Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/323830333a326364303a3a2f33322d3634203d3e20323734303234.roa
File:                     323830333a326364303a3a2f33322d3634203d3e20323734303234.roa (raw, json)
Hash identifier:          S2d+Hx7uVy+HF6M0ImXAXDOxRNyZd1DjI6kPWspzrFg=
Subject key identifier:   BC:07:85:56:FF:72:A9:C2:96:12:C3:98:91:BF:CB:1B:5E:32:5C:CF
Certificate issuer:       /CN=EF40DB638B2BD71A39880C226C06C598B5D9BCB5
Certificate serial:       1E43D1917EFA6CC21C9E0647D0AEA4FBA120E607
Authority key identifier: EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/323830333a326364303a3a2f33322d3634203d3e20323734303234.roa
Signing time:             Wed 27 Aug 2025 21:25:00 +0000
ROA not before:           Wed 27 Aug 2025 21:20:00 +0000
ROA not after:            Wed 26 Aug 2026 21:25:00 +0000
asID:                     274024
IP address blocks:        2803:2cd0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:d1:91:7e:fa:6c:c2:1c:9e:06:47:d0:ae:a4:fb:a1:20:e6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF40DB638B2BD71A39880C226C06C598B5D9BCB5
        Validity
            Not Before: Aug 27 21:20:00 2025 GMT
            Not After : Aug 26 21:25:00 2026 GMT
        Subject: CN=BC078556FF72A9C29612C39891BFCB1B5E325CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:bc:71:36:a7:54:6e:09:7e:de:4a:23:fe:
                    f1:73:ec:c0:30:4a:bf:32:11:05:61:7d:c5:62:9c:
                    27:2d:6c:7a:dc:42:ff:74:91:b6:ee:f9:b3:88:c1:
                    fc:d2:c2:f0:d0:42:43:80:c2:5a:59:f2:23:e5:4f:
                    3a:11:34:2f:1d:2d:78:f2:a4:17:2d:ed:35:6d:b2:
                    d6:68:65:27:a8:c5:f8:53:ff:d2:2e:dd:ef:f6:d4:
                    26:3b:3e:1e:3d:c7:5b:b3:f7:a7:2c:08:8f:1d:93:
                    70:87:15:4c:c8:7a:75:07:9d:36:60:6d:5f:2b:a0:
                    32:7f:4e:d5:e0:40:8f:f2:4a:2f:bb:7a:f8:24:64:
                    3a:71:17:fb:e0:ad:0c:ab:e3:cc:e9:bb:8c:22:82:
                    f1:aa:d2:55:22:7f:63:0d:c1:b4:3b:04:b9:b7:04:
                    1d:24:7f:40:44:cc:9e:1e:27:ce:27:5f:6a:d3:2e:
                    59:cf:8b:cb:aa:b0:c6:97:86:cd:88:a1:b1:7d:eb:
                    bc:83:e3:33:89:47:db:cb:ee:d0:b1:cf:62:23:37:
                    c1:3a:a5:8a:32:46:f6:2e:65:b2:3c:b1:01:02:6f:
                    39:a7:95:70:59:15:b9:a5:15:25:a8:c7:35:b7:1b:
                    26:6f:1b:81:b1:8c:44:94:24:29:fb:5a:b0:be:a0:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:07:85:56:FF:72:A9:C2:96:12:C3:98:91:BF:CB:1B:5E:32:5C:CF
            X509v3 Authority Key Identifier:
                keyid:EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/323830333a326364303a3a2f33322d3634203d3e20323734303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:51:ea:f8:d1:17:b6:dd:1c:00:ac:3c:7c:6d:4c:1b:1c:36:
         2c:4f:0c:31:10:b0:51:a5:9a:1e:ef:3b:f0:a5:3b:06:2b:5b:
         68:da:4a:5e:1d:5f:bc:03:77:7e:3f:7c:9a:a9:99:d8:df:36:
         6f:79:53:de:1f:bb:38:87:a8:6c:ab:78:21:8e:23:2a:1c:45:
         2b:a6:83:10:36:90:54:1e:c1:38:db:8f:b6:73:6e:d5:45:77:
         e1:2a:37:ff:e2:a2:79:e8:4e:b5:37:e2:af:5c:68:d5:cf:8e:
         57:ba:4d:4c:ca:e0:d1:f8:84:e4:39:82:53:90:fc:39:b0:7f:
         4c:85:8d:74:6b:4d:11:e1:67:5f:d6:3e:34:2d:4d:92:55:1c:
         b0:f1:7a:bb:71:84:c2:b7:70:40:74:98:a1:a4:86:6c:e1:ef:
         0d:a0:8f:82:3a:0d:f5:b9:91:87:6e:f6:b1:2d:08:29:a1:a6:
         15:8c:cc:e9:c4:d8:a8:e7:79:97:0e:2e:93:4d:77:cf:fc:53:
         e3:93:f9:f4:2f:29:b8:51:6c:18:0b:e6:87:9d:79:78:61:4c:
         ad:4b:39:1d:aa:f1:9a:e2:e0:0d:80:8b:4b:ea:73:da:84:9c:
         8d:3f:f0:e7:d9:72:e6:6a:59:b6:14:12:72:2b:ea:18:09:4d:
         79:3b:07:0f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHkPRkX76bMIcngZH0K6k+6Eg5gcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY0MERCNjM4QjJCRDcxQTM5ODgwQzIyNkMwNkM1OThC
NUQ5QkNCNTAeFw0yNTA4MjcyMTIwMDBaFw0yNjA4MjYyMTI1MDBaMDMxMTAvBgNV
BAMTKEJDMDc4NTU2RkY3MkE5QzI5NjEyQzM5ODkxQkZDQjFCNUUzMjVDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3LxxNqdUbgl+3koj/vFz7MAw
Sr8yEQVhfcVinCctbHrcQv90kbbu+bOIwfzSwvDQQkOAwlpZ8iPlTzoRNC8dLXjy
pBct7TVtstZoZSeoxfhT/9Iu3e/21CY7Ph49x1uz96csCI8dk3CHFUzIenUHnTZg
bV8roDJ/TtXgQI/ySi+7evgkZDpxF/vgrQyr48zpu4wigvGq0lUif2MNwbQ7BLm3
BB0kf0BEzJ4eJ84nX2rTLlnPi8uqsMaXhs2IobF967yD4zOJR9vL7tCxz2IjN8E6
pYoyRvYuZbI8sQECbzmnlXBZFbmlFSWoxzW3GyZvG4GxjESUJCn7WrC+oE2zAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUvAeFVv9yqcKWEsOYkb/LG14yXM8wHwYDVR0j
BBgwFoAU70DbY4sr1xo5iAwibAbFmLXZvLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEQ1NUE0NjYxNTI4RDE5MDY4NUFDREI5OUM0NDkxNkZC
NkQyN0U2MzA2RTFGRjM4MDc2OTE1OUYzRTM1ODNDLzAvRUY0MERCNjM4QjJCRDcx
QTM5ODgwQzIyNkMwNkM1OThCNUQ5QkNCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjQwREI2MzhCMkJENzFBMzk4
ODBDMjI2QzA2QzU5OEI1RDlCQ0I1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBENTVBNDY2MTUyOEQxOTA2ODVBQ0RCOTlDNDQ5MTZGQjZEMjdFNjMw
NkUxRkYzODA3NjkxNTlGM0UzNTgzQy8wLzMyMzgzMDMzM2EzMjYzNjQzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczNDMwMzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLNAw
DQYJKoZIhvcNAQELBQADggEBAIJR6vjRF7bdHACsPHxtTBscNixPDDEQsFGlmh7v
O/ClOwYrW2jaSl4dX7wDd34/fJqpmdjfNm95U94fuziHqGyreCGOIyocRSumgxA2
kFQewTjbj7ZzbtVFd+EqN//ionnoTrU34q9caNXPjle6TUzK4NH4hOQ5glOQ/Dmw
f0yFjXRrTRHhZ1/WPjQtTZJVHLDxertxhMK3cEB0mKGkhmzh7w2gj4I6DfW5kYdu
9rEtCCmhphWMzOnE2KjneZcOLpNNd8/8U+OT+fQvKbhRbBgL5oedeXhhTK1LOR2q
8Zri4A2Ai0vqc9qEnI0/8OfZcuZqWbYUEnIr6hgJTXk7Bw8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:49 2025 by rpki-client