Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030303a3a2f34382d3438203d3e20323734323137.roa
File:                     323830333a6264303a313030303a3a2f34382d3438203d3e20323734323137.roa (raw, json)
Hash identifier:          T7bfnd4eNCC8OKNKqgXcgJzctDzNzKfKcTk+FZknORw=
Subject key identifier:   2B:62:14:A4:27:FC:E3:C6:75:4E:5F:A8:A2:6F:C8:F8:39:6F:4D:CF
Certificate issuer:       /CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
Certificate serial:       5B569DE0BE385C13C2136AAD836E881B3814CC80
Authority key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030303a3a2f34382d3438203d3e20323734323137.roa
Signing time:             Mon 06 Oct 2025 15:20:00 +0000
ROA not before:           Mon 06 Oct 2025 15:15:00 +0000
ROA not after:            Mon 05 Oct 2026 15:20:00 +0000
asID:                     274217
IP address blocks:        2803:bd0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:56:9d:e0:be:38:5c:13:c2:13:6a:ad:83:6e:88:1b:38:14:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
        Validity
            Not Before: Oct  6 15:15:00 2025 GMT
            Not After : Oct  5 15:20:00 2026 GMT
        Subject: CN=2B6214A427FCE3C6754E5FA8A26FC8F8396F4DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:3b:cf:b0:74:44:3c:1e:19:6d:56:64:90:
                    b7:c4:34:c1:b8:e2:8a:27:36:ad:b3:98:4e:70:46:
                    78:45:57:ae:11:05:a9:9e:1e:1a:2c:16:9e:36:91:
                    e1:7f:49:5b:ff:0b:b9:a8:a3:32:17:42:c2:6f:21:
                    a2:8e:65:43:a7:ae:1c:03:34:83:22:f7:f9:20:e2:
                    df:ff:d9:52:51:f0:17:31:00:4a:c7:01:29:94:01:
                    0f:d0:22:a6:5c:41:75:11:76:94:1b:76:11:db:db:
                    ce:07:dd:08:61:0b:22:8f:c2:6d:04:7b:21:7b:af:
                    a3:6f:bf:89:98:a8:0c:5f:e1:63:5b:50:dd:ee:12:
                    31:a2:1e:86:14:57:00:db:cb:f9:3f:ae:35:d5:3e:
                    5b:3d:0b:6a:c5:24:d0:53:2c:cd:05:fc:54:ad:89:
                    d4:3f:4f:a8:a7:87:e2:9e:29:bc:2c:e0:26:f0:5f:
                    73:7f:58:14:6c:c8:44:81:9d:fd:72:7e:f7:61:21:
                    69:e8:75:9e:84:f6:44:32:71:50:f5:e0:2b:00:e1:
                    40:16:1e:80:18:89:52:3b:92:d1:9b:fe:03:e8:8b:
                    97:d8:ac:5f:41:5d:36:31:08:d6:61:3b:26:61:04:
                    20:7a:0d:99:ce:4c:fa:2a:7d:e2:5c:50:58:b4:44:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:14:A4:27:FC:E3:C6:75:4E:5F:A8:A2:6F:C8:F8:39:6F:4D:CF
            X509v3 Authority Key Identifier:
                keyid:6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030303a3a2f34382d3438203d3e20323734323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:41:60:e0:3e:82:f3:e0:af:2e:52:7b:50:4b:c1:84:1e:02:
         05:d3:87:79:2e:02:7c:37:9d:d1:76:65:99:c8:b2:76:ab:4c:
         3b:df:2d:80:75:99:b6:0d:f3:35:12:5a:a7:ad:5c:59:4f:72:
         16:2f:f3:e3:66:a1:81:90:7d:c5:51:42:18:18:b6:c9:c4:a6:
         68:e2:49:2f:4b:de:04:b3:c8:b5:cb:80:9e:8d:7e:43:b3:f8:
         d9:49:9d:75:d1:48:f5:78:0b:2a:b8:83:2c:42:a9:c2:49:e4:
         6b:1a:cc:02:2f:15:fb:37:d8:f4:43:30:6e:64:64:e1:32:62:
         9f:8a:96:71:80:f9:2f:d3:2a:11:15:09:0c:06:aa:9b:0a:38:
         5b:e0:e1:41:7f:e2:da:38:72:52:2f:73:0b:e9:f9:ba:92:4d:
         ef:b1:2d:92:63:1a:18:f4:cf:86:a2:36:d7:d6:54:58:72:10:
         77:e9:2a:c4:69:2e:42:fe:6f:df:1d:d3:b6:f1:f7:31:e5:96:
         36:cc:86:bb:fa:3c:40:c4:7a:a7:58:63:87:21:7b:ae:3f:c4:
         cc:cd:7d:88:3f:4a:f4:4f:b1:93:2b:20:10:8e:72:8f:3f:fb:
         dc:dd:e2:c7:6a:50:73:c2:1f:a0:88:30:ae:9b:aa:e7:a1:1a:
         32:fe:f5:a2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUW1ad4L44XBPCE2qtg26IGzgUzIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMyOTJGQTE1QTc0N0ZCOUIyMENEMjg1NDUxOEEwNUI3
ODkyN0VBNzAeFw0yNTEwMDYxNTE1MDBaFw0yNjEwMDUxNTIwMDBaMDMxMTAvBgNV
BAMTKDJCNjIxNEE0MjdGQ0UzQzY3NTRFNUZBOEEyNkZDOEY4Mzk2RjREQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZjvPsHREPB4ZbVZkkLfENMG4
4oonNq2zmE5wRnhFV64RBameHhosFp42keF/SVv/C7moozIXQsJvIaKOZUOnrhwD
NIMi9/kg4t//2VJR8BcxAErHASmUAQ/QIqZcQXURdpQbdhHb284H3QhhCyKPwm0E
eyF7r6Nvv4mYqAxf4WNbUN3uEjGiHoYUVwDby/k/rjXVPls9C2rFJNBTLM0F/FSt
idQ/T6inh+KeKbws4CbwX3N/WBRsyESBnf1yfvdhIWnodZ6E9kQycVD14CsA4UAW
HoAYiVI7ktGb/gPoi5fYrF9BXTYxCNZhOyZhBCB6DZnOTPoqfeJcUFi0RGTDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUK2IUpCf848Z1Tl+oom/I+DlvTc8wHwYDVR0j
BBgwFoAUbCkvoVp0f7myDNKFRRigW3iSfqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQUYxRjUwN0ZBOUUxNERCQkYxOUI3MDMyODNEQzYxMDBC
RTJDOUYxRjlENTk5QzE2ODREM0ZDNURFRDc2RjJELzAvNkMyOTJGQTE1QTc0N0ZC
OUIyMENEMjg1NDUxOEEwNUI3ODkyN0VBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzI5MkZBMTVBNzQ3RkI5QjIw
Q0QyODU0NTE4QTA1Qjc4OTI3RUE3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFGMUY1MDdGQTlFMTREQkJGMTlCNzAzMjgzREM2MTAwQkUyQzlGMUY5
RDU5OUMxNjg0RDNGQzVERUQ3NkYyRC8wLzMyMzgzMDMzM2E2MjY0MzAzYTMxMzAz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzM0MzIzMTM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAML0BAAMA0GCSqGSIb3DQEBCwUAA4IBAQAiQWDgPoLz4K8uUntQS8GEHgIF
04d5LgJ8N53RdmWZyLJ2q0w73y2AdZm2DfM1ElqnrVxZT3IWL/PjZqGBkH3FUUIY
GLbJxKZo4kkvS94Es8i1y4CejX5Ds/jZSZ110Uj1eAsquIMsQqnCSeRrGswCLxX7
N9j0QzBuZGThMmKfipZxgPkv0yoRFQkMBqqbCjhb4OFBf+LaOHJSL3ML6fm6kk3v
sS2SYxoY9M+GojbX1lRYchB36SrEaS5C/m/fHdO28fcx5ZY2zIa7+jxAxHqnWGOH
IXuuP8TMzX2IP0r0T7GTKyAQjnKPP/vc3eLHalBzwh+giDCum6rnoRoy/vWi
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:57 2025 by rpki-client