Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa
File:                     323830333a636435303a3a2f33322d3332203d3e20323634383338.roa (raw, json)
Hash identifier:          G3lzpuekdRJRC0MLEuR9DCqAFweT0NDCGJOBdsWUmz8=
Subject key identifier:   46:91:FF:43:07:F4:7D:D9:8F:48:23:D9:3C:E3:82:DE:DF:1D:02:BC
Certificate issuer:       /CN=FDB692B7B90C4707701C811F7179377E0289AC4C
Certificate serial:       05B48F17A3B5CE24AACDC330D7A3C2E2CCB3C9A1
Authority key identifier: FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa
Signing time:             Wed 08 Oct 2025 15:49:49 +0000
ROA not before:           Wed 08 Oct 2025 15:44:49 +0000
ROA not after:            Wed 07 Oct 2026 15:49:49 +0000
asID:                     264838
IP address blocks:        2803:cd50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:8f:17:a3:b5:ce:24:aa:cd:c3:30:d7:a3:c2:e2:cc:b3:c9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB692B7B90C4707701C811F7179377E0289AC4C
        Validity
            Not Before: Oct  8 15:44:49 2025 GMT
            Not After : Oct  7 15:49:49 2026 GMT
        Subject: CN=4691FF4307F47DD98F4823D93CE382DEDF1D02BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:54:3e:6f:39:93:a9:92:e1:aa:e4:98:17:
                    69:79:06:f3:e6:28:6a:db:01:25:0c:a9:3e:31:8f:
                    c9:14:b1:77:a5:36:a4:50:53:9f:d9:8f:a5:89:74:
                    90:22:3b:af:c9:78:a4:1c:fe:e6:ea:de:c0:d1:ac:
                    54:ee:fc:60:9e:c2:29:10:f2:db:72:12:48:45:d1:
                    d2:12:b9:59:ee:0b:a2:34:e6:4a:54:13:d4:4d:bd:
                    76:89:3c:3e:04:c1:7a:c8:44:10:ed:e5:19:0d:81:
                    c1:bd:24:4f:f8:da:e5:97:2e:9c:3b:02:15:3e:ba:
                    4f:df:bc:f7:d6:a5:4b:06:fa:21:11:bf:53:1b:ff:
                    cb:90:45:81:38:13:e4:5c:ef:c5:cc:22:e5:a7:f9:
                    49:65:62:0d:88:ef:3a:49:a6:3a:c0:d7:7a:b0:81:
                    4d:86:d1:ea:47:92:c6:45:e4:f4:18:5b:93:88:47:
                    60:28:99:58:89:fd:37:97:7b:91:72:51:7e:fb:0f:
                    67:07:6c:09:7f:90:3e:51:9c:e2:74:7d:bc:7b:f9:
                    1c:fe:4d:34:aa:e4:e2:68:36:77:bc:48:de:4b:be:
                    89:0c:a8:d2:6a:37:95:5f:d9:f6:62:0c:1a:0b:ee:
                    9e:f2:06:4e:f7:c2:7a:e3:35:4f:c4:e2:55:8b:c6:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:FF:43:07:F4:7D:D9:8F:48:23:D9:3C:E3:82:DE:DF:1D:02:BC
            X509v3 Authority Key Identifier:
                keyid:FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:be:ee:3c:26:44:2d:e0:0a:0c:f7:97:01:ec:66:72:45:
         fd:43:c6:c1:b0:57:7c:40:6f:7e:32:63:f5:30:e5:29:ab:fb:
         45:e2:4b:e1:4c:39:2d:47:2b:99:1a:7f:e6:e8:03:d4:74:93:
         e8:9d:fa:b3:fc:7b:07:2c:5b:f3:27:28:51:85:aa:b1:8b:83:
         41:91:09:7a:1c:53:fa:26:dc:61:28:7b:20:8f:50:21:cd:25:
         f7:ef:ff:11:1a:d8:02:7c:72:9a:32:b9:6b:b3:63:8a:75:7b:
         f6:9b:b0:50:e6:20:86:82:74:b1:d0:16:28:b5:55:bf:2e:4d:
         8c:f8:bb:eb:db:2b:68:65:c8:44:65:a9:fa:8d:79:df:44:a2:
         85:f8:d9:b6:bf:c0:b2:38:52:cb:3b:c8:66:75:c2:a3:f9:ba:
         6f:12:0e:b8:e0:87:5f:f8:65:1b:90:cd:0b:7c:b2:bb:9b:cb:
         1c:e9:86:49:0c:87:5b:4c:35:4d:20:39:e9:c6:b5:79:30:ee:
         e3:2a:47:68:51:75:9b:de:bb:e5:03:5d:e3:57:71:8f:54:95:
         f2:0b:04:74:d2:86:0f:f2:5b:b6:e6:26:ea:ba:fb:e1:7d:26:
         f9:e3:f4:32:c7:91:9d:8e:18:2c:39:63:50:2d:74:8c:96:01:
         43:6a:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:15:48 2025 by rpki-client