Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa
File:                     323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa (raw, json)
Hash identifier:          ZE5m1eRtp2uj/87N0mp2bOYjIdgbHAwWrJn7tZ6rYZ8=
Subject key identifier:   CA:CC:25:47:35:DB:45:80:1F:A2:F7:65:B2:7F:F4:37:07:54:D9:1E
Certificate issuer:       /CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
Certificate serial:       7476CD9F1C000A32BF4A4E4514716A7B94590897
Authority key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa
Signing time:             Mon 06 Oct 2025 15:20:01 +0000
ROA not before:           Mon 06 Oct 2025 15:15:01 +0000
ROA not after:            Mon 05 Oct 2026 15:20:01 +0000
asID:                     274217
IP address blocks:        2803:bd0:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:76:cd:9f:1c:00:0a:32:bf:4a:4e:45:14:71:6a:7b:94:59:08:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
        Validity
            Not Before: Oct  6 15:15:01 2025 GMT
            Not After : Oct  5 15:20:01 2026 GMT
        Subject: CN=CACC254735DB45801FA2F765B27FF4370754D91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:4b:6b:f5:d8:81:db:89:dc:f7:59:d9:a3:
                    5f:ba:a7:f4:28:ec:bf:41:d6:e6:90:47:94:04:f4:
                    28:16:00:3b:1c:f3:a2:e2:d6:53:7a:4f:1c:cd:b1:
                    8d:52:f5:df:9e:f0:f4:75:e1:e4:38:3f:68:81:0c:
                    73:bb:e3:ac:19:54:b5:18:c3:d5:5f:f1:68:23:77:
                    a4:1b:95:69:55:cc:46:86:41:54:ab:08:df:39:04:
                    13:6a:2e:ef:39:2d:12:d0:49:72:d3:07:d1:61:43:
                    91:72:3d:5b:0b:e0:54:32:1c:cb:e6:4e:13:a8:cd:
                    c9:0b:d2:ec:0a:ce:1d:24:20:ff:45:37:69:c6:be:
                    4f:7d:75:cb:53:a2:03:55:69:e2:93:29:02:98:bf:
                    d2:07:8f:80:1a:94:3e:19:04:f4:80:b5:c3:12:2c:
                    96:c9:2e:e8:ac:61:ff:7e:cf:c7:c7:1f:71:f7:a2:
                    f9:ab:5d:0b:bc:b9:c0:a8:59:c7:b2:4a:4d:16:39:
                    e2:53:4c:f3:27:ca:c6:da:65:f0:ca:76:07:20:37:
                    01:a7:53:c3:3d:e6:cb:66:3b:c7:85:a7:44:69:90:
                    b4:b1:de:a0:0f:17:56:9b:6c:4e:77:7b:c7:58:62:
                    17:a3:af:de:89:18:7d:7a:a1:40:68:17:c2:3e:c8:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:25:47:35:DB:45:80:1F:A2:F7:65:B2:7F:F4:37:07:54:D9:1E
            X509v3 Authority Key Identifier:
                keyid:6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd0:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:bd:3d:ca:2a:03:75:5f:e1:06:54:40:22:c2:9d:1d:1b:eb:
         3b:29:6b:d5:d6:75:a5:f0:86:92:89:d4:b1:c3:41:c6:4c:d7:
         ac:e1:05:12:3e:50:c4:f0:28:24:e6:c3:8d:a5:b9:2a:6a:30:
         44:b3:e0:1c:98:01:36:f7:04:8e:7b:ee:62:50:fd:1f:13:2d:
         32:90:ad:7d:9e:3c:4b:e3:da:f6:93:74:b7:32:03:c6:32:77:
         2b:a9:99:90:c9:ce:6c:31:d2:38:c1:e5:d3:a1:26:ec:1c:c5:
         da:9d:eb:b7:49:48:59:02:ad:bc:41:73:40:15:cb:1a:48:7b:
         2e:e1:1a:93:49:9f:54:7a:f1:85:61:95:9b:0b:10:7a:d4:b8:
         5b:9d:52:28:ec:e2:5e:51:f6:af:04:f5:26:4b:d5:a3:8a:9d:
         c0:b8:e2:8e:76:79:a7:da:8e:79:a7:55:c8:bd:8a:c3:1a:3f:
         b2:dc:65:dd:f0:f0:d7:04:0f:28:70:55:97:78:ae:69:9d:21:
         d0:e6:fe:51:8e:a8:2d:58:0d:cb:ae:cc:9b:17:0f:83:e5:9c:
         f8:74:91:4f:db:ba:4f:fd:22:b0:50:26:1f:c5:9a:a4:23:fd:
         37:d5:ab:01:18:92:3d:85:a6:ff:93:8e:c0:47:88:b0:f2:d8:
         fe:de:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:07 2025 by rpki-client