Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          pr3nwew4H9L8YHaFAIpXLzOAdCNFbA87weINeWoTBLs=
Subject key identifier:   87:17:E5:B5:11:E1:BA:7F:F2:44:4A:2B:10:08:A2:E0:CC:85:40:E5
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       2FEAF51BF1985042771E9D68D2781397C9B34B6E
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 30 Jul 2025 20:34:19 +0000
ROA not before:           Wed 30 Jul 2025 20:29:19 +0000
ROA not after:            Wed 29 Jul 2026 20:34:19 +0000
asID:                     267914
IP address blocks:        2803:8e60::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:f5:1b:f1:98:50:42:77:1e:9d:68:d2:78:13:97:c9:b3:4b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul 30 20:29:19 2025 GMT
            Not After : Jul 29 20:34:19 2026 GMT
        Subject: CN=8717E5B511E1BA7FF2444A2B1008A2E0CC8540E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:20:85:1e:29:0d:ef:15:8d:6b:31:32:01:
                    94:62:27:c6:40:15:ad:67:70:98:42:9d:b8:fc:ba:
                    09:00:9b:18:63:10:74:82:fd:e0:f6:07:b2:21:03:
                    fb:86:f0:a4:63:3c:da:86:97:7c:42:e3:bb:02:49:
                    18:32:aa:70:b7:2f:fc:09:d0:88:e1:c1:ae:1d:d0:
                    16:52:17:4a:a4:fc:ee:6e:ec:a6:86:74:fe:cf:16:
                    a2:36:a0:b8:f2:46:c4:17:20:2e:db:1f:86:9d:a9:
                    1b:10:70:81:78:8c:66:a5:43:23:16:85:95:27:ea:
                    fb:67:50:16:8b:93:9a:7e:63:f0:c5:97:db:7e:24:
                    47:e5:dc:31:ab:5f:20:21:30:ce:50:14:c8:08:f4:
                    3d:28:2f:be:dd:03:56:62:bf:8a:fb:b3:a8:e8:f5:
                    fd:fe:87:9c:8f:7e:8b:ed:8f:ce:05:76:9f:69:6f:
                    5e:b1:ba:4f:71:8b:0d:7b:7a:c6:c5:51:83:77:62:
                    6a:8f:52:47:67:d7:32:b5:20:40:d6:a7:ef:e2:01:
                    cf:f7:e9:62:76:2e:07:55:d7:8c:20:c6:6e:f5:6c:
                    49:f2:24:5e:56:27:fc:92:69:cc:72:44:8e:72:53:
                    72:38:4d:58:06:4b:d3:06:57:3d:9c:50:3b:7f:35:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:E5:B5:11:E1:BA:7F:F2:44:4A:2B:10:08:A2:E0:CC:85:40:E5
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:1a:8a:df:65:a0:99:e8:c2:7d:8d:1e:9e:e4:e8:22:9e:
         28:a9:01:cc:97:85:be:9e:f9:47:05:f0:07:26:21:22:83:b0:
         2f:6c:74:10:89:d5:19:0a:0d:c6:68:30:42:5a:b8:31:8f:5b:
         c9:7a:f2:3d:b7:43:84:07:b6:b7:ab:0e:ce:c0:5e:6c:f4:f3:
         0e:22:96:3a:2d:1b:41:74:95:0f:bd:77:5c:36:ba:b6:68:d3:
         26:15:77:89:52:a3:65:f7:23:eb:14:83:35:ee:b9:44:d4:99:
         6a:40:1f:57:39:2a:ee:dd:5a:ce:8f:fa:cb:17:dd:29:44:9c:
         88:8c:e0:03:a2:d0:cf:fd:85:76:eb:c7:b0:63:91:ff:41:32:
         80:29:a0:15:c8:a9:91:9c:aa:45:2f:75:e0:40:f2:5b:07:f1:
         f4:b1:05:35:23:10:00:d0:a7:81:b4:dc:95:17:44:d6:e2:65:
         b7:d2:1a:4c:14:76:19:c7:2f:0e:40:d8:4d:77:0f:72:c3:26:
         a0:50:c6:16:48:5f:83:cc:e7:85:fc:c8:2f:5c:6f:11:43:48:
         5f:2c:dc:a0:28:19:24:aa:5c:30:79:b5:04:97:98:35:93:41:
         2d:b7:bf:fa:0b:93:4c:db:c9:d6:65:82:46:6d:7b:74:44:73:
         3e:27:1a:ac
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL+r1G/GYUEJ3Hp1o0ngTl8mzS24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGN0NCMkVFNTJGQkNEQ0RFRkM0NjEzMTU4NDc4M0ZD
OEE2MDU1NzAeFw0yNTA3MzAyMDI5MTlaFw0yNjA3MjkyMDM0MTlaMDMxMTAvBgNV
BAMTKDg3MTdFNUI1MTFFMUJBN0ZGMjQ0NEEyQjEwMDhBMkUwQ0M4NTQwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHSCFHikN7xWNazEyAZRiJ8ZA
Fa1ncJhCnbj8ugkAmxhjEHSC/eD2B7IhA/uG8KRjPNqGl3xC47sCSRgyqnC3L/wJ
0Ijhwa4d0BZSF0qk/O5u7KaGdP7PFqI2oLjyRsQXIC7bH4adqRsQcIF4jGalQyMW
hZUn6vtnUBaLk5p+Y/DFl9t+JEfl3DGrXyAhMM5QFMgI9D0oL77dA1Ziv4r7s6jo
9f3+h5yPfovtj84Fdp9pb16xuk9xiw17esbFUYN3YmqPUkdn1zK1IEDWp+/iAc/3
6WJ2LgdV14wgxm71bEnyJF5WJ/ySacxyRI5yU3I4TVgGS9MGVz2cUDt/NcGFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhxfltRHhun/yREorEAii4MyFQOUwHwYDVR0j
BBgwFoAUxvfLLuUvvNze/EYTFYR4P8imBVcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjM1NDFDNjc3MjA3REQ5NDA4NERBN0U2NEM1REM0MTlB
MDIzNTE5ODM1RjIyNzYzQjVCMEU1MDdDOTIzNjdDLzAvQzZGN0NCMkVFNTJGQkNE
Q0RFRkM0NjEzMTU4NDc4M0ZDOEE2MDU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkY3Q0IyRUU1MkZCQ0RDREVG
QzQ2MTMxNTg0NzgzRkM4QTYwNTU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYzNTQxQzY3NzIwN0REOTQwODREQTdFNjRDNURDNDE5QTAyMzUxOTgz
NUYyMjc2M0I1QjBFNTA3QzkyMzY3Qy8wLzMyMzgzMDMzM2EzODY1MzYzMDNhM2Ey
ZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNzM5MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygDjmAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxsxqK32WgmejCfY0enuToIp4oqQHMl4W+nvlH
BfAHJiEig7AvbHQQidUZCg3GaDBCWrgxj1vJevI9t0OEB7a3qw7OwF5s9PMOIpY6
LRtBdJUPvXdcNrq2aNMmFXeJUqNl9yPrFIM17rlE1JlqQB9XOSru3VrOj/rLF90p
RJyIjOADotDP/YV268ewY5H/QTKAKaAVyKmRnKpFL3XgQPJbB/H0sQU1IxAA0KeB
tNyVF0TW4mW30hpMFHYZxy8OQNhNdw9ywyagUMYWSF+DzOeF/MgvXG8RQ0hfLNyg
KBkkqlwwebUEl5g1k0Ett7/6C5NM28nWZYJGbXt0RHM+Jxqs
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:17 2025 by rpki-client