Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          Qtc7/XHmVMnNYg+Cjne20YsYS9syufoIZWbKNqOexPw=
Subject key identifier:   03:8B:C5:E2:20:34:85:CF:72:7A:03:7C:66:16:19:F0:79:2D:46:C3
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       60CE976B99EFB80E14428EB67F03B6CBDD63D6CE
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 26 Sep 2025 03:48:43 +0000
ROA not before:           Fri 26 Sep 2025 03:43:43 +0000
ROA not after:            Fri 25 Sep 2026 03:48:43 +0000
asID:                     273196
IP address blocks:        2803:2650:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 17:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ce:97:6b:99:ef:b8:0e:14:42:8e:b6:7f:03:b6:cb:dd:63:d6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Sep 26 03:43:43 2025 GMT
            Not After : Sep 25 03:48:43 2026 GMT
        Subject: CN=038BC5E2203485CF727A037C661619F0792D46C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:71:57:3b:d3:cb:97:e3:d6:08:e9:7c:ce:
                    e1:af:04:0a:23:15:0f:38:80:e0:d7:b7:11:d7:8a:
                    1b:4d:d6:c6:cb:c0:a1:61:2e:0d:ee:ff:a7:47:49:
                    6c:c8:74:a4:85:51:35:96:79:a8:60:f8:66:a6:47:
                    ec:30:ed:51:31:ad:90:0b:ef:10:25:1f:80:4b:ae:
                    3e:c9:e1:c2:62:5e:d9:9a:18:26:e0:3c:b6:b6:2b:
                    c5:8e:82:84:37:4c:af:60:08:0f:d9:23:99:61:c0:
                    6e:6e:02:3a:6e:b9:bd:cd:d4:99:9c:7b:0d:d5:9d:
                    15:76:61:09:5b:06:16:ad:d6:7d:f2:4b:99:14:2f:
                    3a:1c:4a:4a:3b:87:79:6a:ab:de:fc:84:4a:3e:6f:
                    2f:5b:ba:8f:cd:e5:21:22:a1:a0:41:92:b8:3d:8a:
                    64:29:a0:a2:bb:7b:96:64:2f:f6:3d:d5:40:3b:57:
                    27:f5:cc:98:1f:d8:e5:92:06:5d:e1:bd:22:5f:41:
                    19:18:a6:aa:b2:9d:d5:58:c8:8a:f3:69:de:94:e9:
                    11:0d:e0:95:de:b4:86:81:f3:0c:e5:41:07:5b:b5:
                    a2:3a:2d:de:88:71:f5:b5:67:2d:2f:2f:a6:4f:f7:
                    cf:74:ff:58:db:a6:13:28:23:45:6a:a6:62:30:42:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:C5:E2:20:34:85:CF:72:7A:03:7C:66:16:19:F0:79:2D:46:C3
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:31:6f:a7:88:b7:02:6e:c5:5e:35:51:6a:80:c9:33:72:
         4b:24:80:f9:4f:02:c1:7b:ab:c5:80:ad:d4:91:a1:20:31:1c:
         80:2b:d1:9e:80:0b:56:d6:ad:c0:7d:f1:40:66:7b:e2:07:b8:
         4f:ec:39:82:81:54:09:e4:45:37:83:b9:d9:d0:58:da:ee:fc:
         12:8e:1b:0c:bc:4c:9c:a0:ec:b9:e4:e0:49:8b:56:b0:79:82:
         5c:2d:8e:eb:4b:c6:3e:93:92:78:b3:6a:b0:85:2d:70:91:d9:
         e5:78:04:b1:06:4e:ac:8b:4c:0f:53:80:4b:c8:e1:6e:f8:fd:
         da:bd:6d:7d:ed:72:85:00:aa:07:26:5e:af:0c:54:43:bc:3d:
         c5:f9:0a:bb:1b:bd:83:11:53:2d:a6:aa:98:b0:df:13:e5:bd:
         2c:cb:46:3f:39:ed:48:7d:cf:0c:e8:50:fc:78:7a:b6:07:2c:
         f4:23:9f:c2:5d:15:18:af:df:df:1d:e4:76:73:db:4e:47:c9:
         7c:fc:76:c5:6a:8c:ab:b1:f3:94:aa:81:a7:24:ee:92:c7:7b:
         06:1b:52:b5:9b:25:8f:cf:cd:2e:75:3d:2a:b6:a9:27:65:1b:
         5f:93:36:92:65:0d:31:63:a0:a5:a0:b2:20:ea:50:ff:d6:8d:
         64:3f:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:54 2025 by rpki-client