Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa
File:                     323830333a3835303a3a2f33322d3333203d3e20323733313035.roa (raw, json)
Hash identifier:          wT300cyZkEolYjC+Sg6+sSgCgDjN3Wq81wZ44LteYxw=
Subject key identifier:   25:09:75:41:4E:91:36:DF:0D:45:B9:BF:5C:51:DF:2F:D7:02:6F:27
Certificate issuer:       /CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39
Certificate serial:       1C47E4D3824EEE9286E0417DAE5D8B1FB8A39725
Authority key identifier: CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa
Signing time:             Thu 16 Oct 2025 19:50:30 +0000
ROA not before:           Thu 16 Oct 2025 19:45:30 +0000
ROA not after:            Thu 15 Oct 2026 19:50:30 +0000
asID:                     273105
IP address blocks:        2803:850::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 21:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:e4:d3:82:4e:ee:92:86:e0:41:7d:ae:5d:8b:1f:b8:a3:97:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39
        Validity
            Not Before: Oct 16 19:45:30 2025 GMT
            Not After : Oct 15 19:50:30 2026 GMT
        Subject: CN=250975414E9136DF0D45B9BF5C51DF2FD7026F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:52:f6:e9:9e:e7:9a:58:1d:94:ed:36:ae:
                    c6:60:34:5f:90:3e:5d:ea:b1:0a:91:87:da:57:09:
                    73:b7:0d:c6:49:c3:23:af:ee:87:6e:43:52:dc:78:
                    a3:12:ab:a4:f5:bd:f3:bc:eb:ba:dc:33:03:55:bd:
                    6a:76:22:d6:d0:3b:9a:5d:9b:5c:9c:46:17:9a:68:
                    8c:e2:61:83:71:08:11:3f:56:38:25:43:26:4d:91:
                    d4:ca:e8:06:46:0d:3f:39:85:73:e7:99:96:57:02:
                    eb:76:97:be:69:9e:5f:2e:92:44:a9:75:79:73:35:
                    03:24:00:e1:02:d3:94:4a:e8:07:a5:d8:9e:83:f3:
                    41:5e:9a:9d:ab:d2:07:b4:f0:b5:e9:72:fa:21:70:
                    63:6e:dd:62:7e:2a:c2:ea:8f:1b:06:4a:aa:65:43:
                    71:c8:36:74:ce:4c:64:2f:d9:d8:57:bd:e9:1f:c7:
                    13:e3:b0:5d:51:9c:ca:2f:fe:2d:d2:2b:26:d8:69:
                    ad:2c:b7:9b:b3:61:15:2b:55:6c:6a:c8:07:99:d6:
                    5f:5b:c8:47:80:78:16:77:92:0f:47:f7:b8:25:97:
                    68:9f:5e:0a:5e:f6:af:1c:bd:12:d8:07:7e:b0:7d:
                    17:65:3d:cf:58:dc:e6:e0:0c:52:bc:a7:81:bf:f6:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:09:75:41:4E:91:36:DF:0D:45:B9:BF:5C:51:DF:2F:D7:02:6F:27
            X509v3 Authority Key Identifier:
                keyid:CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:850::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:b8:8a:f5:80:98:77:72:0a:31:81:27:44:63:be:74:02:
         9c:65:0a:f6:2e:aa:cb:ed:0c:6e:88:2a:2c:ed:be:43:c6:dd:
         95:7e:4b:e7:91:05:1c:e2:93:a0:9f:0c:dc:cb:af:08:e9:dc:
         ba:df:49:8c:14:93:73:28:87:02:bd:35:e4:01:fb:28:1f:18:
         0b:f7:a9:c0:d7:2a:3a:99:2e:ae:c7:2c:36:9e:8f:83:96:f9:
         cf:a5:62:a5:3b:9d:c9:2f:bd:97:a6:73:80:45:60:8d:df:10:
         02:e2:de:a4:e3:39:51:db:6c:65:8a:ae:fa:9e:41:ea:8d:7b:
         d1:cf:35:41:69:86:cc:9a:00:d2:c9:94:38:05:7e:a9:2a:df:
         4a:a6:74:f1:e6:90:71:f6:bf:22:22:2b:11:14:c9:96:22:83:
         b7:5a:bb:15:b8:30:b7:39:c4:70:d6:18:9d:41:da:74:07:c1:
         cf:08:41:41:a4:e2:a1:52:10:a4:49:93:9d:52:a6:48:c8:a7:
         54:89:17:3c:9c:14:57:5a:04:65:ef:c7:d3:17:3e:96:1c:da:
         29:68:07:3a:a4:38:77:6f:d3:d0:3a:76:d4:8f:e2:1c:19:8d:
         33:2f:09:46:d8:1e:98:9b:e8:81:2e:5a:41:de:0a:49:15:15:
         cb:bc:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:49:15 2025 by rpki-client