Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          40DSDr+SUtn6zuatBQdWSCw+1bOvtDmqf+cNdgMCiTs=
Subject key identifier:   35:FC:68:94:AF:7A:B9:45:B3:44:F8:B2:07:C5:2E:DB:9A:08:E3:7A
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       25BBDA020EDF051BEBE969EC0C8A4AB524A5C932
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 26 Sep 2025 03:48:42 +0000
ROA not before:           Fri 26 Sep 2025 03:43:42 +0000
ROA not after:            Fri 25 Sep 2026 03:48:42 +0000
asID:                     273196
IP address blocks:        2803:2650:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bb:da:02:0e:df:05:1b:eb:e9:69:ec:0c:8a:4a:b5:24:a5:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Sep 26 03:43:42 2025 GMT
            Not After : Sep 25 03:48:42 2026 GMT
        Subject: CN=35FC6894AF7AB945B344F8B207C52EDB9A08E37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:90:a6:eb:29:57:b5:5e:d7:4d:85:15:e6:
                    e7:79:71:1a:5a:00:e8:3e:a6:51:b1:50:6f:43:37:
                    fd:4f:6e:73:45:ff:c6:f4:c4:ef:cc:24:e5:c9:4b:
                    61:b8:47:ee:53:bc:b3:14:5b:c9:b2:9a:82:dc:37:
                    cc:33:3c:fb:a6:e2:f6:ae:50:7d:86:04:4b:16:56:
                    33:48:fb:2d:84:a5:5a:42:f8:7b:39:0d:e0:62:8a:
                    98:b0:3b:e8:d4:11:02:11:1c:2a:23:fb:e4:e8:a7:
                    74:69:6e:b0:af:06:4f:e7:f5:95:e5:7c:42:01:27:
                    ee:ef:de:a8:84:68:05:7d:cd:f5:3f:01:5a:24:89:
                    7a:7e:92:e6:3f:0a:bd:73:eb:18:31:8b:e3:f6:c4:
                    76:a5:6e:a3:e5:f7:ab:83:30:9d:5c:52:cb:60:b9:
                    5c:3f:08:9b:70:5e:b9:fc:09:9b:55:36:bc:84:57:
                    7f:94:84:ce:b2:90:9c:89:63:25:f5:c5:b5:df:ab:
                    31:ab:77:b2:95:38:81:cd:36:71:f1:cd:9d:20:dd:
                    3a:5f:c8:89:d3:ff:06:04:53:32:46:77:0a:d3:a1:
                    6a:a2:dd:b8:a6:27:0b:5c:62:b2:1a:b1:a1:f8:f0:
                    1e:45:0f:c3:7c:63:ce:5d:ae:e4:b4:22:6c:2c:e3:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:68:94:AF:7A:B9:45:B3:44:F8:B2:07:C5:2E:DB:9A:08:E3:7A
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:19:b5:ac:75:83:17:e5:2e:cc:40:82:e1:f6:62:35:81:a9:
         23:62:f3:d3:93:b8:16:16:cc:04:bc:8b:c0:79:13:74:18:17:
         d4:c1:90:74:22:84:60:d5:5b:51:cd:58:cd:1d:af:7a:4b:97:
         cf:fb:04:13:82:aa:58:a4:8c:0c:17:b4:81:a6:5d:40:22:4c:
         c2:43:1a:ae:18:b8:79:bb:91:f3:bd:4d:bd:99:46:a8:c0:bb:
         81:7f:26:ea:bf:96:bb:c6:cf:1a:d3:29:a9:b3:95:e6:97:4a:
         5b:28:d8:0a:55:0d:5f:f4:6a:34:f8:11:f1:06:29:0c:8e:97:
         62:dc:11:4c:c8:27:5b:d0:45:9f:ea:94:69:55:81:4b:4b:fb:
         fe:12:ee:b1:b2:d7:ca:19:dc:33:80:aa:bc:c5:a1:65:70:ec:
         4b:02:bd:12:c9:a8:2b:5a:89:52:ca:4a:8e:48:4b:27:82:5e:
         96:ff:92:4b:00:d9:a3:1f:db:0e:d5:a2:33:85:2c:32:d6:d7:
         1b:8b:7a:3d:8d:0c:b6:4f:1b:13:5e:c6:5d:eb:94:58:26:16:
         d3:2e:0a:29:dd:af:8e:a3:75:98:fa:ed:94:35:5b:72:fc:2d:
         d7:b1:f5:9a:ef:e0:64:5f:3e:63:e9:fc:ce:08:5b:4c:d4:ef:
         1f:a2:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:45 2025 by rpki-client