Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/323830333a356663303a3a2f33322d3438203d3e20323635373833.roa
File:                     323830333a356663303a3a2f33322d3438203d3e20323635373833.roa (raw, json)
Hash identifier:          E3XMnr0u8hApFHg2nuxpac3+qv70aIhvOXo4ASyv97E=
Subject key identifier:   64:CA:8F:BF:01:C2:46:29:3A:B1:F9:19:9F:9E:4A:D7:7C:0C:F7:04
Certificate issuer:       /CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
Certificate serial:       62637E968689B8617E3AEF3983B58BB6D8C2D8BE
Authority key identifier: 93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/323830333a356663303a3a2f33322d3438203d3e20323635373833.roa
Signing time:             Mon 06 Oct 2025 15:55:00 +0000
ROA not before:           Mon 06 Oct 2025 15:50:00 +0000
ROA not after:            Mon 05 Oct 2026 15:55:00 +0000
asID:                     265783
IP address blocks:        2803:5fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 12:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:7e:96:86:89:b8:61:7e:3a:ef:39:83:b5:8b:b6:d8:c2:d8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
        Validity
            Not Before: Oct  6 15:50:00 2025 GMT
            Not After : Oct  5 15:55:00 2026 GMT
        Subject: CN=64CA8FBF01C246293AB1F9199F9E4AD77C0CF704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:b5:3b:2f:75:06:51:8a:07:89:64:4e:a2:
                    01:90:91:a6:6b:be:66:f4:b5:94:5d:68:12:8e:a1:
                    21:be:52:8d:e7:f6:79:af:2c:a4:23:76:5a:05:71:
                    95:7c:0b:c1:d1:75:9e:cb:9a:40:9b:91:31:ed:b6:
                    6a:da:a1:e3:6d:c8:9d:8d:3f:de:fe:f9:3f:78:84:
                    d0:63:0a:df:48:6b:b6:21:77:5a:e5:d5:80:52:77:
                    a9:3a:91:ec:ee:9d:3e:6f:36:f2:45:55:95:eb:fb:
                    34:4d:d6:5a:af:71:bd:c2:0b:b2:93:f2:96:3f:5e:
                    44:33:68:f3:2b:09:d6:88:0b:df:26:22:62:1e:2f:
                    a0:79:ff:a4:17:d2:bb:27:4e:63:80:5f:18:7f:80:
                    f9:b4:4e:03:4a:67:74:51:bc:7e:64:ee:80:b8:d4:
                    2d:63:f8:25:ed:1c:71:e2:eb:71:9a:6e:a3:90:34:
                    07:42:a8:31:47:93:07:6d:40:0b:2d:41:a4:5e:47:
                    64:32:d3:d0:5f:8b:f8:d2:14:ec:35:df:df:52:f8:
                    6f:f7:65:a6:19:58:d7:73:e0:ad:be:b8:48:a4:4d:
                    91:22:04:9e:cc:34:11:04:f7:58:43:57:60:de:2d:
                    38:00:46:d6:e4:41:c0:23:a2:2a:74:3a:83:fd:1e:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CA:8F:BF:01:C2:46:29:3A:B1:F9:19:9F:9E:4A:D7:7C:0C:F7:04
            X509v3 Authority Key Identifier:
                keyid:93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/323830333a356663303a3a2f33322d3438203d3e20323635373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:84:49:20:b6:b3:dc:19:c0:79:42:ac:aa:8a:51:f7:9e:b9:
