Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
File:                     323830333a666434303a3a2f33322d3332203d3e20323635373830.roa (raw, json)
Hash identifier:          Jks0FA+n9X0sI44f4DKYmNM0Zd06QZSpVZYIPCOjud8=
Subject key identifier:   8A:50:6C:1F:75:D7:3E:70:33:6F:E1:45:AD:61:15:02:A3:80:8F:3F
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       55611BF34C32740DBC658FEFCEC0F247C7739E75
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
Signing time:             Tue 30 Sep 2025 15:55:00 +0000
ROA not before:           Tue 30 Sep 2025 15:50:00 +0000
ROA not after:            Tue 29 Sep 2026 15:55:00 +0000
asID:                     265780
IP address blocks:        2803:fd40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 14:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:1b:f3:4c:32:74:0d:bc:65:8f:ef:ce:c0:f2:47:c7:73:9e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Sep 30 15:50:00 2025 GMT
            Not After : Sep 29 15:55:00 2026 GMT
        Subject: CN=8A506C1F75D73E70336FE145AD611502A3808F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:ab:3d:07:9b:38:e2:42:ee:e3:ce:4e:a5:
                    2c:7f:eb:e3:63:45:c1:28:aa:96:7f:be:7e:ac:df:
                    08:f4:ac:db:01:ed:67:2c:35:2f:3f:aa:12:8b:2f:
                    a4:d4:99:ec:02:3d:e0:0a:78:97:35:5f:6c:a8:c1:
                    03:c9:00:6e:26:f7:9d:d6:02:82:46:ca:32:87:36:
                    83:00:c7:8b:12:5c:d1:d5:f9:d2:69:80:cf:93:a9:
                    fa:15:41:be:48:9f:60:6a:67:14:7d:2f:dc:50:9c:
                    33:8b:8a:20:5f:fd:5f:e8:6b:df:c3:a4:c2:9c:f9:
                    27:d5:29:6f:a8:f3:dc:1f:b6:8f:80:6c:01:6a:e0:
                    4a:27:47:4c:ce:8f:f2:70:8c:d8:ca:a6:df:cb:16:
                    f5:89:27:87:70:61:75:b5:b3:11:a3:d2:00:17:55:
                    cc:40:85:32:66:cb:fa:cd:04:02:64:38:94:3e:c9:
                    6f:22:22:db:a5:73:ba:02:d3:17:89:63:e1:a1:55:
                    bd:54:f6:d6:fb:b3:0e:cd:30:9d:95:ff:5f:54:f7:
                    87:d9:25:74:8e:19:9c:c4:ad:eb:b4:b8:fb:72:d5:
                    2e:92:d6:44:fe:66:5c:53:83:f4:a0:67:86:e1:d5:
                    b7:11:43:4a:27:30:b3:69:27:4c:c0:d0:67:9e:63:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:50:6C:1F:75:D7:3E:70:33:6F:E1:45:AD:61:15:02:A3:80:8F:3F
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:eb:b0:42:cc:cd:95:a3:e6:bd:26:7a:a3:43:29:e2:a0:26:
         74:d0:d5:18:1d:95:23:31:a9:d9:ce:63:8f:1d:50:7f:77:69:
         cc:d5:8e:64:fc:d1:2a:c3:2e:8a:08:eb:72:c8:dc:8f:f8:ba:
         8f:2c:1a:5e:42:76:15:93:32:e2:55:8f:04:2d:66:ad:b9:03:
         00:3a:9c:b0:7a:d6:fc:69:42:a1:80:ee:26:1b:90:d4:b8:1f:
         06:8d:3e:b6:1c:0a:95:95:6f:8a:f7:f3:1a:ef:14:71:f8:73:
         47:d3:01:5a:2c:6b:35:3b:b4:17:7e:72:ce:b4:35:ea:da:9a:
         71:f2:a0:82:7f:0b:9a:fd:45:5c:b0:e5:f2:bc:d2:1d:3f:7c:
         06:ff:70:04:d9:28:ee:1f:da:75:f8:73:25:eb:f5:53:7b:7f:
         91:a5:d0:b2:83:df:15:ec:c9:43:49:a8:e6:d2:72:e1:9a:95:
         02:15:1c:cc:0e:2c:d6:86:3a:3e:9b:eb:ef:94:c8:62:95:2f:
         ce:15:d2:53:82:f5:29:c0:00:73:c6:7e:f6:04:0e:8f:dc:2d:
         45:a1:70:d2:73:6a:47:8e:d0:c8:69:c9:26:53:85:db:23:3b:
         d5:6b:0b:be:0f:b1:e7:d5:a6:fc:92:6e:78:1f:c8:74:11:18:
         82:03:67:5c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVWEb80wydA28ZY/vzsDyR8dznnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNTA5MzAxNTUwMDBaFw0yNjA5MjkxNTU1MDBaMDMxMTAvBgNV
BAMTKDhBNTA2QzFGNzVENzNFNzAzMzZGRTE0NUFENjExNTAyQTM4MDhGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cas9B5s44kLu485OpSx/6+Nj
RcEoqpZ/vn6s3wj0rNsB7WcsNS8/qhKLL6TUmewCPeAKeJc1X2yowQPJAG4m953W
AoJGyjKHNoMAx4sSXNHV+dJpgM+TqfoVQb5In2BqZxR9L9xQnDOLiiBf/V/oa9/D
pMKc+SfVKW+o89wfto+AbAFq4EonR0zOj/JwjNjKpt/LFvWJJ4dwYXW1sxGj0gAX
VcxAhTJmy/rNBAJkOJQ+yW8iItulc7oC0xeJY+GhVb1U9tb7sw7NMJ2V/19U94fZ
JXSOGZzEreu0uPty1S6S1kT+ZlxTg/SgZ4bh1bcRQ0onMLNpJ0zA0GeeYzR9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUilBsH3XXPnAzb+FFrWEVAqOAjz8wHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMyMzgzMDMzM2E2NjY0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM3MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/UAw
DQYJKoZIhvcNAQELBQADggEBAGDrsELMzZWj5r0meqNDKeKgJnTQ1RgdlSMxqdnO
Y48dUH93aczVjmT80SrDLooI63LI3I/4uo8sGl5CdhWTMuJVjwQtZq25AwA6nLB6
1vxpQqGA7iYbkNS4HwaNPrYcCpWVb4r38xrvFHH4c0fTAVosazU7tBd+cs60Nera
mnHyoIJ/C5r9RVyw5fK80h0/fAb/cATZKO4f2nX4cyXr9VN7f5Gl0LKD3xXsyUNJ
qObScuGalQIVHMwOLNaGOj6b6++UyGKVL84V0lOC9SnAAHPGfvYEDo/cLUWhcNJz
akeO0MhpySZThdsjO9VrC74PsefVpvySbngfyHQRGIIDZ1w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:13:44 2025 by rpki-client