Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f33322d3332203d3e20323637373837.roa
File:                     323830333a346661303a3a2f33322d3332203d3e20323637373837.roa (raw, json)
Hash identifier:          CW5SMkRe4UXY20BB0oYFiNNdIyoSdNwioXm0l9yJa9U=
Subject key identifier:   6C:32:57:C6:5F:FD:1E:2C:B8:B4:D3:C7:37:E3:65:75:E5:03:76:C3
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       569BE823FE304A7F547B7D43964359BD7AE74DB7
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f33322d3332203d3e20323637373837.roa
Signing time:             Tue 23 Sep 2025 23:48:16 +0000
ROA not before:           Tue 23 Sep 2025 23:43:16 +0000
ROA not after:            Tue 22 Sep 2026 23:48:16 +0000
asID:                     267787
IP address blocks:        2803:4fa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:e8:23:fe:30:4a:7f:54:7b:7d:43:96:43:59:bd:7a:e7:4d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Sep 23 23:43:16 2025 GMT
            Not After : Sep 22 23:48:16 2026 GMT
        Subject: CN=6C3257C65FFD1E2CB8B4D3C737E36575E50376C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:e2:d1:b5:a2:61:d5:8a:53:dd:9c:29:9d:
                    e3:0e:5d:5a:8a:13:14:2f:54:0b:f3:ba:6f:96:7d:
                    8a:66:bf:2a:6e:a1:41:63:02:c2:33:2f:b5:49:cb:
                    26:dc:d7:b6:31:23:5f:80:1f:34:17:6b:67:6b:40:
                    b9:20:ea:7a:25:fe:bb:d6:7f:57:d5:52:c0:92:9b:
                    28:d8:aa:f6:51:13:3f:61:43:0a:c2:87:33:ff:7f:
                    e2:18:6e:a4:b6:92:ce:7c:83:1b:bd:f5:62:41:27:
                    7c:f8:ff:dd:ff:f2:2e:0d:fb:ae:21:cd:9f:43:c1:
                    8f:5e:5c:8a:3f:88:7f:4f:27:e6:f6:8b:b8:b2:3a:
                    78:2b:a7:a6:67:70:ea:da:bb:4f:fa:09:bf:1b:42:
                    b9:d4:fa:be:9f:a7:88:e8:6e:19:3f:4c:c0:96:e6:
                    28:e0:ba:78:0d:bc:3e:81:dc:2b:d5:68:d2:c5:39:
                    f0:0a:f5:f5:4d:67:1a:42:57:c6:d4:db:da:6b:38:
                    28:0f:84:78:0f:0c:5f:cf:12:8b:51:78:a3:fa:32:
                    a9:41:6d:3b:a7:e6:11:4f:c6:5c:51:90:77:e8:b0:
                    5b:7b:a4:f5:97:e8:22:9a:93:bc:55:2e:eb:10:1b:
                    0f:85:9b:8b:43:1b:55:1d:42:82:5b:0b:ff:70:e2:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:32:57:C6:5F:FD:1E:2C:B8:B4:D3:C7:37:E3:65:75:E5:03:76:C3
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f33322d3332203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:7f:48:6d:dc:56:f7:9d:2a:0a:ad:80:ff:b5:1c:5b:36:
         0f:ea:75:87:36:75:16:a7:ab:3a:e3:55:f5:fa:e8:75:09:57:
