Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa
File:                     323830333a336136303a3a2f33322d3438203d3e20323633313839.roa (raw, json)
Hash identifier:          38tDmsQ7m1ItWEtJAkgvTgi5PF90kNUivpP6wMmaL9M=
Subject key identifier:   59:AD:2A:38:31:E8:F6:CA:F5:D6:F0:C0:7B:0B:DD:89:63:E9:91:1F
Certificate issuer:       /CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
Certificate serial:       5DE8561B40893D5346EF8AF19B2B11474DB6840B
Authority key identifier: 78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa
Signing time:             Tue 23 Sep 2025 16:30:00 +0000
ROA not before:           Tue 23 Sep 2025 16:25:00 +0000
ROA not after:            Tue 22 Sep 2026 16:30:00 +0000
asID:                     263189
IP address blocks:        2803:3a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:56:1b:40:89:3d:53:46:ef:8a:f1:9b:2b:11:47:4d:b6:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
        Validity
            Not Before: Sep 23 16:25:00 2025 GMT
            Not After : Sep 22 16:30:00 2026 GMT
        Subject: CN=59AD2A3831E8F6CAF5D6F0C07B0BDD8963E9911F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:0c:ca:83:de:6b:6d:25:92:89:5d:df:e5:
                    0a:83:1a:a4:a9:93:65:df:55:96:da:f5:ae:4c:80:
                    2a:ac:ab:da:f5:08:f4:e4:c8:cd:aa:7e:bf:ed:14:
                    1e:a7:74:7a:35:e3:36:31:54:ba:5c:7a:b7:61:be:
                    fa:7a:18:ca:5d:28:1d:95:57:a4:47:55:74:84:79:
                    49:a1:ec:a3:64:de:ad:f4:81:af:49:4e:0e:13:6e:
                    e9:d9:e4:1d:57:11:07:83:48:a3:2c:42:5c:64:46:
                    c6:4d:a1:5a:d5:78:95:b0:e6:f1:09:11:cd:56:45:
                    59:5a:3e:17:5c:0a:81:ff:5e:17:e1:b0:f1:85:42:
                    14:75:be:20:5b:a8:e9:ad:7e:9e:24:19:ff:c4:00:
                    19:39:68:39:ca:d7:89:39:14:87:e7:94:fa:26:da:
                    bf:4f:cb:ac:90:3a:2a:5b:70:89:53:37:45:07:7a:
                    68:9f:99:f5:69:5d:b0:1a:e8:91:ea:2b:56:48:bc:
                    45:78:de:7c:54:ff:eb:d6:fe:dc:1d:bd:ec:48:0c:
                    ed:f6:46:2d:87:70:ec:fc:e1:da:62:aa:44:3b:f6:
                    86:83:1e:5b:5a:92:a0:7b:35:29:e4:16:9f:bd:7c:
                    8e:03:d0:e5:cd:43:49:f0:e4:e5:9a:d5:07:6d:32:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:2A:38:31:E8:F6:CA:F5:D6:F0:C0:7B:0B:DD:89:63:E9:91:1F
            X509v3 Authority Key Identifier:
                keyid:78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:2c:06:de:70:35:3f:84:3c:48:2a:d8:09:b7:6c:1e:c5:
         eb:d9:d0:7a:3d:98:a9:27:ee:91:9d:f1:06:cf:0e:f2:d7:a0:
         6f:a5:5b:45:9f:2a:7c:51:a5:2e:ac:f4:56:5e:29:86:67:16:
         f2:a5:8d:4f:8f:ae:15:bc:fb:5c:4f:63:c5:7f:0f:7b:61:61:
         b1:84:3b:14:86:29:68:b9:1f:2b:95:87:90:3a:c7:95:92:36:
         40:84:65:b9:c9:8b:3d:ba:b8:02:01:19:05:38:29:ff:43:de:
         13:5f:4a:52:6f:74:54:3d:b5:52:70:a9:aa:5f:79:ad:3e:6a:
         90:95:66:32:70:c0:7b:62:78:8a:28:02:a2:50:6a:9e:14:ea:
         8b:ef:ca:4a:1b:a4:9b:93:9d:e6:d8:33:38:8d:96:74:48:f7:
         db:d2:1b:85:54:7a:b7:63:ac:df:19:0b:f2:32:7a:ee:d3:cd:
         db:bb:7d:90:a6:2f:15:75:a2:c5:b4:28:25:f9:07:d6:81:71:
         1c:be:2c:0f:2d:40:3c:2d:75:12:dd:a5:cf:f7:fb:34:15:8d:
         91:81:84:eb:b6:49:30:9c:72:94:a5:8d:06:bd:cc:25:8d:e4:
         3f:be:b6:09:8f:3a:41:ae:66:0d:21:dc:e7:6b:ed:e5:9f:74:
         20:c2:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:13:36 2025 by rpki-client