Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa
File:                     323830333a386564303a3a2f33322d3438203d3e20323734313035.roa (raw, json)
Hash identifier:          m3MLV0yRopCJNYL2bvxq3geehoB7hOPwu33KVEBuzRM=
Subject key identifier:   F1:5B:D2:0D:E2:F0:75:CB:F2:C4:6C:5C:8C:14:36:B7:4B:47:A7:FB
Certificate issuer:       /CN=46C0858AE0F902ECA4BDC8B3B9719707EEDB2009
Certificate serial:       430E5D1C9D53A449FACD8FB936F53083B2271670
Authority key identifier: 46:C0:85:8A:E0:F9:02:EC:A4:BD:C8:B3:B9:71:97:07:EE:DB:20:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa
Signing time:             Thu 16 Oct 2025 02:45:00 +0000
ROA not before:           Thu 16 Oct 2025 02:40:00 +0000
ROA not after:            Thu 15 Oct 2026 02:45:00 +0000
asID:                     274105
IP address blocks:        2803:8ed0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:5d:1c:9d:53:a4:49:fa:cd:8f:b9:36:f5:30:83:b2:27:16:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C0858AE0F902ECA4BDC8B3B9719707EEDB2009
        Validity
            Not Before: Oct 16 02:40:00 2025 GMT
            Not After : Oct 15 02:45:00 2026 GMT
        Subject: CN=F15BD20DE2F075CBF2C46C5C8C1436B74B47A7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:08:b7:33:bf:fd:cf:d1:d9:e3:bf:d8:4a:
                    ef:5d:aa:7d:30:16:07:e3:bb:79:ce:65:25:c2:19:
                    cc:fe:5e:d6:b2:9a:99:f8:b5:e7:6c:fc:81:bb:2d:
                    ba:33:5c:70:1f:16:d8:ec:bb:4f:f8:e1:d4:70:6f:
                    92:2a:e9:b3:a3:26:99:07:5b:a5:4c:5a:62:3e:d9:
                    14:4a:08:02:da:ac:3b:f1:5f:a8:56:58:f2:c9:b0:
                    be:42:36:8b:23:a4:b7:0d:e4:b7:3f:d4:31:60:28:
                    ab:6b:d2:d1:9c:2d:b1:08:85:ac:61:f5:a1:73:2d:
                    e3:74:be:90:ee:6d:a1:79:f0:39:c9:e9:4d:1e:19:
                    1e:64:39:13:5d:cb:97:d4:88:61:66:3c:25:30:89:
                    2d:e4:df:99:2d:0d:1d:c2:b1:eb:49:bf:d1:23:80:
                    03:2a:db:2c:99:b4:01:66:ea:76:ce:59:3b:2f:4c:
                    5e:85:b5:23:94:8c:de:a0:07:4d:c2:3b:3b:3c:be:
                    59:ea:c8:6a:2a:8a:c8:7a:b7:05:79:fe:a5:e1:d0:
                    00:89:74:cd:f0:0c:f1:3d:ff:c7:1f:f8:4e:b4:b8:
                    88:50:c7:64:e7:03:db:7c:1e:b7:93:b7:9a:9d:ce:
                    28:36:94:a3:36:a4:bb:f1:56:49:b6:fd:75:f2:e7:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:D2:0D:E2:F0:75:CB:F2:C4:6C:5C:8C:14:36:B7:4B:47:A7:FB
            X509v3 Authority Key Identifier:
                keyid:46:C0:85:8A:E0:F9:02:EC:A4:BD:C8:B3:B9:71:97:07:EE:DB:20:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:5f:15:c4:5d:f1:bf:a8:51:3e:e2:8a:e1:5a:d7:54:66:
