Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323733393630.roa
File:                     323830333a313963303a3a2f33322d313238203d3e20323733393630.roa (raw, json)
Hash identifier:          +JmpcqqSfUwlovJBdYIqVJO2jejAfvTNyuIN5p7jqLo=
Subject key identifier:   85:6A:C1:52:13:E5:9D:F3:48:52:6C:E3:13:FF:9D:E0:FF:C6:CB:2C
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       501D11C8CCA497360EDB605CA0CB1688928035FA
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323733393630.roa
Signing time:             Mon 22 Sep 2025 14:48:02 +0000
ROA not before:           Mon 22 Sep 2025 14:43:02 +0000
ROA not after:            Mon 21 Sep 2026 14:48:02 +0000
asID:                     273960
IP address blocks:        2803:19c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 23:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1d:11:c8:cc:a4:97:36:0e:db:60:5c:a0:cb:16:88:92:80:35:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Sep 22 14:43:02 2025 GMT
            Not After : Sep 21 14:48:02 2026 GMT
        Subject: CN=856AC15213E59DF348526CE313FF9DE0FFC6CB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:f6:b7:b0:59:ac:ad:a3:4e:1e:e0:7f:3d:
                    27:da:8d:40:5a:57:40:5c:a5:69:65:31:0f:b8:be:
                    34:95:78:49:1b:54:c0:c0:61:3c:e0:d3:b4:76:f9:
                    23:61:87:bc:ef:cc:1a:5b:ed:81:49:1d:54:3b:9e:
                    31:e7:ca:46:44:68:14:e1:38:a1:2e:9c:f6:a5:65:
                    5d:90:ba:9c:d7:50:a1:0a:ff:64:32:77:90:e1:c9:
                    0d:76:82:c7:d4:ad:64:39:26:68:d4:2e:3a:4c:90:
                    42:88:52:24:50:48:9b:09:56:8c:97:2e:74:eb:ed:
                    b7:ee:6f:bc:cc:a0:32:be:e2:03:2a:0e:7a:0e:70:
                    b2:e9:e7:34:03:7b:00:d7:e1:00:52:13:cf:13:7c:
                    bb:da:a6:c7:2a:01:ff:99:63:99:71:cb:a9:0e:f9:
                    1b:66:82:39:03:d9:0a:21:13:12:e7:54:e5:6d:9a:
                    d0:3d:68:ed:29:68:c0:36:b1:d7:90:0e:c4:fd:40:
                    22:5c:67:1b:94:20:9a:c2:7f:dc:82:c8:74:d0:c2:
                    d0:03:3b:3a:18:f4:92:15:9b:62:a4:4a:77:30:da:
                    73:05:98:48:92:07:84:24:d7:a5:db:09:2a:10:63:
                    9d:af:c4:7d:f7:c6:70:80:a5:69:9d:99:18:af:c2:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:C1:52:13:E5:9D:F3:48:52:6C:E3:13:FF:9D:E0:FF:C6:CB:2C
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323733393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:c5:78:3e:bb:ff:75:5d:c3:e1:8f:06:b0:2e:a7:42:93:
         bd:99:af:5e:ef:2b:97:0f:2c:7e:7a:6c:cd:bd:92:f0:07:55:
         0c:28:07:8b:2f:09:79:c2:40:bc:63:80:52:1c:c8:dc:2c:9d:
         37:3d:5c:6a:0a:30:be:88:d9:e1:6a:e0:41:e2:ee:7e:6d:a4:
         8e:b7:09:03:f5:e2:f2:e6:34:70:85:08:ad:1d:6c:6b:84:3c:
         0b:a2:91:a2:4b:82:7c:5f:0f:ab:9d:55:d9:52:70:9a:8f:60:
         5c:6c:99:6b:72:bb:60:3e:13:3f:d4:15:e2:df:28:7c:0b:18:
         8a:7c:b7:db:4f:11:cd:3c:6a:86:d6:52:a2:3d:e4:f7:a5:2f:
         d4:9d:5c:80:b3:34:78:a4:aa:dd:eb:b9:45:64:14:87:55:f1:
         5c:d8:cb:e4:f1:72:79:77:22:a1:7b:f2:53:3c:51:68:9a:ea:
         86:81:9b:33:7b:4b:d8:6c:35:50:0c:62:3a:37:21:4c:62:0c:
         41:dd:99:48:20:ec:21:9b:64:74:b0:f9:1a:7c:3f:60:0f:61:
         5b:c7:43:24:60:aa:d6:d3:9c:7c:0d:b5:a5:0a:3c:f0:f2:7e:
         ca:de:00:6d:45:e7:47:f9:85:95:b6:a8:49:d9:60:82:e0:0a:
         e2:12:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:40 2025 by rpki-client