         58:66:4b:a3:3d:a1:fe:69:ba:4e:e5:60:6c:c6:be:41:38:f6:
         95:ac:9d:79:54:ac:bc:82:1f:d6:28:f5:c5:44:24:33:b1:d4:
         3c:50:58:4b:5d:d7:17:d3:09:85:d4:52:97:6b:5b:75:f4:96:
         99:a3:0b:ce:5f:a2:42:ac:70:f1:a0:0e:ba:b2:56:ef:eb:c2:
         92:12:46:ff:b3:1e:00:b2:07:3d:99:cc:ca:de:93:b0:14:72:
         26:7f:55:df:43:d4:a5:6e:c9:81:7e:3a:93:5f:4a:ae:54:0e:
         c9:b0:33:ee:6b:81:be:7d:0f:fd:9e:2b:cf:d6:16:e7:3a:47:
         5a:22:5f:2b:35:70:e5:c9:e3:bc:a5:9d:4a:12:12:02:c7:d3:
         d3:20:4c:0b:43:a2:0a:c1:b1:e1:17:2a:04:b3:33:f3:6b:4a:
         94:3c:b3:7d:5e:e4:44:7e:d0:a4:ff:f5:37:9c:03:1e:76:0e:
         ba:18:69:d9:6a:43:70:63:85:47:a8:a4:ec:96:11:58:03:76:
         32:8e:47:09:ac:0b:e3:f4:ba:93:9d:81:ea:40:ea:a8:d1:94:
         90:49:5e:d8:c4:16:b7:72:20:0f:89:c5:db:b6:01:b3:5a:de:
         59:34:c1:41
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYmN+loaJuGF+Ou85g7WLttjC2L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNGQjUxQzVBQTAxNjJFOTlDRjVERUFFMEEyREFENDJD
Mzc1OEFERjAeFw0yNTEwMDYxNTUwMDBaFw0yNjEwMDUxNTU1MDBaMDMxMTAvBgNV
BAMTKDY0Q0E4RkJGMDFDMjQ2MjkzQUIxRjkxOTlGOUU0QUQ3N0MwQ0Y3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qbU7L3UGUYoHiWROogGQkaZr
vmb0tZRdaBKOoSG+Uo3n9nmvLKQjdloFcZV8C8HRdZ7LmkCbkTHttmraoeNtyJ2N
P97++T94hNBjCt9Ia7Yhd1rl1YBSd6k6kezunT5vNvJFVZXr+zRN1lqvcb3CC7KT
8pY/XkQzaPMrCdaIC98mImIeL6B5/6QX0rsnTmOAXxh/gPm0TgNKZ3RRvH5k7oC4
1C1j+CXtHHHi63GabqOQNAdCqDFHkwdtQAstQaReR2Qy09Bfi/jSFOw1399S+G/3
ZaYZWNdz4K2+uEikTZEiBJ7MNBEE91hDV2DeLTgARtbkQcAjoip0OoP9Hg1DAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZMqPvwHCRik6sfkZn55K13wM9wQwHwYDVR0j
BBgwFoAUk/tRxaoBYumc9d6uCi2tQsN1it8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QjVBMzdGNjAzNkJEMEY2Q0VFOEExMTgxM0U4OEI0RDZE
RDhCNUQ1QzAwQUI1RjlBNDFFM0E0RjI0OThGQzczLzAvOTNGQjUxQzVBQTAxNjJF
OTlDRjVERUFFMEEyREFENDJDMzc1OEFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0ZCNTFDNUFBMDE2MkU5OUNG
NURFQUUwQTJEQUQ0MkMzNzU4QURGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEI1QTM3RjYwMzZCRDBGNkNFRThBMTE4MTNFODhCNEQ2REQ4QjVENUMw
MEFCNUY5QTQxRTNBNEYyNDk4RkM3My8wLzMyMzgzMDMzM2EzNTY2NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDX8Aw
DQYJKoZIhvcNAQELBQADggEBAJuESSC2s9wZwHlCrKqKUfeeuVhmS6M9of5puk7l
YGzGvkE49pWsnXlUrLyCH9Yo9cVEJDOx1DxQWEtd1xfTCYXUUpdrW3X0lpmjC85f
okKscPGgDrqyVu/rwpISRv+zHgCyBz2ZzMrek7AUciZ/Vd9D1KVuyYF+OpNfSq5U
DsmwM+5rgb59D/2eK8/WFuc6R1oiXys1cOXJ47ylnUoSEgLH09MgTAtDogrBseEX
KgSzM/NrSpQ8s31e5ER+0KT/9TecAx52DroYadlqQ3BjhUeopOyWEVgDdjKORwms
C+P0upOdgepA6qjRlJBJXtjEFrdyIA+Jxdu2AbNa3lk0wUE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:44 2025 by rpki-client