Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
File:                     323830313a303a32303a3a2f34382d3634203d3e203631343638.roa (raw, json)
Hash identifier:          qaFVM1BLZ8zxqjSmZusmvfi1XZushXPBUshqAwb2zeg=
Subject key identifier:   EE:86:B4:B7:A7:C1:20:9C:A3:AC:F0:E6:68:53:23:3A:39:3E:11:69
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       0C503D4A3D10E9C800B5E61E724A359DB59E0E20
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
Signing time:             Wed 15 Oct 2025 16:50:21 +0000
ROA not before:           Wed 15 Oct 2025 16:45:21 +0000
ROA not after:            Wed 14 Oct 2026 16:50:21 +0000
asID:                     61468
IP address blocks:        2801:0:20::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:50:3d:4a:3d:10:e9:c8:00:b5:e6:1e:72:4a:35:9d:b5:9e:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Oct 15 16:45:21 2025 GMT
            Not After : Oct 14 16:50:21 2026 GMT
        Subject: CN=EE86B4B7A7C1209CA3ACF0E66853233A393E1169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:fa:82:cc:e5:49:36:ab:59:07:dc:42:b6:
                    66:b7:c0:ab:cc:f1:8a:7d:9f:94:9d:d2:e4:39:d6:
                    4c:c4:07:eb:ad:14:20:7a:5f:e6:19:cd:4f:00:7e:
                    36:3a:56:94:06:19:2e:73:97:a6:ff:16:7e:f1:16:
                    e9:d9:b1:c6:fb:c5:c2:55:8f:26:f8:3f:33:f6:97:
                    3f:d2:9e:c6:d7:85:5c:fb:48:df:8a:74:fb:ad:16:
                    5e:65:6b:db:d9:71:f0:dd:72:c1:81:24:57:21:b9:
                    3f:d9:a0:0a:27:bf:ce:ea:ee:ba:d7:38:1c:48:04:
                    a8:cb:c8:61:1d:5a:c4:09:97:11:51:df:fc:7b:f3:
                    66:c1:4a:31:8e:18:e4:ad:2c:09:35:bb:9e:81:10:
                    36:63:0c:ca:5d:3c:60:b4:81:2d:75:f7:df:9c:15:
                    9e:d8:83:73:33:65:75:0d:8f:eb:bb:82:c5:a3:3e:
                    92:df:24:88:74:6e:4c:a7:40:8b:33:ed:85:eb:c8:
                    8e:f6:1e:12:15:77:2a:a5:00:54:41:5f:5c:fe:b2:
                    46:f0:d1:6a:b1:90:c5:0a:00:14:38:19:28:4c:c6:
                    f4:e1:09:8a:ba:ba:54:3f:f3:42:b9:3d:16:6f:42:
                    86:0e:5f:46:8f:ea:03:78:82:d4:fe:74:d3:d3:6a:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:B4:B7:A7:C1:20:9C:A3:AC:F0:E6:68:53:23:3A:39:3E:11:69
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:88:4a:0f:91:a7:1b:41:af:a7:7e:9f:87:d4:d5:23:e2:90:
         3c:5e:34:7c:42:f5:fd:e0:01:df:37:76:96:7a:92:b3:94:4f:
         d4:bd:e5:e9:c9:e7:41:80:34:bf:23:cf:3e:91:46:a2:bb:8e:
         b2:0b:ec:01:75:e2:b9:0f:46:82:b0:f5:ff:5c:d3:77:fe:0e:
         ea:9e:ff:ca:b8:26:c6:48:d1:14:8f:08:09:61:32:bd:b9:8c:
         de:c1:d6:d4:50:6e:d4:ef:a0:60:8a:4e:3d:69:c2:48:46:35:
         06:68:2b:3d:92:07:a4:1e:c6:24:41:32:ef:e1:54:66:4d:44:
         c2:1c:1d:64:ef:89:e9:d9:1a:a8:44:39:4f:9a:68:16:4b:2b:
         36:1c:a9:5c:03:38:23:d3:3f:43:be:a1:41:0b:92:7e:28:68:
         f6:b5:10:cb:cc:90:39:41:3d:d2:f5:14:ce:66:08:2b:fb:a6:
         23:9a:ab:fc:4b:53:16:e6:7c:32:09:ef:8f:b8:bc:af:34:c5:
         a1:e9:49:60:35:53:71:86:48:70:d2:43:f1:3f:27:e8:44:cb:
         98:d2:d5:4d:25:13:f8:4a:4c:9f:1a:3b:0f:08:ef:c7:bb:ae:
         9e:b8:00:37:cf:5d:c3:23:f1:96:37:eb:ad:8d:c3:d6:f8:30:
         1e:a9:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:14:10 2025 by rpki-client