Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa
File:                     323830333a623330303a3a2f33322d3332203d3e203532343535.roa (raw, json)
Hash identifier:          h0lcBaN92OJsJ0bAKc9v10LUkci/vyAH8g7EyeEsbYw=
Subject key identifier:   8D:51:37:DA:FC:D4:A0:2A:99:87:75:C9:6D:FA:7B:D9:09:44:76:F7
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       4D00727755116498A396941078F08A054BD1C8E3
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:11 +0000
ROA not before:           Thu 02 Oct 2025 12:25:11 +0000
ROA not after:            Thu 01 Oct 2026 12:30:11 +0000
asID:                     52455
IP address blocks:        2803:b300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:00:72:77:55:11:64:98:a3:96:94:10:78:f0:8a:05:4b:d1:c8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:11 2025 GMT
            Not After : Oct  1 12:30:11 2026 GMT
        Subject: CN=8D5137DAFCD4A02A998775C96DFA7BD9094476F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:85:6b:5d:17:72:6a:96:68:ad:69:c2:ee:
                    1e:55:58:39:d9:e3:98:08:c8:c5:2f:5a:46:2d:83:
                    90:38:62:eb:cb:ff:1f:7f:fb:4e:70:40:41:7a:b2:
                    a6:e6:9f:b7:f2:0f:82:70:16:9b:20:a5:36:37:b7:
                    b6:05:8d:7e:c6:48:a3:72:29:ac:a5:47:be:04:85:
                    4e:ce:57:fa:42:e6:53:01:bf:56:ea:a3:1c:c5:cc:
                    e3:ba:a0:6a:2e:7d:53:db:9f:7d:08:c1:fa:ea:1d:
                    db:0b:c9:3d:f5:ca:c4:fb:62:6e:58:e0:d8:af:b6:
                    6a:be:e6:c1:7f:c1:3c:83:7d:b2:83:83:1e:fa:4f:
                    f0:b5:fb:97:ff:7a:86:69:05:fc:79:c9:b3:dd:32:
                    93:a3:07:df:3f:88:07:b1:61:5f:e7:3f:07:11:30:
                    f7:94:86:26:1a:88:88:6a:8d:73:ae:66:47:42:4a:
                    80:09:2c:49:7b:ef:ca:83:f2:ac:d3:b5:7d:9b:01:
                    23:66:5f:ba:3d:e8:59:22:f2:e2:03:9a:f2:48:91:
                    01:79:d6:c1:02:98:46:33:e9:6d:7b:ea:a7:fa:c9:
                    2f:74:84:a0:ab:04:b0:29:43:85:f7:9b:2e:c9:19:
                    42:57:21:13:b9:61:16:33:44:b3:c6:7f:dc:c6:42:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:37:DA:FC:D4:A0:2A:99:87:75:C9:6D:FA:7B:D9:09:44:76:F7
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:79:0b:bc:50:ce:b8:65:25:af:64:be:aa:ce:14:fc:a4:
         d2:3d:de:fe:d0:2e:b0:a7:3a:33:0e:e3:79:bb:5a:11:fc:17:
         e0:da:9f:8d:e0:53:43:73:5e:ec:a4:e4:98:8a:ee:5f:8d:a8:
         c5:f9:7a:2a:43:f8:01:18:70:dc:9f:f2:d6:46:7e:34:d1:3a:
         fe:69:f0:2e:16:1e:cf:25:09:2f:12:2f:92:3a:15:03:bc:94:
         5b:74:20:7c:ad:93:ad:51:9b:6e:c9:79:9b:2a:af:2f:4f:0d:
         27:30:b3:61:7d:c0:ff:51:30:56:25:4a:38:ee:dc:f9:f8:a6:
         76:f3:7b:f5:e7:b0:42:5f:4a:8e:f8:bd:76:47:8e:64:6c:64:
         0b:ed:1f:f9:57:f4:23:b6:6e:15:18:00:d3:11:13:0d:dc:14:
         89:8c:f6:cc:45:86:a4:37:c1:2f:1a:d8:bb:79:1a:2b:35:8b:
         2b:1f:51:5a:d4:65:ac:06:d7:45:cf:f8:84:f7:bb:98:f8:38:
         76:fd:2b:ae:21:81:5b:c5:53:f0:1f:54:f7:9f:c6:f8:85:71:
         e7:03:a8:5b:34:38:44:56:8f:20:35:ed:a1:13:05:78:2e:7a:
         cc:f0:f9:a9:e0:93:8e:79:69:8c:1a:db:ce:a3:02:ca:03:a0:
         d2:ab:9b:c5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTQByd1URZJijlpQQePCKBUvRyOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTEwMDIxMjI1MTFaFw0yNjEwMDExMjMwMTFaMDMxMTAvBgNV
BAMTKDhENTEzN0RBRkNENEEwMkE5OTg3NzVDOTZERkE3QkQ5MDk0NDc2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCYVrXRdyapZorWnC7h5VWDnZ
45gIyMUvWkYtg5A4YuvL/x9/+05wQEF6sqbmn7fyD4JwFpsgpTY3t7YFjX7GSKNy
KaylR74EhU7OV/pC5lMBv1bqoxzFzOO6oGoufVPbn30IwfrqHdsLyT31ysT7Ym5Y
4Nivtmq+5sF/wTyDfbKDgx76T/C1+5f/eoZpBfx5ybPdMpOjB98/iAexYV/nPwcR
MPeUhiYaiIhqjXOuZkdCSoAJLEl778qD8qzTtX2bASNmX7o96Fki8uIDmvJIkQF5
1sECmEYz6W176qf6yS90hKCrBLApQ4X3my7JGUJXIRO5YRYzRLPGf9zGQh+lAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUjVE32vzUoCqZh3XJbfp72QlEdvcwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMyMzgzMDMzM2E2MjMzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7MAMA0G
CSqGSIb3DQEBCwUAA4IBAQBp93kLvFDOuGUlr2S+qs4U/KTSPd7+0C6wpzozDuN5
u1oR/Bfg2p+N4FNDc17spOSYiu5fjajF+XoqQ/gBGHDcn/LWRn400Tr+afAuFh7P
JQkvEi+SOhUDvJRbdCB8rZOtUZtuyXmbKq8vTw0nMLNhfcD/UTBWJUo47tz5+KZ2
83v157BCX0qO+L12R45kbGQL7R/5V/Qjtm4VGADTERMN3BSJjPbMRYakN8EvGti7
eRorNYsrH1Fa1GWsBtdFz/iE97uY+Dh2/SuuIYFbxVPwH1T3n8b4hXHnA6hbNDhE
Vo8gNe2hEwV4LnrM8Pmp4JOOeWmMGtvOowLKA6DSq5vF
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:04 2025 by rpki-client