Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
File:                     323830363a3432343a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          6Q4UTM/CnQ4mGgBP9DUCUOtuweIp69Hx7WcVfpINFCI=
Subject key identifier:   45:74:02:29:22:94:DE:E7:73:E1:3E:F7:72:D6:53:A2:0E:74:A8:F9
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       25D8CB6D01BA40E4CD264EB927DC125CDCBEB563
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 06 Oct 2025 21:49:42 +0000
ROA not before:           Mon 06 Oct 2025 21:44:42 +0000
ROA not after:            Mon 05 Oct 2026 21:49:42 +0000
asID:                     0
IP address blocks:        2806:424::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d8:cb:6d:01:ba:40:e4:cd:26:4e:b9:27:dc:12:5c:dc:be:b5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Oct  6 21:44:42 2025 GMT
            Not After : Oct  5 21:49:42 2026 GMT
        Subject: CN=457402292294DEE773E13EF772D653A20E74A8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:9a:18:9b:63:7e:6f:a4:1d:1d:b8:5a:58:
                    08:79:54:b7:a7:6b:87:17:e2:fb:e6:77:c8:05:cf:
                    a8:c6:c0:ec:31:58:e9:00:db:22:3e:27:77:f2:2b:
                    15:a0:69:65:7e:7a:cb:92:cf:33:13:30:74:40:53:
                    0e:0c:64:82:e6:4b:2e:e8:81:83:19:95:41:53:db:
                    5c:d0:9a:ca:91:8b:ff:5e:0f:0d:2f:13:27:d7:c8:
                    b5:9c:34:4b:b0:0c:6d:73:f9:50:92:a9:1b:b1:f4:
                    f9:8a:22:e8:8d:bb:25:5c:34:84:aa:d9:54:d1:88:
                    9f:fd:72:ce:b2:50:cb:fd:a9:ac:6c:c4:da:38:23:
                    b6:56:34:1f:72:ba:a8:58:7e:34:1e:e6:96:f9:96:
                    53:9f:e7:12:91:cb:3c:cf:27:1f:5f:5d:e1:15:59:
                    a6:1f:a2:6e:b6:25:c1:33:10:26:4c:ea:b3:a2:18:
                    67:fc:16:93:bc:69:44:1a:ee:25:49:b4:33:bb:a1:
                    fa:b7:ef:25:06:04:60:de:e4:88:88:f7:3f:5b:03:
                    1d:ec:0a:a1:5d:cf:9a:4a:b9:bb:1c:f9:19:69:7e:
                    64:8b:cc:68:5f:23:74:87:e2:39:30:94:6c:03:49:
                    28:9a:0d:9d:20:ff:8b:ad:18:18:98:70:d9:5d:3b:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:02:29:22:94:DE:E7:73:E1:3E:F7:72:D6:53:A2:0E:74:A8:F9
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:424::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:75:95:0f:e9:5d:66:6b:5e:6d:89:93:6e:44:4c:94:43:
         21:86:19:66:0f:fb:da:29:92:fd:54:ae:ea:9d:b5:f4:bc:95:
         27:b6:51:40:68:24:53:ac:61:38:31:b3:49:74:7c:6e:91:e0:
         71:53:72:26:9b:00:09:27:23:84:22:6f:30:6e:c7:8d:ce:24:
         44:5e:eb:7c:59:bd:8d:6a:dd:ed:ed:5e:68:76:f9:e4:90:0e:
         f4:f2:9b:e9:fd:a9:69:1f:56:da:3f:44:a2:b0:05:36:d2:9e:
         bd:13:9b:0e:9c:68:9c:51:ec:a6:59:5e:c0:06:40:1b:9d:bb:
         5a:52:51:ed:84:14:42:22:97:81:d0:1d:b8:b7:90:74:77:60:
         8a:b2:11:9e:ac:61:60:a5:ba:9b:e6:11:15:a6:4b:06:07:92:
         0a:8e:4c:14:7e:35:c2:55:fd:03:b4:88:1d:55:52:76:0a:2b:
         d1:28:97:64:8e:6e:66:75:07:ac:ec:4a:05:36:c0:64:65:ce:
         72:76:b1:43:5a:85:1c:4c:97:d9:69:ec:ae:7a:6e:8c:31:ba:
         b1:cd:72:8c:bd:d6:f2:16:f8:8c:54:a4:90:3b:f0:c0:55:86:
         72:d8:88:65:05:88:f9:d3:af:d1:81:23:59:54:cb:ee:48:f5:
         d9:ad:7d:ca
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUJdjLbQG6QOTNJk65J9wSXNy+tWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwODhENkZFQzNGRDE0QjcxREVEQjc4ODYwQzkwRDgy
NTU3MTQ2NjAeFw0yNTEwMDYyMTQ0NDJaFw0yNjEwMDUyMTQ5NDJaMDMxMTAvBgNV
BAMTKDQ1NzQwMjI5MjI5NERFRTc3M0UxM0VGNzcyRDY1M0EyMEU3NEE4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxJoYm2N+b6QdHbhaWAh5VLen
a4cX4vvmd8gFz6jGwOwxWOkA2yI+J3fyKxWgaWV+esuSzzMTMHRAUw4MZILmSy7o
gYMZlUFT21zQmsqRi/9eDw0vEyfXyLWcNEuwDG1z+VCSqRux9PmKIuiNuyVcNISq
2VTRiJ/9cs6yUMv9qaxsxNo4I7ZWNB9yuqhYfjQe5pb5llOf5xKRyzzPJx9fXeEV
WaYfom62JcEzECZM6rOiGGf8FpO8aUQa7iVJtDO7ofq37yUGBGDe5IiI9z9bAx3s
CqFdz5pKubsc+RlpfmSLzGhfI3SH4jkwlGwDSSiaDZ0g/4utGBiYcNldO5yBAgMB
AAGjggK/MIICuzAdBgNVHQ4EFgQURXQCKSKU3udz4T73ctZTog50qPkwHwYDVR0j
BBgwFoAUQgiNb+w/0Utx3tt4hgyQ2CVXFGYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RTgyMUU2QjA3NTRGMkI0Q0U0NzUyMUYyMUUzRTczQ0I3
QUEyMjU4MEI5NUY5QzcyN0FCNjc2MEYyNUE1MDI4LzAvNDIwODhENkZFQzNGRDE0
QjcxREVEQjc4ODYwQzkwRDgyNTU3MTQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjA4OEQ2RkVDM0ZEMTRCNzFE
RURCNzg4NjBDOTBEODI1NTcxNDY2LmNlcjCBuwYIKwYBBQUHAQsEga4wgaswgagG
CCsGAQUFBzALhoGbcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUU4MjFFNkIwNzU0RjJCNENFNDc1MjFGMjFFM0U3M0NCN0FBMjI1ODBC
OTVGOUM3MjdBQjY3NjBGMjVBNTAyOC8wLzMyMzgzMDM2M2EzNDMyMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgGBCQAADANBgkqhkiG9w0B
AQsFAAOCAQEARNB1lQ/pXWZrXm2Jk25ETJRDIYYZZg/72imS/VSu6p219LyVJ7ZR
QGgkU6xhODGzSXR8bpHgcVNyJpsACScjhCJvMG7Hjc4kRF7rfFm9jWrd7e1eaHb5
5JAO9PKb6f2paR9W2j9EorAFNtKevRObDpxonFHspllewAZAG527WlJR7YQUQiKX
gdAduLeQdHdgirIRnqxhYKW6m+YRFaZLBgeSCo5MFH41wlX9A7SIHVVSdgor0SiX
ZI5uZnUHrOxKBTbAZGXOcnaxQ1qFHEyX2WnsrnpujDG6sc1yjL3W8hb4jFSkkDvw
wFWGctiIZQWI+dOv0YEjWVTL7kj12a19yg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:06 2025 by rpki-client