Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3161643a63303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          06iAa0RWGAgHqESOsPraI9k06Vqp5JRh2z2TdvTXBas=
Subject key identifier:   17:74:60:B4:CD:DC:24:C7:10:C2:52:1C:F3:BA:61:4C:30:47:19:18
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       1F0369F906C338EBC8C0A4149CD5C02C4F6558BC
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Wed 17 Sep 2025 01:30:00 +0000
ROA not before:           Wed 17 Sep 2025 01:25:00 +0000
ROA not after:            Wed 16 Sep 2026 01:30:00 +0000
asID:                     19429
IP address blocks:        2801:1ad:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:03:69:f9:06:c3:38:eb:c8:c0:a4:14:9c:d5:c0:2c:4f:65:58:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: Sep 17 01:25:00 2025 GMT
            Not After : Sep 16 01:30:00 2026 GMT
        Subject: CN=177460B4CDDC24C710C2521CF3BA614C30471918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:5b:05:7e:04:a0:88:78:95:27:44:8e:59:
                    16:5d:53:af:a0:48:07:c3:b0:cb:0d:4f:9a:8a:41:
                    e3:a1:71:fc:8e:22:26:0f:5a:36:a6:55:20:64:12:
                    7d:c4:46:d1:7b:05:00:09:e4:de:19:23:92:52:bb:
                    a7:13:b1:86:ec:b5:1a:c8:f5:fd:e0:97:e9:f6:0e:
                    bf:80:e0:bc:98:79:6e:1a:29:81:70:a7:0b:92:77:
                    2a:18:51:e6:08:0e:e3:99:7b:9a:29:bb:57:4f:34:
                    98:d2:e1:3a:35:7f:b4:12:64:7b:51:29:af:58:dc:
                    ba:8c:a5:0d:f6:2c:c6:7c:a6:0d:e3:7f:dc:f8:0c:
                    b1:08:6c:3e:db:8e:7f:2c:cf:9c:33:4b:14:8f:cb:
                    aa:89:a3:d7:99:70:83:ea:0d:8c:59:d2:40:4d:23:
                    b2:86:f8:a9:20:5f:b0:a5:63:ae:b0:d5:25:20:0e:
                    ad:b1:11:85:eb:21:88:44:73:85:6c:c3:9e:02:89:
                    47:81:8c:ac:12:0a:58:4c:b4:e0:87:22:ec:8f:fc:
                    24:bb:66:9d:ea:7f:09:c5:6b:11:4d:e1:62:78:d6:
                    1f:2e:e3:c6:3c:5a:d3:bb:6b:96:bf:1d:e2:8f:d7:
                    4a:b6:78:3d:8b:3f:74:10:20:f6:62:6b:c2:f8:81:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:60:B4:CD:DC:24:C7:10:C2:52:1C:F3:BA:61:4C:30:47:19:18
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:3d:a3:45:86:1f:b7:98:ed:bc:e3:ce:da:44:bf:7c:8f:
         ed:57:c3:c4:f2:88:4d:ac:55:fa:c9:09:2a:06:2a:c5:b7:3e:
         ea:91:26:08:79:fa:19:dd:e0:b5:83:5e:9a:7b:74:25:e3:29:
         67:ac:b0:c4:50:b6:63:7d:04:0a:ce:84:2e:1f:44:76:cf:47:
