Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3130303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3130303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          0ZIxzzHaK2I00kkQ8RhMdMb1UzAWEdRixhz4KxWB7ds=
Subject key identifier:   6F:11:A2:6E:8E:CD:EF:65:EF:C3:D2:92:35:82:2D:A8:2F:25:56:40
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       55FDD809D24C1A12D5EA2633CC64E3F22F4AB484
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3130303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 26 Sep 2025 03:48:41 +0000
ROA not before:           Fri 26 Sep 2025 03:43:41 +0000
ROA not after:            Fri 25 Sep 2026 03:48:41 +0000
asID:                     273196
IP address blocks:        2803:2650:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:d8:09:d2:4c:1a:12:d5:ea:26:33:cc:64:e3:f2:2f:4a:b4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Sep 26 03:43:41 2025 GMT
            Not After : Sep 25 03:48:41 2026 GMT
        Subject: CN=6F11A26E8ECDEF65EFC3D29235822DA82F255640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:d5:da:82:3b:1e:79:15:fb:49:6b:a7:2b:
                    08:58:04:7e:31:8e:87:df:fe:4a:76:74:c8:c7:2f:
                    9e:4d:f6:a7:89:c2:7c:c9:4f:8a:be:12:8c:9f:c9:
                    1a:2b:4b:f2:9a:09:ae:eb:43:9b:76:f7:9b:79:6e:
                    c9:31:6c:3a:37:cb:0a:fa:4f:71:37:d9:5d:c8:c0:
                    f2:a8:df:12:cb:f4:3b:99:79:1e:55:4d:8a:0b:e2:
                    04:c6:ec:83:4c:9b:7f:79:98:2e:b2:57:5f:73:d4:
                    e5:87:fb:d4:7b:38:b6:46:68:35:21:60:29:d3:18:
                    87:a2:f5:f6:8c:5b:8a:1d:53:bd:de:05:d4:ff:22:
                    e3:08:56:57:a9:e8:51:ef:cf:14:49:25:22:6a:4f:
                    e5:1e:ec:71:0d:9c:3b:d0:58:96:c4:97:6e:ff:eb:
                    9b:6e:ea:d0:e4:c3:cb:3a:91:c8:f8:58:43:24:86:
                    be:64:e7:66:8a:28:93:e1:38:03:d6:3a:80:94:55:
                    bc:2b:ee:00:b3:2f:f6:96:fc:4f:17:b6:65:7e:83:
                    f1:f1:4c:6f:af:2e:a6:62:54:38:64:48:9e:e0:59:
                    a6:47:4b:41:b0:db:cf:27:08:94:7d:5e:5c:59:d9:
                    f3:27:07:26:0c:6c:7d:dd:46:e6:e9:c2:31:43:f5:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:11:A2:6E:8E:CD:EF:65:EF:C3:D2:92:35:82:2D:A8:2F:25:56:40
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3130303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:ad:64:db:36:b5:a1:f0:b2:6d:4c:1c:e2:58:bb:26:28:
         8d:a8:51:45:a2:40:6d:65:c6:89:80:8e:6c:5e:3b:d9:f0:db:
         22:31:b9:0c:b7:72:0e:67:65:6a:09:60:46:16:41:e0:ae:0e:
         09:8c:af:0d:69:1a:45:f7:5c:28:38:d9:ab:34:ff:61:e9:00:
         9e:80:07:ae:94:53:96:22:d3:ef:8f:8d:67:2a:fb:c6:93:62:
         f9:92:83:85:52:3b:c0:c1:9e:79:63:e9:b4:4a:a2:67:45:dd:
         54:d3:be:e2:6a:84:04:36:9d:e6:7e:6c:77:cf:e5:7c:a5:7f:
         fd:7f:e9:ee:f5:ad:cf:d8:68:58:09:9a:d2:f7:cb:b3:31:ad:
         ab:e0:e6:2f:4d:dd:14:72:dd:7a:8a:aa:42:b4:f3:b9:c3:85:
         dc:e3:f2:11:4d:25:ff:e1:1e:1c:4c:94:c6:20:f0:d5:23:28:
         04:38:81:73:ac:1e:8c:3b:71:d6:ce:0e:40:46:7a:96:a7:19:
         93:53:a0:36:fb:67:29:1e:e9:5c:f9:23:d3:4a:38:aa:fb:e5:
         62:ca:94:6b:50:9c:d7:48:f5:86:dc:42:13:09:e9:88:08:f2:
         d3:a0:cf:9a:bd:38:cc:b2:d2:56:a9:54:75:95:50:bc:9d:18:
         22:bb:ec:f2
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUVf3YCdJMGhLV6iYzzGTj8i9KtIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMzEyOUE4RDlEQjZGRDhGN0M4QTQ4NEEyQkVEMjI2
MzY1NEMxRDAeFw0yNTA5MjYwMzQzNDFaFw0yNjA5MjUwMzQ4NDFaMDMxMTAvBgNV
BAMTKDZGMTFBMjZFOEVDREVGNjVFRkMzRDI5MjM1ODIyREE4MkYyNTU2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjNXagjseeRX7SWunKwhYBH4x
joff/kp2dMjHL55N9qeJwnzJT4q+EoyfyRorS/KaCa7rQ5t295t5bskxbDo3ywr6
T3E32V3IwPKo3xLL9DuZeR5VTYoL4gTG7INMm395mC6yV19z1OWH+9R7OLZGaDUh
YCnTGIei9faMW4odU73eBdT/IuMIVlep6FHvzxRJJSJqT+Ue7HENnDvQWJbEl27/
65tu6tDkw8s6kcj4WEMkhr5k52aKKJPhOAPWOoCUVbwr7gCzL/aW/E8XtmV+g/Hx
TG+vLqZiVDhkSJ7gWaZHS0Gw288nCJR9XlxZ2fMnByYMbH3dRubpwjFD9fPHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUbxGibo7N72Xvw9KSNYItqC8lVkAwHwYDVR0j
BBgwFoAUGMMSmo2dtv2PfIpISivtImNlTB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkQ0NzhBMzg5OUZBNzhFNEQ0NjFCMDgxMDZCMDIwREU2
MDJDOUUyRjE4NDExQjNFQUIxQzY5QUIyRjAwNTdELzAvMThDMzEyOUE4RDlEQjZG
RDhGN0M4QTQ4NEEyQkVEMjI2MzY1NEMxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEMzMTI5QThEOURCNkZEOEY3
QzhBNDg0QTJCRUQyMjYzNjU0QzFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZENDc4QTM4OTlGQTc4RTRENDYxQjA4MTA2QjAyMERFNjAyQzlFMkYx
ODQxMUIzRUFCMUM2OUFCMkYwMDU3RC8wLzMyMzgzMDMzM2EzMjM2MzUzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzOTM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMmUAEwDQYJKoZIhvcNAQELBQADggEBAH8HrWTbNrWh8LJtTBziWLsmKI2o
UUWiQG1lxomAjmxeO9nw2yIxuQy3cg5nZWoJYEYWQeCuDgmMrw1pGkX3XCg42as0
/2HpAJ6AB66UU5Yi0++PjWcq+8aTYvmSg4VSO8DBnnlj6bRKomdF3VTTvuJqhAQ2
neZ+bHfP5Xylf/1/6e71rc/YaFgJmtL3y7Mxravg5i9N3RRy3XqKqkK087nDhdzj
8hFNJf/hHhxMlMYg8NUjKAQ4gXOsHow7cdbODkBGepanGZNToDb7Zyke6Vz5I9NK
OKr75WLKlGtQnNdI9YbcQhMJ6YgI8tOgz5q9OMyy0lapVHWVULydGCK77PI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:14 2025 by rpki-client