Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          zdcirkyJSFcItg1oL2X3FlHWjGGLusZvFBEa74Zg/Ks=
Subject key identifier:   57:36:18:05:7B:1C:78:C0:EA:6A:FD:68:E2:1B:51:C3:82:8B:4E:32
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       288435D935211B58D0A49807E6B4FD3643A44D7B
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 26 Sep 2025 03:48:44 +0000
ROA not before:           Fri 26 Sep 2025 03:43:44 +0000
ROA not after:            Fri 25 Sep 2026 03:48:44 +0000
asID:                     273196
IP address blocks:        2803:2650:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:35:d9:35:21:1b:58:d0:a4:98:07:e6:b4:fd:36:43:a4:4d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Sep 26 03:43:44 2025 GMT
            Not After : Sep 25 03:48:44 2026 GMT
        Subject: CN=573618057B1C78C0EA6AFD68E21B51C3828B4E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:fb:01:b7:bb:8b:c6:ea:94:03:13:db:f9:
                    0b:ae:3d:63:ef:b1:7a:29:6f:49:4c:c8:cb:8d:34:
                    87:d2:7a:82:aa:d6:b3:13:4f:c7:57:c0:7d:2b:ce:
                    d3:19:7d:43:45:15:ef:a6:be:d4:20:bc:7c:9d:70:
                    8d:20:59:80:89:92:2a:07:36:4d:e4:87:fd:7f:6d:
                    05:05:c4:1e:30:92:28:b2:7c:0c:2f:7f:dd:06:9c:
                    7f:b1:95:64:60:60:b3:b6:b2:3a:5b:2f:c1:b2:30:
                    20:b9:bb:79:2e:d5:46:94:cf:b9:a4:87:5d:d9:b0:
                    fb:22:ae:22:a6:4b:e5:94:dd:bf:a1:b4:0c:49:10:
                    c8:cf:14:e0:5c:56:6d:33:76:b1:95:b6:56:6e:a6:
                    45:5d:31:ee:d5:42:6a:c7:23:82:b3:d9:0d:d7:32:
                    0d:6d:5e:e2:ff:b7:a0:39:38:f5:99:49:5f:d5:f1:
                    f4:47:02:9f:5b:cb:20:cd:f4:5f:99:5c:5d:64:b5:
                    d8:c2:6c:3d:63:66:58:1d:40:90:2d:71:b2:2a:3e:
                    46:c1:7d:2f:fc:0f:10:da:15:c7:9a:b1:c8:0a:70:
                    5f:2c:d8:6a:54:a4:2d:2c:c8:57:0c:ce:3f:75:c3:
                    55:65:88:d0:95:da:fa:06:a3:bf:21:c1:fa:b7:1b:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:18:05:7B:1C:78:C0:EA:6A:FD:68:E2:1B:51:C3:82:8B:4E:32
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:54:01:de:81:d2:98:77:e5:90:75:61:7a:c8:15:8a:5a:26:
         5f:92:f4:51:62:af:33:78:5d:a3:8d:dd:f1:6d:ce:bd:e4:29:
         e0:ed:77:2b:e7:e2:ba:14:38:0f:f9:73:c7:6c:ac:7b:46:b2:
         6e:66:5d:ee:03:1c:6e:ad:dd:6b:17:6c:cc:0f:14:06:54:ee:
         7d:ba:49:19:f7:f0:79:e8:5a:7c:b5:bc:cc:25:0f:ae:7d:cd:
