Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa
File:                     323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier:          p8x0MdeykY9xIIivY1WwUPJPtWsZnh9g6AjQ/ov/KCc=
Subject key identifier:   08:FE:25:08:97:93:91:5F:65:20:23:73:19:75:85:7C:0E:52:E9:BB
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       4089552B062699B28F559ACF991D60111B23842B
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa
Signing time:             Mon 15 Sep 2025 02:46:34 +0000
ROA not before:           Mon 15 Sep 2025 02:41:34 +0000
ROA not after:            Mon 14 Sep 2026 02:46:34 +0000
asID:                     272889
IP address blocks:        2803:8690:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:55:2b:06:26:99:b2:8f:55:9a:cf:99:1d:60:11:1b:23:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Sep 15 02:41:34 2025 GMT
            Not After : Sep 14 02:46:34 2026 GMT
        Subject: CN=08FE25089793915F652023731975857C0E52E9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:72:03:5a:29:ed:82:24:d9:8a:ef:04:1b:
                    5c:35:db:b1:57:57:00:68:a4:17:45:ec:b4:ba:7a:
                    fe:d4:54:c9:66:75:b1:40:ce:be:36:f3:39:8c:59:
                    5f:66:f6:6e:78:ee:1f:b0:6e:6f:69:5f:9e:56:f1:
                    26:c2:65:81:40:0b:d4:54:27:5e:5d:38:b0:51:58:
                    ad:57:d2:c5:eb:1f:84:a1:12:ee:66:25:c4:db:21:
                    4d:10:1e:9f:d1:91:ca:e3:25:d1:e9:6c:e4:eb:4c:
                    1d:ed:7e:c1:6f:32:00:08:31:79:cc:79:ba:db:0f:
                    ff:31:08:ea:ce:53:33:11:d3:a2:45:83:ed:40:53:
                    4d:0c:16:48:e7:b4:c0:80:87:e5:3e:8c:60:fc:d0:
                    a5:3d:96:1f:41:0a:48:2e:b0:08:8b:e4:7e:df:62:
                    6e:6d:c5:f9:63:33:03:57:d7:75:56:00:ca:4a:0a:
                    5c:61:48:f7:27:36:7b:b2:8d:05:c7:a7:5e:2d:5b:
                    ad:e4:8f:ef:42:ef:6b:33:b2:43:96:9c:4b:1e:29:
                    c5:b3:88:ce:db:d6:4f:0b:05:6d:77:8c:b7:a1:c8:
                    cb:18:68:cb:28:3f:64:87:da:4d:f5:dc:a6:31:e4:
                    2f:71:03:79:48:b4:67:bc:07:a0:4a:7f:d6:4e:cf:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FE:25:08:97:93:91:5F:65:20:23:73:19:75:85:7C:0E:52:E9:BB
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:87:21:ff:04:39:9b:62:b1:33:af:75:54:f0:20:d6:e6:
         79:e0:ae:a5:29:9c:dc:76:37:d8:0a:c2:0d:48:e9:a3:ee:4e:
         db:aa:c9:b2:0c:d2:16:e9:43:c2:7a:bb:7f:22:63:e8:84:0d:
         5d:f2:b6:78:80:1f:3c:a7:84:cd:f6:37:90:05:38:3a:ca:41:
         ff:23:01:af:df:c4:dd:16:16:64:05:ef:65:d7:bc:ab:0c:76:
         34:b6:56:0b:4f:65:6a:0b:39:9b:29:a8:1a:e4:15:94:d8:8f:
         25:c5:83:68:00:71:35:04:7b:ae:cf:8f:62:ec:64:6a:1d:d0:
         ab:57:6c:af:19:9f:27:b9:8d:90:91:f7:a0:bb:65:3f:24:40:
         1c:5f:7e:a7:92:9b:d5:f5:2d:32:fb:8f:2a:1d:b2:89:d1:fc:
         2a:6c:ce:90:84:f8:58:6d:0e:9b:89:c8:16:64:d1:de:b8:f1:
         c2:74:20:90:5e:88:78:76:4c:d9:2f:61:79:17:7e:ba:05:08:
         3e:0e:bf:fd:6b:76:e2:6b:23:ab:39:85:27:92:da:68:64:d0:
         af:9a:13:42:7a:7e:ff:74:3f:a4:d4:b9:ee:72:d5:f5:91:b6:
         70:a7:d3:c9:f0:e4:0b:ec:e6:96:02:dd:9a:16:41:fe:6a:07:
         7b:8b:84:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:29:57 2025 by rpki-client