         6f:60:e8:6f:c6:8d:96:08:0a:bd:a2:99:5e:43:89:e5:69:51:
         87:84:c4:e3:23:e8:a4:9b:fa:49:14:8d:e4:a5:f5:8a:b7:dd:
         8d:ec:04:10:43:d3:64:5b:a6:9b:8b:27:69:fd:6f:8c:c8:0b:
         71:77:13:3b:43:fa:25:79:40:c4:d0:3f:0f:63:10:a0:b4:2e:
         5c:ec:8a:8a:a9:4d:0b:d7:f1:32:23:f6:cc:1b:54:03:66:37:
         ac:33:4a:5c:a7:9a:ee:90:05:35:0b:18:f4:c3:18:63:cc:cf:
         72:e0:cc:27:83:73:17:a1:33:db:bb:bb:1d:1f:b0:0b:9e:06:
         14:b9:b8:cf:e9:1f:56:6d:de:cd:0f:ab:3f:41:20:ec:0b:e2:
         cb:9b:a7:42:63:7a:22:5e:63:e9:39:d8:05:42:56:ab:1a:ce:
         50:7d:91:21:41:27:25:ba:71:d9:09:81:ff:63:d5:8b:da:3b:
         63:1a:bb:3b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUHwNp+QbDOOvIwKQUnNXALE9lWLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhFMUQwMDU4NTlEQkUzQzExNEM3RDUyOUI1MEVDRTZG
NTUxQzBGRjAeFw0yNTA5MTcwMTI1MDBaFw0yNjA5MTYwMTMwMDBaMDMxMTAvBgNV
BAMTKDE3NzQ2MEI0Q0REQzI0QzcxMEMyNTIxQ0YzQkE2MTRDMzA0NzE5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HFsFfgSgiHiVJ0SOWRZdU6+g
SAfDsMsNT5qKQeOhcfyOIiYPWjamVSBkEn3ERtF7BQAJ5N4ZI5JSu6cTsYbstRrI
9f3gl+n2Dr+A4LyYeW4aKYFwpwuSdyoYUeYIDuOZe5opu1dPNJjS4To1f7QSZHtR
Ka9Y3LqMpQ32LMZ8pg3jf9z4DLEIbD7bjn8sz5wzSxSPy6qJo9eZcIPqDYxZ0kBN
I7KG+KkgX7ClY66w1SUgDq2xEYXrIYhEc4Vsw54CiUeBjKwSClhMtOCHIuyP/CS7
Zp3qfwnFaxFN4WJ41h8u48Y8WtO7a5a/HeKP10q2eD2LP3QQIPZia8L4gRJRAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUF3RgtM3cJMcQwlIc87phTDBHGRgwHwYDVR0j
BBgwFoAUCOHQBYWdvjwRTH1Sm1Ds5vVRwP8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzExOTlCMEQ0NkZBRDlCMjM3NkQ3RUY5RTg0RjFBRDZC
OTcxMjlDNUY0MDZDRTRENjExMzFENjU2NDVFNUU4LzAvMDhFMUQwMDU4NTlEQkUz
QzExNEM3RDUyOUI1MEVDRTZGNTUxQzBGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEUxRDAwNTg1OURCRTNDMTE0
QzdENTI5QjUwRUNFNkY1NTFDMEZGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDcxMTk5QjBENDZGQUQ5QjIzNzZEN0VGOUU4NEYxQUQ2Qjk3MTI5QzVG
NDA2Q0U0RDYxMTMxRDY1NjQ1RTVFOC8wLzMyMzgzMDMxM2EzMTYxNjQzYTYzMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzQzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
rQDAMA0GCSqGSIb3DQEBCwUAA4IBAQCrJD2jRYYft5jtvOPO2kS/fI/tV8PE8ohN
rFX6yQkqBirFtz7qkSYIefoZ3eC1g16ae3Ql4ylnrLDEULZjfQQKzoQuH0R2z0dv
YOhvxo2WCAq9opleQ4nlaVGHhMTjI+ikm/pJFI3kpfWKt92N7AQQQ9NkW6abiydp
/W+MyAtxdxM7Q/oleUDE0D8PYxCgtC5c7IqKqU0L1/EyI/bMG1QDZjesM0pcp5ru
kAU1Cxj0wxhjzM9y4Mwng3MXoTPbu7sdH7ALngYUubjP6R9Wbd7ND6s/QSDsC+LL
m6dCY3oiXmPpOdgFQlarGs5QfZEhQSclunHZCYH/Y9WL2jtjGrs7
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:21 2025 by rpki-client