Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa
File:                     323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa (raw, json)
Hash identifier:          5kOXePjsA7evHIVm2+v11ePT05cGkeq8gJXSMcf+LPo=
Subject key identifier:   DB:91:1C:04:3A:AD:D6:93:A2:11:C0:D5:19:95:B2:52:38:40:51:F2
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       3049161A43C48A116CC49E759FA1F047CA730BB2
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa
Signing time:             Fri 10 Oct 2025 02:55:00 +0000
ROA not before:           Fri 10 Oct 2025 02:50:00 +0000
ROA not after:            Fri 09 Oct 2026 02:55:00 +0000
asID:                     52268
IP address blocks:        2800:a80:8010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:49:16:1a:43:c4:8a:11:6c:c4:9e:75:9f:a1:f0:47:ca:73:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Oct 10 02:50:00 2025 GMT
            Not After : Oct  9 02:55:00 2026 GMT
        Subject: CN=DB911C043AADD693A211C0D51995B252384051F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:2e:78:b6:1c:74:11:03:7e:a5:79:01:28:
                    00:a4:43:92:7e:86:df:65:69:ad:f9:27:70:2e:49:
                    1d:4c:dd:66:ee:00:03:97:ec:dc:a9:81:e9:2e:12:
                    18:f7:14:2c:82:24:35:09:4a:be:24:5d:cb:18:79:
                    5d:65:f6:44:cd:75:61:a2:17:66:3c:2a:fd:a1:d4:
                    a8:d6:bb:24:60:8d:03:8f:e1:1e:6a:e7:90:6e:63:
                    45:cb:88:b0:7d:9a:24:27:31:26:9a:80:ea:05:75:
                    ac:54:8f:cd:09:f3:6b:73:46:dc:41:36:bd:11:a7:
                    93:4c:b3:78:78:ab:f4:dc:34:81:d9:ee:6b:c2:16:
                    e8:b1:a2:42:67:50:9c:15:cf:cf:af:c7:b0:e8:7b:
                    69:c5:0f:35:4d:12:8c:7b:49:7f:17:f6:d7:d2:1f:
                    4d:46:17:c0:ab:dd:db:16:a7:f7:f5:77:4c:1f:2a:
                    b4:fd:f3:79:37:64:89:81:a5:32:c0:62:14:21:c5:
                    04:6a:e0:46:7e:77:b5:da:07:f4:30:77:59:cf:30:
                    6c:7f:db:3a:48:80:aa:5e:73:12:3e:ed:28:8c:f0:
                    76:30:b5:95:5c:27:c7:61:ae:75:55:25:b4:dd:48:
                    b8:12:00:ec:2a:80:c1:14:b2:43:be:08:a4:4a:02:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:91:1C:04:3A:AD:D6:93:A2:11:C0:D5:19:95:B2:52:38:40:51:F2
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:54:c3:08:fe:98:74:58:f0:ef:a9:3d:50:cb:8d:da:99:05:
         0e:66:a4:d0:aa:1b:96:6e:c4:3c:3f:b2:62:ee:a4:c8:b7:d6:
         03:e0:92:45:ea:22:6f:38:22:1e:52:3d:b6:84:ca:11:c3:a4:
         af:4b:ff:2b:5a:07:70:b1:64:37:74:f5:b1:48:cc:58:68:2f:
         21:0b:b1:41:7f:b4:2a:2d:e8:bd:f0:ea:78:88:e0:37:81:c2:
         0b:9a:2d:69:18:49:cb:f2:8b:9b:fc:0a:03:73:2b:96:6a:62:
         1f:04:3d:0b:4b:f4:17:f6:e9:ef:d6:17:6c:ef:76:8b:26:58:
         08:4b:42:fd:45:ab:18:a3:15:0a:5d:17:2a:67:d5:85:c0:8f:
         79:f0:a4:30:c4:d6:fc:9d:28:c9:0e:9a:74:8d:dc:b4:24:8e:
         2d:ce:d2:b3:28:2c:d6:64:f1:70:1c:44:e1:40:a0:b5:66:1a:
         48:bf:6c:0f:a1:1a:7d:db:40:ba:16:fd:89:bc:cb:3f:d9:6e:
         45:24:69:a4:91:e9:07:14:f9:88:52:26:39:d6:6f:02:02:6a:
         c0:d0:4c:26:c3:a8:11:98:cf:71:a6:66:d9:6f:86:4d:bd:92:
         9b:f7:57:75:64:30:e0:23:ba:32:2c:5c:2e:fa:96:50:af:4d:
         04:99:83:1f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUMEkWGkPEihFsxJ51n6HwR8pzC7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdFN0ZDMkM3REJC
Mjk1RkMwMjAeFw0yNTEwMTAwMjUwMDBaFw0yNjEwMDkwMjU1MDBaMDMxMTAvBgNV
BAMTKERCOTExQzA0M0FBREQ2OTNBMjExQzBENTE5OTVCMjUyMzg0MDUxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPS54thx0EQN+pXkBKACkQ5J+
ht9laa35J3AuSR1M3WbuAAOX7NypgekuEhj3FCyCJDUJSr4kXcsYeV1l9kTNdWGi
F2Y8Kv2h1KjWuyRgjQOP4R5q55BuY0XLiLB9miQnMSaagOoFdaxUj80J82tzRtxB
Nr0Rp5NMs3h4q/TcNIHZ7mvCFuixokJnUJwVz8+vx7Doe2nFDzVNEox7SX8X9tfS
H01GF8Cr3dsWp/f1d0wfKrT983k3ZImBpTLAYhQhxQRq4EZ+d7XaB/Qwd1nPMGx/
2zpIgKpecxI+7SiM8HYwtZVcJ8dhrnVVJbTdSLgSAOwqgMEUskO+CKRKAr0rAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU25EcBDqt1pOiEcDVGZWyUjhAUfIwHwYDVR0j
BBgwFoAUp5l5VJKYwQeyXGx+f8LH27KV/AIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBD
RUY4RDFBRjIyQUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEw
N0IyNUM2QzdFN0ZDMkM3REJCMjk1RkMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzk5Nzk1NDkyOThDMTA3QjI1
QzZDN0U3RkMyQzdEQkIyOTVGQzAyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURGRUNBMkQzOTEwQ0VGOEQxQUYy
MkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzMyMzgzMDMwM2E2MTM4MzAzYTM4MzAz
MTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzUzMjMyMzYzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgACoCAEDANBgkqhkiG9w0BAQsFAAOCAQEAm1TDCP6YdFjw76k9UMuN2pkFDmak
0Koblm7EPD+yYu6kyLfWA+CSReoibzgiHlI9toTKEcOkr0v/K1oHcLFkN3T1sUjM
WGgvIQuxQX+0Ki3ovfDqeIjgN4HCC5otaRhJy/KLm/wKA3MrlmpiHwQ9C0v0F/bp
79YXbO92iyZYCEtC/UWrGKMVCl0XKmfVhcCPefCkMMTW/J0oyQ6adI3ctCSOLc7S
sygs1mTxcBxE4UCgtWYaSL9sD6EafdtAuhb9ibzLP9luRSRppJHpBxT5iFImOdZv
AgJqwNBMJsOoEZjPcaZm2W+GTb2Sm/dXdWQw4CO6MixcLvqWUK9NBJmDHw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:10:33 2025 by rpki-client