e6:4a:e9:d9:9e:31:7b:e3:7b:
                    16:fa:cf:db:e7:06:56:91:37:fc:b2:81:94:28:2f:
                    67:71:89:cc:dd:0e:55:5b:fc:5b:80:68:36:9a:02:
                    b4:d1:f1:27:a3:d3:00:24:c0:57:77:53:98:14:e5:
                    48:94:53:c7:19:2a:e6:7a:c2:eb:fa:57:c7:e4:14:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:AE:1F:B8:C0:17:DE:DD:36:33:A6:E0:04:46:32:36:AF:FD:A9
            X509v3 Authority Key Identifier:
                keyid:F3:17:B5:F7:C4:2B:76:D8:37:E0:F1:7E:9D:3F:49:A3:02:0B:03:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F317B5F7C42B76D837E0F17E9D3F49A3020B03FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32FB74FD965BAF258B260F99FB66273A2C7DD3724EB08236913A2767766B97AA/0/323030313a313232613a3a2f33322d3634203d3e20323733323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:122a::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:57:9a:87:a0:d0:47:df:a4:92:b0:dc:63:77:1c:14:ba:8e:
         3d:ed:10:96:32:a0:55:b5:73:97:b7:bd:74:d1:c2:94:30:cf:
         ba:07:c4:ee:b2:21:02:7d:31:f5:11:eb:ab:60:cd:9b:ba:d0:
         a1:c9:69:d1:1b:d2:5a:dd:46:56:fa:73:12:e1:03:93:9b:94:
         a7:e4:9b:07:af:1b:97:7a:6a:06:c5:92:56:13:61:19:0e:b8:
         9f:ed:ab:3d:03:e7:b0:77:e4:05:2d:d6:02:3a:4e:0d:3f:32:
         70:cb:86:db:cd:29:32:aa:85:43:d8:19:6d:6a:23:d0:4b:83:
         0d:17:1a:03:62:21:cc:2b:9c:c3:2d:7f:13:9d:6a:af:70:b0:
         13:f0:96:4f:05:57:d7:29:f7:b9:50:46:64:66:c3:43:c1:d4:
         ed:2e:84:f3:d6:5b:a4:26:3b:05:1a:fe:de:f8:a0:8e:7c:dd:
         90:4a:64:34:40:84:01:3a:f0:30:7b:a3:ae:08:29:42:73:75:
         b0:79:f6:a8:59:00:b4:c7:b0:19:7a:f3:6a:68:c0:da:72:28:
         6a:fb:95:58:95:c0:ce:75:8d:fc:a7:00:c3:64:89:ae:c2:29:
         58:ff:c4:f8:b1:12:e0:9b:39:2e:f7:a1:a5:9d:a1:d7:03:93:
         f7:7a:a6:fc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL9fPLvavE8oewVmjbIhTj7uJX2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxN0I1RjdDNDJCNzZEODM3RTBGMTdFOUQzRjQ5QTMw
MjBCMDNGRDAeFw0yNTEwMTUyMTA1MDBaFw0yNjEwMTQyMTEwMDBaMDMxMTAvBgNV
BAMTKEFDNkRBRTFGQjhDMDE3REVERDM2MzNBNkUwMDQ0NjMyMzZBRkZEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveyXNQIVk4ydVekkzUjyFodAJ
KMDgAWNSgkRZKbJorQPie92lwJH6ldL8gJCY5tYfvFro//DSsPy2W4y7ZWg5Rmv5
188cu9wIQcSG/MyTMzFvCD852KUcT8ToMVYxcW2tcX5Zc1MLI1eDrQLrSv3nifnr
y1l3obL5wpofbFBB5/iLGYp+tWMtuLgDPMY9+YF4LHAifLm5twa98sSPebtOWZ8X
JtrG2AgP4iRAssmUSbBhwO5zfBYEEuZK6dmeMXvjexb6z9vnBlaRN/yygZQoL2dx
iczdDlVb/FuAaDaaArTR8Sej0wAkwFd3U5gU5UiUU8cZKuZ6wuv6V8fkFFCNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUrG2uH7jAF97dNjOm4ARGMjav/akwHwYDVR0j
BBgwFoAU8xe198Qrdtg34PF+nT9JowILA/0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMkZCNzRGRDk2NUJBRjI1OEIyNjBGOTlGQjY2MjczQTJD
N0REMzcyNEVCMDgyMzY5MTNBMjc2Nzc2NkI5N0FBLzAvRjMxN0I1RjdDNDJCNzZE
ODM3RTBGMTdFOUQzRjQ5QTMwMjBCMDNGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzE3QjVGN0M0MkI3NkQ4MzdF
MEYxN0U5RDNGNDlBMzAyMEIwM0ZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzJGQjc0RkQ5NjVCQUYyNThCMjYwRjk5RkI2NjI3M0EyQzdERDM3MjRF
QjA4MjM2OTEzQTI3Njc3NjZCOTdBQS8wLzMyMzAzMDMxM2EzMTMyMzI2MTNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczMzMyMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABEiow
DQYJKoZIhvcNAQELBQADggEBAFNXmoeg0EffpJKw3GN3HBS6jj3tEJYyoFW1c5e3
vXTRwpQwz7oHxO6yIQJ9MfUR66tgzZu60KHJadEb0lrdRlb6cxLhA5OblKfkmwev
G5d6agbFklYTYRkOuJ/tqz0D57B35AUt1gI6Tg0/MnDLhtvNKTKqhUPYGW1qI9BL
gw0XGgNiIcwrnMMtfxOdaq9wsBPwlk8FV9cp97lQRmRmw0PB1O0uhPPWW6QmOwUa
/t74oI583ZBKZDRAhAE68DB7o64IKUJzdbB59qhZALTHsBl682powNpyKGr7lViV
wM51jfynAMNkia7CKVj/xPixEuCbOS73oaWdodcDk/d6pvw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:54 2025 by rpki-client