Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
File:                     323830333a356130303a3a2f33322d3332203d3e20323632323136.roa (raw, json)
Hash identifier:          UnpmoHWNmA+4gqhH2Dk6kCCGFwWV4Z9TL2hNxtDKlwo=
Subject key identifier:   2E:A9:82:60:B0:A1:B4:3D:6C:E0:6A:12:A7:66:BA:4C:80:7D:E0:A0
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       1E4B98547D70433BE456AC17C34286C0B58DD4DB
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:00 +0000
ROA not before:           Fri 10 Oct 2025 14:45:00 +0000
ROA not after:            Fri 09 Oct 2026 14:50:00 +0000
asID:                     262216
IP address blocks:        2803:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 17:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:98:54:7d:70:43:3b:e4:56:ac:17:c3:42:86:c0:b5:8d:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:00 2025 GMT
            Not After : Oct  9 14:50:00 2026 GMT
        Subject: CN=2EA98260B0A1B43D6CE06A12A766BA4C807DE0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:b0:d7:22:07:e7:a9:5b:b1:e3:1e:a1:25:
                    55:7b:be:fb:4d:c1:fa:1d:35:7c:c8:07:5d:ea:3e:
                    89:29:61:a8:cd:0e:2e:9a:8a:3f:60:1e:9e:b7:c0:
                    90:f7:75:cb:12:c2:3a:26:60:69:25:1f:17:a5:9e:
                    54:ae:55:2b:66:41:cc:cb:87:65:d4:ee:7c:fb:eb:
                    8a:61:09:ff:e1:f3:06:fb:ba:32:eb:31:ca:55:96:
                    87:49:99:06:e5:78:99:69:80:4e:0f:04:16:74:c7:
                    f5:93:cb:1e:8e:af:35:fb:27:ee:1d:c0:7a:96:04:
                    35:2c:9e:0a:d1:03:c1:43:ee:7e:aa:55:7d:9d:f3:
                    7a:63:d7:37:4c:3b:24:41:8a:1a:7e:57:5d:60:51:
                    e4:bb:3e:e3:7d:49:c4:b8:a2:e2:ff:ee:20:d3:4e:
                    0d:ff:de:14:d4:0d:7c:b2:a0:71:9f:fb:4d:30:95:
                    1c:4c:fa:42:03:93:6d:c5:24:98:dc:59:57:e6:18:
                    ca:f0:9c:7e:89:37:20:3f:dc:e2:59:3a:1e:22:89:
                    74:f6:1d:94:b3:cd:40:b7:8e:04:4d:2f:f5:d6:4a:
                    ed:c3:b9:15:41:ce:31:fc:5b:c3:a4:c9:6d:35:62:
                    9f:e6:0f:c3:73:1f:a5:e8:bf:ea:41:77:f1:c4:c4:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A9:82:60:B0:A1:B4:3D:6C:E0:6A:12:A7:66:BA:4C:80:7D:E0:A0
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:35:4b:79:db:2b:d5:a0:92:a6:a0:46:dc:e8:2f:38:9d:
         02:cc:27:e0:36:57:25:db:6e:31:81:c9:9c:81:ae:07:bb:22:
         d0:20:80:c7:f9:fd:89:71:8b:b6:e9:f7:cf:d3:0b:18:b9:50:
         a5:ee:dd:ad:c2:a4:f5:0e:85:2b:8d:ca:1d:23:47:9f:c2:2a:
         7c:1a:57:cf:81:d8:a2:59:20:4a:48:6e:85:79:d3:7e:37:c3:
         d1:34:0a:ad:84:dc:08:0a:df:75:80:6f:89:af:9a:e7:48:6f:
         8e:96:4e:eb:aa:e7:ef:43:63:10:58:ce:bf:31:89:c3:52:c1:
         73:3c:0e:44:6b:65:dd:05:d7:48:31:d5:86:dd:8c:a6:9e:3a:
         78:88:be:7c:95:f4:44:48:7e:d9:3e:82:31:b4:99:e2:b9:53:
         6f:9e:b1:07:38:f0:7c:0a:87:f5:41:81:f3:27:a6:06:63:06:
         25:a3:18:88:ba:91:92:a0:25:66:d1:e0:a3:86:e3:64:9f:31:
         8c:22:05:aa:7d:52:60:7b:c1:78:96:33:28:72:14:25:e5:43:
         22:c0:6e:80:93:a3:9b:01:7f:40:f8:f4:c9:9b:82:76:d3:4d:
         3b:86:d6:01:33:18:45:ff:1b:76:25:a3:a5:4a:c2:30:75:7b:
         6c:10:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:33 2025 by rpki-client