Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a383030303a3a2f33332d3336203d3e203532343535.roa
File:                     323830333a623330303a383030303a3a2f33332d3336203d3e203532343535.roa (raw, json)
Hash identifier:          cnMiYkQpmgA1+J4juVUEBS0u/yyyk+Mm6PTkEfXUBs4=
Subject key identifier:   F2:8A:46:AB:1D:82:4C:76:D4:E6:6F:E8:4B:C3:EE:A4:85:98:1B:C3
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       508ECECE416C028EB8A8C58482E19C4730E382B3
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a383030303a3a2f33332d3336203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:05 +0000
ROA not before:           Thu 02 Oct 2025 12:25:05 +0000
ROA not after:            Thu 01 Oct 2026 12:30:05 +0000
asID:                     52455
IP address blocks:        2803:b300:8000::/33 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8e:ce:ce:41:6c:02:8e:b8:a8:c5:84:82:e1:9c:47:30:e3:82:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:05 2025 GMT
            Not After : Oct  1 12:30:05 2026 GMT
        Subject: CN=F28A46AB1D824C76D4E66FE84BC3EEA485981BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:09:19:f1:8a:57:d6:3f:2d:54:52:33:98:36:
                    c4:71:b3:c6:84:b7:a6:69:e3:c3:fb:a4:1f:ee:24:
                    81:9d:2a:d8:71:a9:d6:5f:b3:28:47:9b:5b:91:60:
                    52:e0:42:86:9c:29:63:33:56:75:d0:6d:4c:74:86:
                    56:ec:c2:5c:84:66:c6:e5:98:09:8d:fa:51:64:b0:
                    24:3f:7d:8d:1c:2b:2e:59:da:83:04:71:be:4c:91:
                    3b:04:31:95:34:bf:7a:db:9b:be:85:fa:36:fe:78:
                    19:e7:b8:15:50:c4:08:2f:f0:c9:c8:d8:4e:1e:d5:
                    1b:7f:7c:be:da:7c:57:cf:09:eb:7e:45:94:83:f4:
                    26:f3:05:58:01:4d:ac:a8:ef:0b:82:9a:38:a5:6f:
                    1e:4d:96:f2:13:4e:0c:47:3d:b0:e9:7c:0e:f0:54:
                    e6:31:b6:bd:cc:d8:e3:b7:f8:95:d0:87:7b:0c:c0:
                    9a:b4:56:25:31:a9:94:ec:f4:00:59:d2:6e:f5:17:
                    dd:86:92:a4:09:6f:b4:48:ab:e3:2d:2a:53:40:40:
                    a0:c6:71:d2:3d:c8:3e:29:eb:d7:9f:f6:66:30:f6:
                    5d:a5:88:3d:f9:87:37:e7:71:b0:b8:dd:12:85:ce:
                    00:b4:e0:e5:6d:b4:5f:df:5b:a1:bd:28:bd:71:f0:
                    51:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:46:AB:1D:82:4C:76:D4:E6:6F:E8:4B:C3:EE:A4:85:98:1B:C3
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a383030303a3a2f33332d3336203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b300:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:ce:72:96:19:ea:f6:38:09:94:bf:96:f7:11:60:c3:a9:
         85:7d:9b:2d:1e:7b:a7:da:e1:6f:16:94:bb:53:4c:f3:34:ac:
         77:73:3e:6c:fb:77:b4:88:4c:ac:c0:50:88:b4:48:31:61:68:
         9f:f7:d9:8c:f1:f1:79:24:c1:7b:93:59:40:16:58:3e:13:9c:
         86:09:3f:1d:a3:09:f5:0e:41:0a:4b:4b:52:5c:29:28:8b:4f:
         35:cf:d3:ad:2d:0c:49:39:47:12:3a:8f:19:91:0d:e4:cf:82:
         96:67:3d:e1:ab:9d:8e:9b:f7:8a:b7:94:d5:02:7c:7e:8e:64:
         d5:93:67:80:e4:41:c3:b4:6c:a9:1b:a4:67:0a:3e:88:37:d1:
         a4:a0:93:47:ac:a3:90:e5:f4:b1:14:fd:ea:b0:c5:8f:fd:84:
         e4:61:df:e1:a5:45:f4:90:35:26:93:88:05:c7:0d:05:7c:a3:
         69:b6:6f:00:6f:fc:fe:41:ee:cd:30:67:97:d2:5c:95:e2:09:
         1d:50:db:6d:9c:ed:f5:1d:3c:c2:84:be:2c:ea:11:9a:0b:94:
         de:36:e9:4c:0e:8a:21:cc:74:56:47:4c:c6:9b:48:59:a1:d5:
         d1:d1:92:76:88:ae:03:dc:b7:22:70:a4:48:e0:2b:c8:e9:27:
         74:8a:51:ad
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUI7OzkFsAo64qMWEguGcRzDjgrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTEwMDIxMjI1MDVaFw0yNjEwMDExMjMwMDVaMDMxMTAvBgNV
BAMTKEYyOEE0NkFCMUQ4MjRDNzZENEU2NkZFODRCQzNFRUE0ODU5ODFCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCRnxilfWPy1UUjOYNsRxs8aE
t6Zp48P7pB/uJIGdKthxqdZfsyhHm1uRYFLgQoacKWMzVnXQbUx0hlbswlyEZsbl
mAmN+lFksCQ/fY0cKy5Z2oMEcb5MkTsEMZU0v3rbm76F+jb+eBnnuBVQxAgv8MnI
2E4e1Rt/fL7afFfPCet+RZSD9CbzBVgBTayo7wuCmjilbx5NlvITTgxHPbDpfA7w
VOYxtr3M2OO3+JXQh3sMwJq0ViUxqZTs9ABZ0m71F92GkqQJb7RIq+MtKlNAQKDG
cdI9yD4p69ef9mYw9l2liD35hzfncbC43RKFzgC04OVttF/fW6G9KL1x8FG5AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU8opGqx2CTHbU5m/oS8PupIWYG8MwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMyMzgzMDMzM2E2MjMzMzAzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzMzM2MjAzZDNlMjAzNTMyMzQzNTM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYHKAOzAIAwDQYJKoZIhvcNAQELBQADggEBAFFfznKWGer2OAmUv5b3EWDDqYV9
my0ee6fa4W8WlLtTTPM0rHdzPmz7d7SITKzAUIi0SDFhaJ/32Yzx8XkkwXuTWUAW
WD4TnIYJPx2jCfUOQQpLS1JcKSiLTzXP060tDEk5RxI6jxmRDeTPgpZnPeGrnY6b
94q3lNUCfH6OZNWTZ4DkQcO0bKkbpGcKPog30aSgk0eso5Dl9LEU/eqwxY/9hORh
3+GlRfSQNSaTiAXHDQV8o2m2bwBv/P5B7s0wZ5fSXJXiCR1Q222c7fUdPMKEvizq
EZoLlN426UwOiiHMdFZHTMabSFmh1dHRknaIrgPctyJwpEjgK8jpJ3SKUa0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:31 2025 by rpki-client