Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa
File:                     323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa (raw, json)
Hash identifier:          0a1czvKGULUCoKdIoZJHLB5jB8K98LUcjj2fzvSaYBI=
Subject key identifier:   97:D7:48:3F:6D:3D:62:37:7F:FF:B0:29:47:37:3E:E2:1B:55:B8:0B
Certificate issuer:       /CN=5C3619D30B34AEF3C8BB24B8B681B3114C37F36F
Certificate serial:       42C981A50534B40BB32DB2FD6916E4CB1EF6DA42
Authority key identifier: 5C:36:19:D3:0B:34:AE:F3:C8:BB:24:B8:B6:81:B3:11:4C:37:F3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa
Signing time:             Wed 01 Oct 2025 02:49:16 +0000
ROA not before:           Wed 01 Oct 2025 02:44:16 +0000
ROA not after:            Wed 30 Sep 2026 02:49:16 +0000
asID:                     181818
IP address blocks:        2801:18c:5:1046::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c9:81:a5:05:34:b4:0b:b3:2d:b2:fd:69:16:e4:cb:1e:f6:da:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3619D30B34AEF3C8BB24B8B681B3114C37F36F
        Validity
            Not Before: Oct  1 02:44:16 2025 GMT
            Not After : Sep 30 02:49:16 2026 GMT
        Subject: CN=97D7483F6D3D62377FFFB02947373EE21B55B80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:8c:92:92:8f:f3:be:31:df:23:37:1c:6f:
                    a7:4d:fd:08:e5:92:c5:90:10:bc:0d:b8:a8:83:a0:
                    39:ef:76:d4:98:89:70:28:c3:f9:10:13:bc:8c:e3:
                    ad:99:53:56:44:20:b3:04:aa:ca:1e:26:bb:3f:3f:
                    a6:5b:bc:c3:d7:59:36:18:a4:ee:00:bb:3d:1d:4b:
                    85:cf:15:9b:6d:51:a3:10:ae:8b:cb:cc:25:e3:c6:
                    b0:c4:24:c6:27:7e:28:21:85:3f:4b:fc:09:30:a2:
                    95:fb:15:4d:81:42:46:47:95:51:a6:fc:e4:65:56:
                    87:eb:87:0d:79:62:c5:60:59:3c:a3:f8:c1:9e:26:
                    be:b5:0a:53:02:c4:f2:05:75:d3:21:3f:ce:80:25:
                    f1:2d:d4:db:b8:24:bd:4f:1b:b2:e3:85:2f:cb:7a:
                    1a:69:c3:a0:5a:f2:dc:2e:98:5a:d6:04:5f:73:65:
                    b1:85:fa:d1:d7:25:39:bc:67:35:dc:df:e7:be:e8:
                    b8:2e:8f:4a:23:50:9e:e7:6c:84:6a:cc:e6:3a:7d:
                    f4:ba:96:2b:26:32:e4:c6:d6:87:4b:60:b2:b7:d8:
                    88:12:80:48:5b:fe:cb:55:5d:96:f8:a4:27:12:f6:
                    4f:bc:25:ab:fb:5c:87:c6:3e:f7:a3:8e:40:fb:f7:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:48:3F:6D:3D:62:37:7F:FF:B0:29:47:37:3E:E2:1B:55:B8:0B
            X509v3 Authority Key Identifier:
                keyid:5C:36:19:D3:0B:34:AE:F3:C8:BB:24:B8:B6:81:B3:11:4C:37:F3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18c:5:1046::/64

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:63:bd:9d:65:5b:17:bf:62:54:6a:6d:40:82:a9:79:e2:
         ad:67:75:5e:0e:c4:46:d8:44:96:b9:1f:66:49:e2:31:8a:31:
         e4:a3:3b:92:ea:7b:ad:b5:e9:6c:79:68:3b:a1:85:dd:91:17:
         81:05:dc:da:d8:4f:72:e9:6d:6b:70:52:a3:1a:1e:bb:e5:8e:
         06:7e:85:55:f5:ae:0c:70:20:02:25:ce:5d:46:75:02:7d:02:
         90:99:4f:34:44:e3:6d:83:5e:d1:a0:54:fa:19:70:e0:73:71:
         2c:b3:cd:08:36:62:df:c5:62:b8:14:f6:4d:63:d7:1f:ac:08:
         06:11:74:b5:3d:f1:a4:f2:cc:cf:9d:94:4a:3d:09:0f:24:56:
         2a:34:65:bd:45:08:98:f8:b9:34:97:28:a3:05:63:be:29:b0:
         d4:42:64:39:e7:5a:56:da:7e:5f:bc:12:da:0d:12:b2:51:7a:
         80:5c:c5:8a:fe:2c:14:c6:88:af:95:00:50:53:98:d3:ba:28:
         9f:92:bf:5e:0e:c7:ef:98:68:f5:7a:f9:d6:da:84:15:04:a7:
         3c:80:08:06:37:79:83:67:33:06:63:68:04:b6:2d:07:bb:dd:
         3d:09:86:9c:7d:45:13:ee:9b:99:6c:4f:48:4a:02:83:58:3c:
         c8:2c:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:50:47 2025 by rpki-client