Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/323830333a616264303a3a2f33322d3438203d3e20323734323232.roa
File:                     323830333a616264303a3a2f33322d3438203d3e20323734323232.roa (raw, json)
Hash identifier:          sdWPmCzYjdMLo0O+r9guU0KckfsglgFOEpDWvoaBurE=
Subject key identifier:   42:DA:65:BE:CF:E5:D1:95:92:94:BD:50:F2:18:48:8D:19:90:A4:ED
Certificate issuer:       /CN=04DA5678A6D80556909D2141072E40172BEFF2A5
Certificate serial:       3B856000731967B8334467BB236690FCD389B1A3
Authority key identifier: 04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/323830333a616264303a3a2f33322d3438203d3e20323734323232.roa
Signing time:             Wed 08 Oct 2025 13:40:00 +0000
ROA not before:           Wed 08 Oct 2025 13:35:00 +0000
ROA not after:            Wed 07 Oct 2026 13:40:00 +0000
asID:                     274222
IP address blocks:        2803:abd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:85:60:00:73:19:67:b8:33:44:67:bb:23:66:90:fc:d3:89:b1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DA5678A6D80556909D2141072E40172BEFF2A5
        Validity
            Not Before: Oct  8 13:35:00 2025 GMT
            Not After : Oct  7 13:40:00 2026 GMT
        Subject: CN=42DA65BECFE5D1959294BD50F218488D1990A4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:f3:77:43:60:eb:cb:2c:ed:38:28:22:7a:
                    df:a3:76:9a:68:ff:ab:77:d8:3c:d6:c4:a4:0e:43:
                    ab:c2:72:2d:ee:4f:2a:e7:2a:b2:f2:cb:37:a0:c0:
                    f8:96:d5:67:ce:14:19:24:87:3e:cb:c2:90:56:bd:
                    b3:30:c2:bb:38:34:bd:c4:81:49:c2:9c:f5:07:62:
                    2e:6c:c7:01:41:8f:8c:6a:b6:c8:ab:c1:e8:f0:6c:
                    e8:65:1c:7e:29:f6:c9:f8:b1:f6:b7:48:48:a7:5d:
                    80:14:3e:68:c6:d6:16:74:88:15:46:9a:10:11:35:
                    38:fa:cb:7b:97:a6:d6:59:72:54:9c:2f:45:b8:a2:
                    c5:a4:f5:c9:d4:88:b1:f0:30:57:48:6f:a7:6b:3f:
                    be:e7:92:4c:7e:50:78:43:69:7d:c1:d1:5d:7d:14:
                    37:68:a0:1a:97:f6:fe:00:fe:14:08:38:7c:c5:de:
                    05:d5:f8:fe:d7:52:27:26:75:ce:32:3c:00:2d:6f:
                    5a:ce:73:69:2a:50:88:c0:66:ed:ec:f9:c1:5d:6b:
                    9a:0b:20:83:51:25:d9:d2:d4:91:45:ad:ba:b9:5e:
                    a2:45:fd:9c:3c:58:ee:6b:e6:3f:62:40:42:b2:26:
                    f8:f3:e7:46:71:14:2e:49:e4:13:c2:0b:a3:e7:30:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DA:65:BE:CF:E5:D1:95:92:94:BD:50:F2:18:48:8D:19:90:A4:ED
            X509v3 Authority Key Identifier:
                keyid:04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/323830333a616264303a3a2f33322d3438203d3e20323734323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:abd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:6e:45:bc:27:4a:74:fc:b5:ca:fc:89:62:5a:64:80:7f:
         72:ad:d9:ed:6c:c4:61:ed:9f:92:b3:19:f0:3a:03:3d:65:67:
         bf:03:51:2d:d0:4f:e1:fc:35:05:ed:6b:39:f5:da:71:36:c4:
         38:07:5e:d4:f6:08:b4:3c:e3:81:bd:56:36:9a:90:73:25:93:
         16:2e:6f:f0:05:8f:f2:ee:1b:5a:45:c3:1c:72:be:7c:96:1d:
         77:e2:f8:c0:4a:c7:24:9a:4f:14:5c:e6:49:cf:b8:3c:1d:03:
         97:02:b4:f9:a8:63:e3:f4:63:1f:2c:0e:d0:11:bb:a7:be:10:
         e4:5d:a0:02:00:bb:99:4d:b9:9e:a3:46:5b:ea:89:75:5e:4f:
         47:dc:13:a8:a0:26:e4:c3:b1:e1:2f:aa:e3:4e:ac:b5:9d:e9:
         cf:11:51:9f:37:9c:f6:d1:d1:91:63:5c:ea:43:e2:31:a3:80:
         27:93:83:e8:37:ff:da:1d:f4:71:71:6b:b3:58:12:28:10:54:
         65:0c:60:bb:a3:ac:c5:c2:a0:f5:94:4a:7a:ab:46:b5:59:d7:
         6f:1f:42:e1:91:0a:49:2c:56:f9:3b:ad:16:e5:c0:ac:b1:be:
         06:e7:ae:c4:01:35:4a:58:bf:02:35:32:c3:45:cb:7d:25:3d:
         43:e3:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:47 2025 by rpki-client