Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3430303a3a2f34302d3438203d3e20323636373930.roa
File:                     323830333a613061303a3430303a3a2f34302d3438203d3e20323636373930.roa (raw, json)
Hash identifier:          zRJwhLXhpTVY9KUQSAhsqw97hMbYNa7UhgCVo/FlX58=
Subject key identifier:   DE:B8:FA:C6:AF:2F:D5:C4:CA:C0:81:8B:86:46:01:18:D7:35:BE:BD
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       4349E75315248AA5D13A4B552D45FAC0C153C822
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3430303a3a2f34302d3438203d3e20323636373930.roa
Signing time:             Wed 06 Aug 2025 21:45:00 +0000
ROA not before:           Wed 06 Aug 2025 21:40:00 +0000
ROA not after:            Wed 05 Aug 2026 21:45:00 +0000
asID:                     266790
IP address blocks:        2803:a0a0:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:e7:53:15:24:8a:a5:d1:3a:4b:55:2d:45:fa:c0:c1:53:c8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Aug  6 21:40:00 2025 GMT
            Not After : Aug  5 21:45:00 2026 GMT
        Subject: CN=DEB8FAC6AF2FD5C4CAC0818B86460118D735BEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:7b:78:ec:41:cc:a1:cf:0f:1a:88:79:c2:
                    58:26:75:9b:c8:f1:a0:fa:e1:04:49:ea:5e:d6:65:
                    74:87:6f:f3:1f:3d:32:d6:02:24:fb:73:29:79:ed:
                    51:b6:9b:fc:5b:0d:41:6a:6e:b4:1b:c0:e8:34:ae:
                    33:bc:41:74:e9:57:0e:bd:22:29:e0:7b:ed:e0:de:
                    3e:01:47:15:80:a4:55:fb:75:a6:bf:2b:86:7e:f3:
                    74:c9:b7:59:f2:e5:ed:1b:b6:46:32:03:64:75:a9:
                    24:b2:1f:71:17:bc:82:18:02:83:68:32:64:f1:59:
                    ef:04:13:42:a1:6f:cc:b7:78:4a:c0:29:3e:d4:54:
                    5b:23:14:e7:6a:ce:e9:5d:08:42:8d:fc:e0:46:53:
                    8f:7e:76:7e:e3:c8:97:4d:1a:db:11:74:ba:83:fa:
                    05:d3:6d:a6:15:48:d5:b4:70:f4:3b:a5:0f:27:21:
                    7e:0f:6d:8a:bf:db:8c:b5:c8:0c:6c:5a:bc:69:42:
                    25:1d:b8:d9:46:a1:e3:98:a1:d9:fa:60:a9:a2:cf:
                    cc:1b:7d:d4:73:e0:ac:fe:7f:7f:2e:2b:76:38:d8:
                    fb:02:58:ba:a6:d8:68:b2:78:d7:b9:6d:1d:6d:92:
                    9a:59:be:20:48:fe:12:c3:de:1b:fe:c5:83:7a:74:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:FA:C6:AF:2F:D5:C4:CA:C0:81:8B:86:46:01:18:D7:35:BE:BD
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3430303a3a2f34302d3438203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:e3:34:f5:de:c6:66:37:78:1b:9f:e3:38:9f:ab:10:f9:
         5a:fa:d0:00:a4:e0:a9:95:03:6c:89:18:38:ee:55:b4:c3:22:
