Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa
File:                     323830303a3234303a3a2f33322d3332203d3e203132393536.roa (raw, json)
Hash identifier:          qBa7vtrHfapmR9t+vJs828iEshCall7+AqBdaVkDQm4=
Subject key identifier:   3F:56:42:07:72:6E:37:D9:A9:25:E3:12:9B:C3:C5:BE:DE:25:C3:39
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       7FA8A3B62504BE311FFE7FA71C084CEFCA9ACB3C
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa
Signing time:             Wed 08 Oct 2025 10:49:47 +0000
ROA not before:           Wed 08 Oct 2025 10:44:47 +0000
ROA not after:            Wed 07 Oct 2026 10:49:47 +0000
asID:                     12956
IP address blocks:        2800:240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a8:a3:b6:25:04:be:31:1f:fe:7f:a7:1c:08:4c:ef:ca:9a:cb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Oct  8 10:44:47 2025 GMT
            Not After : Oct  7 10:49:47 2026 GMT
        Subject: CN=3F564207726E37D9A925E3129BC3C5BEDE25C339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:d3:a7:4b:e5:62:60:17:7a:0b:bb:c5:a2:
                    1c:03:59:ec:ec:a9:d1:9a:41:ec:14:d9:62:3a:af:
                    41:28:76:f3:e7:d6:03:c1:e8:c3:b1:f3:ee:ce:0d:
                    dc:16:b7:09:52:15:da:4d:73:a4:f5:5b:29:0b:e0:
                    10:ea:e1:85:bd:89:63:54:a3:7f:76:b0:65:18:ab:
                    a4:56:24:30:00:85:1c:f4:95:31:f9:ce:e3:a7:75:
                    91:95:24:fa:98:b9:b7:f2:c1:c7:1d:06:fa:ae:42:
                    33:03:44:58:7c:15:08:f9:6c:81:e4:5f:19:44:b1:
                    8c:df:23:4c:31:20:c0:3c:ee:56:50:db:f9:90:a5:
                    30:53:7e:79:28:35:d3:90:78:96:0c:84:3c:2a:81:
                    29:cb:c7:49:8e:78:23:82:aa:ce:ea:5c:c4:10:ca:
                    f8:1f:57:fb:16:31:19:3b:d7:bb:5c:10:8b:78:41:
                    32:40:04:3a:9f:82:af:f7:3f:65:7e:84:b3:52:12:
                    89:de:50:4e:6c:25:8e:16:3a:ec:ab:89:d2:87:9a:
                    5b:ba:2d:81:2b:d1:61:f4:2f:a0:65:3f:65:08:91:
                    a5:c1:60:61:94:1e:24:7e:84:92:dc:af:27:ab:5f:
                    3f:ab:5a:a8:c4:d1:4b:6a:fc:c5:0e:ec:6e:f4:ad:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:42:07:72:6E:37:D9:A9:25:E3:12:9B:C3:C5:BE:DE:25:C3:39
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:22:fe:ed:0b:50:56:c7:e2:63:43:2d:81:96:3f:78:83:
         1f:be:e8:38:75:83:0b:b1:ec:b5:65:8b:3e:bc:cb:7a:7e:41:
         60:6e:ff:55:fc:15:4e:3c:07:a9:13:d6:10:0b:82:c8:65:ff:
         a3:3f:32:19:af:11:c0:83:72:39:fb:3b:2f:14:ab:eb:82:ec:
