Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/323830333a653031303a3a2f33322d3332203d3e203237383831.roa
File:                     323830333a653031303a3a2f33322d3332203d3e203237383831.roa (raw, json)
Hash identifier:          g4UPMBlCzMxnEgxHuVsVtp3jjQNKzK3POMvXxIYZ9O4=
Subject key identifier:   05:84:0B:35:02:7C:15:47:9B:04:11:C8:13:C9:DB:4C:02:48:25:28
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       1ABBCB13BDC1DBD7AB8BDECD3D400F19CE2AF448
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/323830333a653031303a3a2f33322d3332203d3e203237383831.roa
Signing time:             Mon 06 Oct 2025 20:49:41 +0000
ROA not before:           Mon 06 Oct 2025 20:44:41 +0000
ROA not after:            Mon 05 Oct 2026 20:49:41 +0000
asID:                     27881
IP address blocks:        2803:e010::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bb:cb:13:bd:c1:db:d7:ab:8b:de:cd:3d:40:0f:19:ce:2a:f4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Oct  6 20:44:41 2025 GMT
            Not After : Oct  5 20:49:41 2026 GMT
        Subject: CN=05840B35027C15479B0411C813C9DB4C02482528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:f2:a2:92:3c:be:3d:fb:bf:dc:6a:78:58:
                    7a:55:1a:e8:72:3f:30:a3:26:15:72:e5:36:65:6a:
                    77:80:83:18:93:bc:d2:fb:34:be:4e:b5:d3:21:86:
                    c9:cc:2b:a3:f3:2b:71:54:60:9e:76:e2:5f:6e:b2:
                    5b:10:30:37:6c:61:95:93:82:b8:29:a3:59:cb:0b:
                    ca:28:fe:39:6d:c7:cc:68:3f:18:0c:43:cc:6b:ee:
                    fa:ff:14:31:00:f9:a3:30:2a:66:1b:4d:26:3d:e4:
                    6d:b4:97:b6:0c:bf:b9:33:51:c6:7b:c5:10:5a:86:
                    fd:8b:2a:ad:99:e4:69:f5:e8:a9:0e:ff:c6:39:45:
                    a1:53:fe:07:b4:ca:31:ec:ad:af:eb:ef:1d:0a:68:
                    5b:0f:16:ad:02:c4:7d:09:c7:2c:83:18:9f:6c:14:
                    fc:00:4f:1e:3f:3f:a2:bc:1d:33:89:ab:bb:4a:bc:
                    5d:d0:02:8e:18:af:c5:37:d9:61:17:f4:b4:ee:e0:
                    c6:6b:af:22:67:fe:e1:38:c9:73:c6:fe:8c:78:cb:
                    0d:ff:e4:ac:1a:ca:c1:dc:66:4c:ee:90:70:08:eb:
                    a7:e6:62:4b:0b:78:7a:b8:f1:40:0f:0d:58:9e:c0:
                    67:84:cc:04:b6:3d:f3:94:cc:4f:f5:61:ac:9a:fc:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:0B:35:02:7C:15:47:9B:04:11:C8:13:C9:DB:4C:02:48:25:28
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/323830333a653031303a3a2f33322d3332203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e010::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:4e:0e:da:e0:28:07:91:9c:9d:02:66:04:73:03:c2:81:
         c7:6d:bf:63:01:ca:b5:d9:a5:2c:12:52:f7:6b:e9:86:73:83:
         70:a3:6a:c7:e7:6e:d9:80:38:3d:e5:ac:ca:94:15:c1:91:3a:
         52:f4:c5:42:fd:5b:a8:31:59:6d:13:79:44:fc:7c:d9:cd:95:
         54:91:da:28:46:35:94:10:1b:c1:86:98:37:47:1b:84:56:ba:
         ec:17:e5:8f:1b:28:b2:62:05:21:4d:58:bc:d8:65:db:77:2f:
         1f:6b:09:7c:2b:af:c0:94:25:5e:9b:d0:65:55:20:85:47:a2:
         ac:b2:7f:17:fd:be:55:1a:d9:0c:b8:ac:87:cd:58:51:de:30:
         84:14:51:31:0b:7d:91:ad:f7:06:70:5c:78:a5:6a:92:32:8b:
         5d:49:f0:6f:d8:44:62:0a:47:53:77:10:2e:e8:49:e7:32:98:
         ae:76:f9:71:0c:cf:6d:f5:69:a6:4d:93:7b:6f:13:6e:b8:e7:
         63:eb:2e:45:c7:27:49:63:f2:c2:aa:d0:40:19:07:56:2e:4d:
         c8:ea:bf:24:56:40:0e:eb:07:7c:63:dc:5c:b4:d3:f0:52:6c:
         b6:d6:ff:23:b4:08:8f:35:a3:58:d6:16:2f:3e:69:93:77:c4:
         5a:a7:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:57:01 2025 by rpki-client