         d5:c9:cf:0c:c8:2a:d3:f3:98:10:b4:21:29:a0:5f:c2:0d:83:
         82:7e:fb:57:40:fa:03:e1:89:f2:e8:c2:4e:cf:07:a9:e5:aa:
         c5:b6:3e:4a:c3:1e:d6:79:4c:a9:14:c2:ce:35:f3:7f:ba:5d:
         e5:d5:d3:48:36:1f:32:08:23:18:7f:49:31:99:29:3a:96:85:
         03:c5:64:f5:89:c4:60:be:0f:0e:f8:6e:dc:f6:1f:cb:73:c2:
         dc:0d:75:6a:57:28:a6:2a:f7:16:aa:82:50:a9:66:21:99:6f:
         9b:67:9f:17:79:c3:e9:b5:7e:74:de:74:e9:fe:c6:b7:b3:f7:
         68:1f:6e:22:70:ff:4d:56:8a:8d:c7:32:92:44:ea:da:25:9f:
         dd:43:1a:19:41:6a:d4:c5:8c:16:74:79:f7:10:23:6f:10:30:
         15:67:cd:e6:57:92:09:2c:33:b3:e0:d6:47:fa:16:ad:d1:4d:
         5e:22:73:40:8c:90:86:be:16:81:0e:c3:1e:c9:cd:7f:f8:bc:
         74:f7:06:9b:df:f9:f4:2d:68:c8:a7:32:c7:a0:7c:a9:da:45:
         c8:df:dc:3f
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUQ0nnUxUkiqXROktVLUX6wMFTyCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCOTQyRjI0NDJBNEI4NzhEQ0Y3RTQzMDg5QjYwQjk0
OTU1NjA4RDAeFw0yNTA4MDYyMTQwMDBaFw0yNjA4MDUyMTQ1MDBaMDMxMTAvBgNV
BAMTKERFQjhGQUM2QUYyRkQ1QzRDQUMwODE4Qjg2NDYwMTE4RDczNUJFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0nt47EHMoc8PGoh5wlgmdZvI
8aD64QRJ6l7WZXSHb/MfPTLWAiT7cyl57VG2m/xbDUFqbrQbwOg0rjO8QXTpVw69
Iinge+3g3j4BRxWApFX7daa/K4Z+83TJt1ny5e0btkYyA2R1qSSyH3EXvIIYAoNo
MmTxWe8EE0Khb8y3eErAKT7UVFsjFOdqzuldCEKN/OBGU49+dn7jyJdNGtsRdLqD
+gXTbaYVSNW0cPQ7pQ8nIX4PbYq/24y1yAxsWrxpQiUduNlGoeOYodn6YKmiz8wb
fdRz4Kz+f38uK3Y42PsCWLqm2GiyeNe5bR1tkppZviBI/hLD3hv+xYN6dGn9AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU3rj6xq8v1cTKwIGLhkYBGNc1vr0wHwYDVR0j
BBgwFoAUablC8kQqS4eNz35DCJtguUlVYI0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUMxQTNDMjIwMENBNEE1QjJEQ0M2RUZGNjNGRkE3N0Y4
M0IyNTRCRTIyQjA3NTI2REUzOUFDRkUzREU4QzVELzAvNjlCOTQyRjI0NDJBNEI4
NzhEQ0Y3RTQzMDg5QjYwQjk0OTU1NjA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUI5NDJGMjQ0MkE0Qjg3OERD
RjdFNDMwODlCNjBCOTQ5NTU2MDhELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVDMUEzQzIyMDBDQTRBNUIyRENDNkVGRjYzRkZBNzdGODNCMjU0QkUy
MkIwNzUyNkRFMzlBQ0ZFM0RFOEM1RC8wLzMyMzgzMDMzM2E2MTMwNjEzMDNhMzQz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNjM2MzczOTMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOgoAQwDQYJKoZIhvcNAQELBQADggEBAKL64zT13sZmN3gbn+M4n6sQ+Vr6
0ACk4KmVA2yJGDjuVbTDItXJzwzIKtPzmBC0ISmgX8INg4J++1dA+gPhifLowk7P
B6nlqsW2PkrDHtZ5TKkUws4183+6XeXV00g2HzIIIxh/STGZKTqWhQPFZPWJxGC+
Dw74btz2H8tzwtwNdWpXKKYq9xaqglCpZiGZb5tnnxd5w+m1fnTedOn+xrez92gf
biJw/01Wio3HMpJE6toln91DGhlBatTFjBZ0efcQI28QMBVnzeZXkgksM7Pg1kf6
Fq3RTV4ic0CMkIa+FoEOwx7JzX/4vHT3Bpvf+fQtaMinMsegfKnaRcjf3D8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:45 2025 by rpki-client