         78:4e:5b:6d:4a:ad:cf:ff:24:f5:d6:41:a4:f4:a1:cb:e8:66:
         37:d5:f0:44:6e:aa:12:75:35:f6:30:06:ae:94:59:e5:ca:37:
         14:5e:f9:26:ad:32:99:73:b5:2d:2d:36:96:ed:eb:57:2c:b5:
         a5:ac:72:d3:b7:15:13:34:4d:97:06:8d:67:78:27:9f:7e:aa:
         10:b7:7e:c1:06:f3:9d:76:1e:28:7a:80:3f:a8:4c:05:fd:98:
         d8:b4:33:64:3a:75:f8:5b:d1:a6:9a:83:4b:e7:49:b6:32:ed:
         bc:ce:62:ec:fa:a8:79:97:94:32:64:61:79:8c:ec:1b:5c:e5:
         86:e0:38:16:84:a1:38:57:86:88:0d:23:12:24:36:1e:93:7c:
         91:48:12:d8:8e:8e:b2:e5:2b:eb:30:d5:cf:74:14:ca:f8:c8:
         e3:36:e9:08:44:98:b0:42:c4:5b:39:ea:cf:6a:8d:2a:7f:ae:
         f4:39:97:f7
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUf6ijtiUEvjEf/n+nHAhM78qayzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxQUJGMjM3Mjc3RkVBRjI0MTE3RUJCRTI4RDlENTdF
NDQyNDMzQTAeFw0yNTEwMDgxMDQ0NDdaFw0yNjEwMDcxMDQ5NDdaMDMxMTAvBgNV
BAMTKDNGNTY0MjA3NzI2RTM3RDlBOTI1RTMxMjlCQzNDNUJFREUyNUMzMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tNOnS+ViYBd6C7vFohwDWezs
qdGaQewU2WI6r0EodvPn1gPB6MOx8+7ODdwWtwlSFdpNc6T1WykL4BDq4YW9iWNU
o392sGUYq6RWJDAAhRz0lTH5zuOndZGVJPqYubfywccdBvquQjMDRFh8FQj5bIHk
XxlEsYzfI0wxIMA87lZQ2/mQpTBTfnkoNdOQeJYMhDwqgSnLx0mOeCOCqs7qXMQQ
yvgfV/sWMRk717tcEIt4QTJABDqfgq/3P2V+hLNSEoneUE5sJY4WOuyridKHmlu6
LYEr0WH0L6BlP2UIkaXBYGGUHiR+hJLcryerXz+rWqjE0Utq/MUO7G70rR8zAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUP1ZCB3JuN9mpJeMSm8PFvt4lwzkwHwYDVR0j
BBgwFoAUthq/I3J3/q8kEX674o2dV+RCQzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRDlEODEwOUI1QjBFRDg2RkY5MUMwMjJEOTY0MTJENkRB
MDg2Qjg2NDlDNTk3NUJBREVCMzY5RjUwRjIzOTIzLzAvQjYxQUJGMjM3Mjc3RkVB
RjI0MTE3RUJCRTI4RDlENTdFNDQyNDMzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjFBQkYyMzcyNzdGRUFGMjQx
MTdFQkJFMjhEOUQ1N0U0NDI0MzNBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUQ5RDgxMDlCNUIwRUQ4NkZGOTFDMDIyRDk2NDEyRDZEQTA4NkI4NjQ5
QzU5NzVCQURFQjM2OUY1MEYyMzkyMy8wLzMyMzgzMDMwM2EzMjM0MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMTMyMzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAACQDANBgkq
hkiG9w0BAQsFAAOCAQEAAJsi/u0LUFbH4mNDLYGWP3iDH77oOHWDC7HstWWLPrzL
en5BYG7/VfwVTjwHqRPWEAuCyGX/oz8yGa8RwINyOfs7LxSr64LseE5bbUqtz/8k
9dZBpPShy+hmN9XwRG6qEnU19jAGrpRZ5co3FF75Jq0ymXO1LS02lu3rVyy1paxy
07cVEzRNlwaNZ3gnn36qELd+wQbznXYeKHqAP6hMBf2Y2LQzZDp1+FvRppqDS+dJ
tjLtvM5i7PqoeZeUMmRheYzsG1zlhuA4FoShOFeGiA0jEiQ2HpN8kUgS2I6OsuUr
6zDVz3QUyvjI4zbpCESYsELEWznqz2qNKn+u9DmX9w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:21 2025 by rpki-client