Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/323830333a353261303a3a2f33322d3438203d3e203237393833.roa
File:                     323830333a353261303a3a2f33322d3438203d3e203237393833.roa (raw, json)
Hash identifier:          jLMAUBHK5fxfHllhnjbpF7FF+S4rceKUEVnXdTKDi6g=
Subject key identifier:   F6:64:AA:6C:05:22:4A:A0:1E:43:AA:FE:8D:FD:C0:87:C4:C4:67:9B
Certificate issuer:       /CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527
Certificate serial:       0A3D5095A63BE4E3A047562803B61A60863B204E
Authority key identifier: A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/323830333a353261303a3a2f33322d3438203d3e203237393833.roa
Signing time:             Mon 06 Oct 2025 20:50:00 +0000
ROA not before:           Mon 06 Oct 2025 20:45:00 +0000
ROA not after:            Mon 05 Oct 2026 20:50:00 +0000
asID:                     27983
IP address blocks:        2803:52a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3d:50:95:a6:3b:e4:e3:a0:47:56:28:03:b6:1a:60:86:3b:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527
        Validity
            Not Before: Oct  6 20:45:00 2025 GMT
            Not After : Oct  5 20:50:00 2026 GMT
        Subject: CN=F664AA6C05224AA01E43AAFE8DFDC087C4C4679B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:b5:1f:e1:e2:e3:6b:45:89:8a:fc:56:be:
                    12:c5:1c:4c:48:6a:eb:23:0e:3b:fa:e9:60:3d:60:
                    a5:0a:de:a7:c3:0c:b1:f1:fe:b6:5e:a4:c2:a9:01:
                    42:86:a1:e0:b7:2b:f7:28:dd:38:af:d3:a2:41:8b:
                    67:77:59:21:9a:ef:53:5c:ea:c2:6d:35:1b:85:05:
                    e7:a2:5c:05:a5:f3:90:6d:09:be:44:e0:4f:bb:0f:
                    56:06:ea:9e:79:3e:22:4d:59:aa:33:de:9e:4c:b6:
                    36:0f:98:21:9f:01:a3:d6:47:5f:79:d9:3d:33:dd:
                    5e:2e:16:be:5a:1c:65:e8:6c:e0:28:34:9d:d0:fc:
                    92:3d:e8:77:e3:ec:09:6a:6a:3d:e8:86:63:fb:80:
                    84:8b:68:5d:2b:85:5e:bd:4d:a7:f1:c8:ac:65:26:
                    ea:c8:05:2f:98:d8:4a:8a:0b:c6:98:36:61:08:7f:
                    7c:02:cd:1d:15:08:5f:24:88:34:f7:d3:a9:f7:91:
                    4d:bc:25:72:b7:99:67:ae:04:8e:83:2b:f7:17:48:
                    6d:17:32:43:97:75:21:a6:4d:e0:cd:44:89:42:61:
                    5c:38:7e:98:74:4b:18:33:03:10:dc:9d:a4:b5:20:
                    c4:fc:07:37:d8:30:27:8d:6f:15:91:39:11:8e:c6:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:AA:6C:05:22:4A:A0:1E:43:AA:FE:8D:FD:C0:87:C4:C4:67:9B
            X509v3 Authority Key Identifier:
                keyid:A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/323830333a353261303a3a2f33322d3438203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:a6:46:b4:95:5e:ed:e4:48:44:7a:07:f6:70:2a:6b:00:
         50:b8:ea:a4:a7:59:98:96:22:05:ab:61:eb:49:63:9d:06:0c:
         b0:74:81:c1:01:e6:d3:80:c8:ef:71:14:07:a4:f9:d2:2b:32:
         8f:f0:c5:8e:53:ba:84:99:22:0f:63:09:27:28:90:4c:6e:22:
         61:18:dc:82:9c:ec:41:06:93:9d:4c:ae:0a:54:2b:12:9d:34:
         1c:f2:00:fd:ef:63:17:a7:94:cf:c6:34:3c:b2:59:80:05:a8:
         d7:bb:97:5a:7a:7a:bd:4c:7b:42:9b:11:ff:33:fd:89:53:29:
         6b:b3:6c:3a:00:13:5b:cc:40:fd:1e:9a:a4:0f:e3:fd:f3:9c:
         a9:a4:16:f3:ca:b1:8a:71:d8:74:62:6e:52:45:1c:da:c6:8c:
         89:20:ef:36:27:f3:0a:f3:f0:4a:a0:a5:f5:ce:a4:c3:ce:61:
         3e:42:a4:66:92:56:a9:ad:5d:7f:a0:cc:44:22:2d:96:8b:b2:
         d6:12:2b:bc:6d:a4:26:01:1a:23:55:4d:36:c1:dc:42:d4:6d:
         50:3e:25:d5:4a:72:da:92:9b:4b:2e:37:3d:5e:94:a0:b4:08:
         49:28:6f:1c:44:9e:32:f4:f0:92:6c:93:eb:a8:fb:27:47:d8:
         21:df:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:32:49 2025 by rpki-client