         cc:b0:d2:61:ec:c9:72:62:56:fc:73:e6:ce:61:76:fa:ca:90:
         2b:e5:82:64:15:e5:1d:57:e7:16:ad:19:31:2d:de:ce:d2:a7:
         eb:5f:68:1c:8e:22:ee:58:3d:e9:9a:89:e5:78:53:ee:4b:8f:
         d6:2b:b2:85:61:c2:8c:21:26:0e:ff:8d:66:00:76:c4:ed:1d:
         58:ce:c3:57:24:f9:72:53:be:0c:7d:f7:05:25:a4:98:67:f9:
         09:61:12:8c:ea:14:3e:fa:7c:61:65:68:86:c9:d6:98:02:e4:
         2d:22:fd:88:f1:93:62:61:84:63:98:2f:c1:22:0a:88:55:cd:
         7e:15:f5:ec:42:61:84:50:2b:b1:67:58:8d:b3:d0:90:83:7a:
         44:e1:65:bb:98:2d:6b:6d:c8:26:8e:a7:c8:42:8d:7a:fb:da:
         42:1a:cf:2a:c8:c2:54:d4:41:73:0a:8e:e5:3c:93:1d:23:32:
         72:ac:6c:1c:a8:92:49:ca:b6:73:c3:68:f0:04:02:37:cd:e8:
         77:f7:ed:9a:73:bd:8a:44:57:18:73:7d:1d:89:10:77:88:3c:
         2e:5a:1e:50:7a:80:79:b8:af:f5:05:11:09:a3:42:79:2a:b4:
         e5:77:c7:a9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQw5dHJ1TpEn6zY+5NvUwg7InFnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZDMDg1OEFFMEY5MDJFQ0E0QkRDOEIzQjk3MTk3MDdF
RURCMjAwOTAeFw0yNTEwMTYwMjQwMDBaFw0yNjEwMTUwMjQ1MDBaMDMxMTAvBgNV
BAMTKEYxNUJEMjBERTJGMDc1Q0JGMkM0NkM1QzhDMTQzNkI3NEI0N0E3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuQi3M7/9z9HZ47/YSu9dqn0w
Fgfju3nOZSXCGcz+Xtaympn4teds/IG7LbozXHAfFtjsu0/44dRwb5Iq6bOjJpkH
W6VMWmI+2RRKCALarDvxX6hWWPLJsL5CNosjpLcN5Lc/1DFgKKtr0tGcLbEIhaxh
9aFzLeN0vpDubaF58DnJ6U0eGR5kORNdy5fUiGFmPCUwiS3k35ktDR3CsetJv9Ej
gAMq2yyZtAFm6nbOWTsvTF6FtSOUjN6gB03COzs8vlnqyGoqish6twV5/qXh0ACJ
dM3wDPE9/8cf+E60uIhQx2TnA9t8HreTt5qdzig2lKM2pLvxVkm2/XXy5/zlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8VvSDeLwdcvyxGxcjBQ2t0tHp/swHwYDVR0j
BBgwFoAURsCFiuD5AuykvcizuXGXB+7bIAkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QUU1RDJEODM4MDEyNDhCNTEwN0EzMzhGMzQzRkJGODlE
NTBDRDM5QUZGM0RBQTVBRTc5RUZENzlBMjNFRjlGLzAvNDZDMDg1OEFFMEY5MDJF
Q0E0QkRDOEIzQjk3MTk3MDdFRURCMjAwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NkMwODU4QUUwRjkwMkVDQTRC
REM4QjNCOTcxOTcwN0VFREIyMDA5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkFFNUQyRDgzODAxMjQ4QjUxMDdBMzM4RjM0M0ZCRjg5RDUwQ0QzOUFG
RjNEQUE1QUU3OUVGRDc5QTIzRUY5Ri8wLzMyMzgzMDMzM2EzODY1NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMxMzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDjtAw
DQYJKoZIhvcNAQELBQADggEBADTjXxXEXfG/qFE+4orhWtdUZsyw0mHsyXJiVvxz
5s5hdvrKkCvlgmQV5R1X5xatGTEt3s7Sp+tfaByOIu5YPemaieV4U+5Lj9YrsoVh
wowhJg7/jWYAdsTtHVjOw1ck+XJTvgx99wUlpJhn+QlhEozqFD76fGFlaIbJ1pgC
5C0i/Yjxk2JhhGOYL8EiCohVzX4V9exCYYRQK7FnWI2z0JCDekThZbuYLWttyCaO
p8hCjXr72kIazyrIwlTUQXMKjuU8kx0jMnKsbByokknKtnPDaPAEAjfN6Hf37Zpz
vYpEVxhzfR2JEHeIPC5aHlB6gHm4r/UFEQmjQnkqtOV3x6k=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:09 2025 by rpki-client