         31:eb:74:40:6e:d5:3a:ff:a5:86:6d:88:c0:55:d6:fd:f0:6b:
         53:ad:6e:bf:f2:0b:34:1f:bf:e9:d6:7f:6e:e4:51:5e:37:06:
         17:51:be:83:04:ed:6d:91:b9:3d:63:89:e8:ad:57:ab:94:53:
         fc:d7:21:1c:a8:b7:a6:cf:ac:c9:f3:91:41:c1:ad:5d:80:cd:
         e7:bc:04:34:e5:77:37:28:6b:4f:4a:78:50:ac:df:ec:f2:62:
         b8:fa:df:7b:31:3d:dc:73:5e:a1:82:37:bc:81:47:9c:3a:59:
         f8:0f:b1:9b:bf:9e:b2:33:32:3b:48:c2:6f:43:f4:71:65:43:
         52:b3:56:df:2d:e0:ad:13:43:2a:2d:7d:dd:62:97:98:20:bb:
         69:95:38:7d:0f:29:90:36:dc:08:9b:09:54:dd:db:62:b0:6b:
         d0:3c:74:21:c0:ac:b7:cb:0d:c3:d3:47:80:cd:30:ed:c2:b6:
         93:4a:8c:07:e0:4c:f3:a9:cd:f7:cc:24:44:98:eb:64:5a:65:
         03:25:75:15:ea:0e:79:d3:84:99:a3:0d:0f:88:56:50:23:99:
         a8:47:ad:e6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVpvoI/4wSn9Ue31DlkNZvXrnTbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBMDU5MTM3MTJCMzE1REFFQjZEMTE2NzEyODQyOERE
N0I2RDM2MjAeFw0yNTA5MjMyMzQzMTZaFw0yNjA5MjIyMzQ4MTZaMDMxMTAvBgNV
BAMTKDZDMzI1N0M2NUZGRDFFMkNCOEI0RDNDNzM3RTM2NTc1RTUwMzc2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVe+LRtaJh1YpT3ZwpneMOXVqK
ExQvVAvzum+WfYpmvypuoUFjAsIzL7VJyybc17YxI1+AHzQXa2drQLkg6nol/rvW
f1fVUsCSmyjYqvZREz9hQwrChzP/f+IYbqS2ks58gxu99WJBJ3z4/93/8i4N+64h
zZ9DwY9eXIo/iH9PJ+b2i7iyOngrp6ZncOrau0/6Cb8bQrnU+r6fp4jobhk/TMCW
5ijgungNvD6B3CvVaNLFOfAK9fVNZxpCV8bU29prOCgPhHgPDF/PEotReKP6MqlB
bTun5hFPxlxRkHfosFt7pPWX6CKak7xVLusQGw+Fm4tDG1UdQoJbC/9w4mebAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbDJXxl/9Hiy4tNPHN+NldeUDdsMwHwYDVR0j
BBgwFoAUQ6BZE3ErMV2uttEWcShCjde202IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkI4ODc1RjRBRTEwMzJGNEMxOEU0RkFFNEI0NEIxQjlC
RUIyRkUwNTJGMzNDNjcyRTNCQjQyMkE0MTJDNjZBLzAvNDNBMDU5MTM3MTJCMzE1
REFFQjZEMTE2NzEyODQyOEREN0I2RDM2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0EwNTkxMzcxMkIzMTVEQUVC
NkQxMTY3MTI4NDI4REQ3QjZEMzYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJCODg3NUY0QUUxMDMyRjRDMThFNEZBRTRCNDRCMUI5QkVCMkZFMDUy
RjMzQzY3MkUzQkI0MjJBNDEyQzY2QS8wLzMyMzgzMDMzM2EzNDY2NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDT6Aw
DQYJKoZIhvcNAQELBQADggEBAHlvf0ht3Fb3nSoKrYD/tRxbNg/qdYc2dRanqzrj
VfX66HUJVzHrdEBu1Tr/pYZtiMBV1v3wa1Otbr/yCzQfv+nWf27kUV43BhdRvoME
7W2RuT1jieitV6uUU/zXIRyot6bPrMnzkUHBrV2Azee8BDTldzcoa09KeFCs3+zy
Yrj633sxPdxzXqGCN7yBR5w6WfgPsZu/nrIzMjtIwm9D9HFlQ1KzVt8t4K0TQyot
fd1il5ggu2mVOH0PKZA23AibCVTd22Kwa9A8dCHArLfLDcPTR4DNMO3CtpNKjAfg
TPOpzffMJESY62RaZQMldRXqDnnThJmjDQ+IVlAjmahHreY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:56:09 2025 by rpki-client