         ee:59:f1:34:c0:7f:73:db:4d:a0:44:68:af:ea:fc:39:51:ba:
         8d:a7:c2:9a:c3:94:2d:ea:d3:fc:ee:0f:d5:d5:9f:fb:e6:dc:
         5b:38:8f:e6:0e:71:4b:85:95:d4:d1:e1:0c:f9:c3:a7:ee:43:
         0b:24:45:68:cc:15:cd:d7:67:f3:d8:ce:46:9c:2e:93:db:56:
         d4:04:4c:bb:7e:4d:b8:9e:c5:c5:b5:65:e0:cf:0a:8a:2a:03:
         8f:c1:67:82:e5:66:e3:f7:da:41:19:27:2d:f4:8b:3f:fe:33:
         98:1c:5f:53:55:d8:3c:74:16:15:e1:0a:a4:96:3c:8e:bb:42:
         cb:1b:84:04:e7:bc:4b:62:3f:58:bb:3d:f7:be:f8:97:36:b2:
         90:8f:24:2c:73:a6:70:8f:d9:c8:34:f5:9a:cc:c9:19:02:6f:
         75:cd:6c:06
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUKIQ12TUhG1jQpJgH5rT9NkOkTXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMzEyOUE4RDlEQjZGRDhGN0M4QTQ4NEEyQkVEMjI2
MzY1NEMxRDAeFw0yNTA5MjYwMzQzNDRaFw0yNjA5MjUwMzQ4NDRaMDMxMTAvBgNV
BAMTKDU3MzYxODA1N0IxQzc4QzBFQTZBRkQ2OEUyMUI1MUMzODI4QjRFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFfsBt7uLxuqUAxPb+QuuPWPv
sXopb0lMyMuNNIfSeoKq1rMTT8dXwH0rztMZfUNFFe+mvtQgvHydcI0gWYCJkioH
Nk3kh/1/bQUFxB4wkiiyfAwvf90GnH+xlWRgYLO2sjpbL8GyMCC5u3ku1UaUz7mk
h13ZsPsiriKmS+WU3b+htAxJEMjPFOBcVm0zdrGVtlZupkVdMe7VQmrHI4Kz2Q3X
Mg1tXuL/t6A5OPWZSV/V8fRHAp9byyDN9F+ZXF1ktdjCbD1jZlgdQJAtcbIqPkbB
fS/8DxDaFceascgKcF8s2GpUpC0syFcMzj91w1VliNCV2voGo78hwfq3Gws7AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUVzYYBXsceMDqav1o4htRw4KLTjIwHwYDVR0j
BBgwFoAUGMMSmo2dtv2PfIpISivtImNlTB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkQ0NzhBMzg5OUZBNzhFNEQ0NjFCMDgxMDZCMDIwREU2
MDJDOUUyRjE4NDExQjNFQUIxQzY5QUIyRjAwNTdELzAvMThDMzEyOUE4RDlEQjZG
RDhGN0M4QTQ4NEEyQkVEMjI2MzY1NEMxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEMzMTI5QThEOURCNkZEOEY3
QzhBNDg0QTJCRUQyMjYzNjU0QzFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZENDc4QTM4OTlGQTc4RTRENDYxQjA4MTA2QjAyMERFNjAyQzlFMkYx
ODQxMUIzRUFCMUM2OUFCMkYwMDU3RC8wLzMyMzgzMDMzM2EzMjM2MzUzMDNhMzkz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzOTM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMmUAkwDQYJKoZIhvcNAQELBQADggEBACNUAd6B0ph35ZB1YXrIFYpaJl+S
9FFirzN4XaON3fFtzr3kKeDtdyvn4roUOA/5c8dsrHtGsm5mXe4DHG6t3WsXbMwP
FAZU7n26SRn38HnoWny1vMwlD659ze5Z8TTAf3PbTaBEaK/q/DlRuo2nwprDlC3q
0/zuD9XVn/vm3Fs4j+YOcUuFldTR4Qz5w6fuQwskRWjMFc3XZ/PYzkacLpPbVtQE
TLt+TbiexcW1ZeDPCooqA4/BZ4LlZuP32kEZJy30iz/+M5gcX1NV2Dx0FhXhCqSW
PI67QssbhATnvEtiP1i7Pfe++Jc2spCPJCxzpnCP2cg09ZrMyRkCb3XNbAY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:09 2025 by rpki-client