Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa
File:                     323830333a326164303a3a2f33322d3438203d3e20323734303639.roa (raw, json)
Hash identifier:          mIxJnaL9Vvm43+WPPC7td+fZx37QnN5sv3qqMP+bLJ0=
Subject key identifier:   A3:40:83:B5:72:E4:5D:A5:65:AD:E4:B5:99:EE:FD:CD:37:BC:10:9A
Certificate issuer:       /CN=075ECACFC14C20C641725926230658E65D624491
Certificate serial:       606D03FF76743834E344288967337D877951CBD0
Authority key identifier: 07:5E:CA:CF:C1:4C:20:C6:41:72:59:26:23:06:58:E6:5D:62:44:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/075ECACFC14C20C641725926230658E65D624491.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa
Signing time:             Fri 29 Aug 2025 06:05:00 +0000
ROA not before:           Fri 29 Aug 2025 06:00:00 +0000
ROA not after:            Fri 28 Aug 2026 06:05:00 +0000
asID:                     274069
IP address blocks:        2803:2ad0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/075ECACFC14C20C641725926230658E65D624491.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/075ECACFC14C20C641725926230658E65D624491.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/075ECACFC14C20C641725926230658E65D624491.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6d:03:ff:76:74:38:34:e3:44:28:89:67:33:7d:87:79:51:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075ECACFC14C20C641725926230658E65D624491
        Validity
            Not Before: Aug 29 06:00:00 2025 GMT
            Not After : Aug 28 06:05:00 2026 GMT
        Subject: CN=A34083B572E45DA565ADE4B599EEFDCD37BC109A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:ce:4a:fb:f6:89:a5:7c:f1:3b:ea:42:45:
                    6f:fd:79:81:ae:00:37:d3:f0:29:35:89:a4:dd:53:
                    ee:f7:11:73:b6:02:83:9b:d2:58:ed:a5:d9:43:21:
                    a2:36:4a:57:84:22:21:bc:1e:33:c4:6b:a2:06:30:
                    cb:14:e2:d9:91:f5:73:37:f2:5a:17:07:7d:0f:07:
                    43:25:7c:f3:45:34:f4:df:87:75:05:71:b0:8e:77:
                    9e:22:79:49:d9:6b:5d:e2:39:7f:e0:77:e8:89:bc:
                    b0:d8:aa:b0:f8:c3:3e:9a:c4:95:9f:cb:e9:00:ed:
                    64:a7:70:3b:55:f7:37:ff:9a:d7:f7:a5:fe:b0:8e:
                    b0:df:22:12:96:b7:9d:85:bb:c6:46:e7:e2:2b:cb:
                    04:30:b2:fd:b3:35:d6:22:ba:20:89:2a:a4:15:14:
                    e4:32:d1:47:4c:34:25:67:77:4e:d7:07:76:16:c2:
                    3d:7b:f2:ef:8f:0e:db:36:dd:2a:41:fb:8a:23:60:
                    0a:ff:14:72:87:be:2c:26:99:f6:c0:6d:90:21:ac:
                    93:a8:b3:81:e7:ee:c5:5f:5b:d7:0c:9b:46:65:0c:
                    6b:17:5a:dd:59:30:0e:e8:b0:75:6d:c4:92:51:63:
                    9d:4b:42:19:63:c5:67:27:15:0e:66:46:a7:b8:52:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:83:B5:72:E4:5D:A5:65:AD:E4:B5:99:EE:FD:CD:37:BC:10:9A
            X509v3 Authority Key Identifier:
                keyid:07:5E:CA:CF:C1:4C:20:C6:41:72:59:26:23:06:58:E6:5D:62:44:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/075ECACFC14C20C641725926230658E65D624491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/075ECACFC14C20C641725926230658E65D624491.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:dc:3c:27:41:74:6c:c9:2f:55:ec:04:46:3d:18:3a:46:
         55:b9:8c:8c:b6:ed:a2:00:e7:4e:94:bf:67:55:8b:8d:a1:3c:
         c0:84:6d:29:0f:ee:9c:52:59:6d:07:4c:89:24:4a:8c:33:bb:
         5d:62:5b:e3:1a:18:bd:57:cd:2e:27:b0:66:e4:43:93:81:ab:
         fc:e6:f4:91:f9:d5:f3:76:80:64:5e:93:72:71:69:28:a4:1d:
         15:28:da:2c:1f:4e:23:4d:4b:71:1d:b0:fc:27:07:77:3b:3b:
         e9:53:7d:1d:24:93:cd:15:25:91:f0:bd:d1:df:6c:fe:6f:58:
         05:2f:67:f1:20:9b:80:6b:42:6f:1d:5a:a4:cd:1d:d4:63:74:
         15:05:60:4c:63:a6:c9:96:b0:8a:bd:a3:dc:49:56:5e:c0:21:
         76:e1:79:a9:04:2f:89:90:dc:5c:f0:c6:27:16:9c:82:40:89:
         2b:32:f2:38:4b:d7:b3:e2:5d:56:cc:1f:91:3c:0c:a8:e0:88:
         32:2d:36:95:26:fd:e8:e4:3f:86:8c:82:81:55:e9:0f:67:98:
         b3:03:d4:ab:85:83:a2:fc:f1:bc:6b:38:c4:39:c1:71:e1:c4:
         04:c4:18:61:2a:12:06:33:39:10:c6:7a:87:dd:9c:f5:1d:5a:
         e8:19:a4:f7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYG0D/3Z0ODTjRCiJZzN9h3lRy9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc1RUNBQ0ZDMTRDMjBDNjQxNzI1OTI2MjMwNjU4RTY1
RDYyNDQ5MTAeFw0yNTA4MjkwNjAwMDBaFw0yNjA4MjgwNjA1MDBaMDMxMTAvBgNV
BAMTKEEzNDA4M0I1NzJFNDVEQTU2NUFERTRCNTk5RUVGRENEMzdCQzEwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClus5K+/aJpXzxO+pCRW/9eYGu
ADfT8Ck1iaTdU+73EXO2AoOb0ljtpdlDIaI2SleEIiG8HjPEa6IGMMsU4tmR9XM3
8loXB30PB0MlfPNFNPTfh3UFcbCOd54ieUnZa13iOX/gd+iJvLDYqrD4wz6axJWf
y+kA7WSncDtV9zf/mtf3pf6wjrDfIhKWt52Fu8ZG5+IrywQwsv2zNdYiuiCJKqQV
FOQy0UdMNCVnd07XB3YWwj178u+PDts23SpB+4ojYAr/FHKHviwmmfbAbZAhrJOo
s4Hn7sVfW9cMm0ZlDGsXWt1ZMA7osHVtxJJRY51LQhljxWcnFQ5mRqe4Ur9VAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUo0CDtXLkXaVlreS1me79zTe8EJowHwYDVR0j
BBgwFoAUB17Kz8FMIMZBclkmIwZY5l1iRJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTg5MDAwN0NEODFFNzFCQTk0RUFBMkUzNjJBMkY3NjM5
M0ExN0NBNzk0MkE5N0ZDODhFQzMxRDdBMDY0QjM0LzAvMDc1RUNBQ0ZDMTRDMjBD
NjQxNzI1OTI2MjMwNjU4RTY1RDYyNDQ5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzVFQ0FDRkMxNEMyMEM2NDE3
MjU5MjYyMzA2NThFNjVENjI0NDkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk4OTAwMDdDRDgxRTcxQkE5NEVBQTJFMzYyQTJGNzYzOTNBMTdDQTc5
NDJBOTdGQzg4RUMzMUQ3QTA2NEIzNC8wLzMyMzgzMDMzM2EzMjYxNjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKtAw
DQYJKoZIhvcNAQELBQADggEBAGD23DwnQXRsyS9V7ARGPRg6RlW5jIy27aIA506U
v2dVi42hPMCEbSkP7pxSWW0HTIkkSowzu11iW+MaGL1XzS4nsGbkQ5OBq/zm9JH5
1fN2gGRek3JxaSikHRUo2iwfTiNNS3EdsPwnB3c7O+lTfR0kk80VJZHwvdHfbP5v
WAUvZ/Egm4BrQm8dWqTNHdRjdBUFYExjpsmWsIq9o9xJVl7AIXbheakEL4mQ3Fzw
xicWnIJAiSsy8jhL17PiXVbMH5E8DKjgiDItNpUm/ejkP4aMgoFV6Q9nmLMD1KuF
g6L88bxrOMQ5wXHhxATEGGEqEgYzORDGeofdnPUdWugZpPc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:34:57 2025 by rpki-client