Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/323830333a613361303a3a2f33322d3332203d3e20323637373530.roa
File:                     323830333a613361303a3a2f33322d3332203d3e20323637373530.roa (raw, json)
Hash identifier:          WF5iXDIWb+nCSTygLJTVYWBbdP4htIKPgohS4BhTMiA=
Subject key identifier:   42:DE:E4:9A:3A:97:2D:30:46:4E:49:4C:8C:52:3D:90:62:B2:9A:5E
Certificate issuer:       /CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
Certificate serial:       5405F03CEDBFD0AE64036A66C349C3A851523367
Authority key identifier: 3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/323830333a613361303a3a2f33322d3332203d3e20323637373530.roa
Signing time:             Mon 13 Oct 2025 15:10:00 +0000
ROA not before:           Mon 13 Oct 2025 15:05:00 +0000
ROA not after:            Mon 12 Oct 2026 15:10:00 +0000
asID:                     267750
IP address blocks:        2803:a3a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:05:f0:3c:ed:bf:d0:ae:64:03:6a:66:c3:49:c3:a8:51:52:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
        Validity
            Not Before: Oct 13 15:05:00 2025 GMT
            Not After : Oct 12 15:10:00 2026 GMT
        Subject: CN=42DEE49A3A972D30464E494C8C523D9062B29A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:02:77:d9:7e:7b:a7:19:6c:dd:f3:48:d5:
                    a1:09:c6:76:9a:f1:91:2b:bc:1a:49:99:6b:56:9f:
                    3d:71:d8:fa:e0:72:f8:69:c3:14:b4:28:d6:bf:8a:
                    21:bf:04:c0:cf:d3:a5:c3:32:9e:50:87:c0:d0:e6:
                    10:78:80:cb:6c:08:f7:9e:eb:a3:fd:c9:8e:db:fe:
                    d5:1d:f5:fb:a0:39:6c:da:4e:d6:4f:26:bb:d7:83:
                    44:2b:29:dc:b9:d0:ac:86:cc:9e:13:2e:88:95:12:
                    a7:74:42:e3:29:04:fb:c1:97:1f:7a:0b:29:88:75:
                    83:11:e9:61:96:36:4a:bd:9a:66:a4:57:04:1b:49:
                    95:e4:4e:d0:25:8c:e1:61:dd:25:1a:b4:45:4c:61:
                    48:0e:46:1a:83:89:79:19:50:05:e6:95:bf:a7:fc:
                    cf:e5:40:60:d2:f4:54:bc:60:c1:90:7b:9f:d6:bb:
                    76:e8:87:91:f5:eb:14:e0:26:94:6a:3e:0d:b2:4c:
                    e1:b0:6c:7e:67:11:2c:67:f5:21:14:e6:bc:36:97:
                    b7:b9:f0:f1:92:eb:53:7e:bf:ea:b7:0c:5e:cf:5a:
                    bf:81:9b:09:4d:2f:c9:39:cb:28:5a:d7:a3:78:3c:
                    04:4a:c6:8b:78:da:d7:7e:25:03:e8:fb:d2:87:37:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:E4:9A:3A:97:2D:30:46:4E:49:4C:8C:52:3D:90:62:B2:9A:5E
            X509v3 Authority Key Identifier:
                keyid:3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/323830333a613361303a3a2f33322d3332203d3e20323637373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:05:d0:28:d3:e6:81:e0:71:34:32:2c:62:d6:66:08:6b:64:
         27:0f:31:5d:ea:b7:10:e6:3d:50:00:13:9b:fd:05:b5:f3:c9:
         ab:6c:b8:7d:f9:9c:f1:05:e8:01:4a:45:82:d7:a5:e4:ee:14:
         72:fc:2b:57:a5:35:c9:af:44:98:d8:9d:e4:00:19:8f:ba:8e:
         d1:bc:7c:fa:6d:1c:d7:1e:c1:a2:68:be:55:e0:6b:a9:2c:2d:
         39:53:3f:d4:f7:cc:d3:66:64:38:12:bd:17:53:c3:10:ca:3c:
         4d:f2:8a:65:82:1a:4d:79:9b:31:90:14:dc:4e:75:0d:5c:3f:
         15:32:4e:72:5b:c8:d0:70:17:32:27:34:d1:10:b0:e3:70:16:
         cd:3e:15:99:ac:d4:e7:a2:cd:65:5c:4f:b9:ee:3b:91:6c:e1:
         54:95:2f:dd:44:11:a1:60:54:c0:9b:db:3e:08:e3:16:6f:20:
         a8:0d:44:aa:54:c0:49:e6:b5:13:b1:e4:b5:c8:6c:64:51:da:
         c7:5a:c6:eb:42:59:87:e2:cb:7c:b1:fd:1f:3d:8a:90:ae:f8:
         78:c2:3a:fe:c7:d3:56:ad:82:3c:55:c8:00:cd:54:b2:34:2a:
         e0:e1:a3:3f:6b:10:39:dd:2d:39:04:0c:65:3f:77:c9:42:32:
         20:67:39:1c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVAXwPO2/0K5kA2pmw0nDqFFSM2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M2Q0Q3QjZDRjVBNTg5QzRDNUQxNERBNEM2OTQyQjYx
M0U4MkE3QjAeFw0yNTEwMTMxNTA1MDBaFw0yNjEwMTIxNTEwMDBaMDMxMTAvBgNV
BAMTKDQyREVFNDlBM0E5NzJEMzA0NjRFNDk0QzhDNTIzRDkwNjJCMjlBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IQJ32X57pxls3fNI1aEJxnaa
8ZErvBpJmWtWnz1x2PrgcvhpwxS0KNa/iiG/BMDP06XDMp5Qh8DQ5hB4gMtsCPee
66P9yY7b/tUd9fugOWzaTtZPJrvXg0QrKdy50KyGzJ4TLoiVEqd0QuMpBPvBlx96
CymIdYMR6WGWNkq9mmakVwQbSZXkTtAljOFh3SUatEVMYUgORhqDiXkZUAXmlb+n
/M/lQGDS9FS8YMGQe5/Wu3boh5H16xTgJpRqPg2yTOGwbH5nESxn9SEU5rw2l7e5
8PGS61N+v+q3DF7PWr+BmwlNL8k5yyha16N4PARKxot42td+JQPo+9KHN4dbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUQt7kmjqXLTBGTklMjFI9kGKyml4wHwYDVR0j
BBgwFoAUPGzXts9aWJxMXRTaTGlCthPoKnswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOTdEODEyN0VBNTgyMkE2M0Q2NTg0MjQyRTEwODIxOERC
QTU5NjMzMDYyOTg5MjU4QkU2Q0U1RjYyMURFRUNCLzAvM0M2Q0Q3QjZDRjVBNTg5
QzRDNUQxNERBNEM2OTQyQjYxM0U4MkE3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzZDRDdCNkNGNUE1ODlDNEM1
RDE0REE0QzY5NDJCNjEzRTgyQTdCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTk3RDgxMjdFQTU4MjJBNjNENjU4NDI0MkUxMDgyMThEQkE1OTYzMzA2
Mjk4OTI1OEJFNkNFNUY2MjFERUVDQi8wLzMyMzgzMDMzM2E2MTMzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDo6Aw
DQYJKoZIhvcNAQELBQADggEBAAEF0CjT5oHgcTQyLGLWZghrZCcPMV3qtxDmPVAA
E5v9BbXzyatsuH35nPEF6AFKRYLXpeTuFHL8K1elNcmvRJjYneQAGY+6jtG8fPpt
HNcewaJovlXga6ksLTlTP9T3zNNmZDgSvRdTwxDKPE3yimWCGk15mzGQFNxOdQ1c
PxUyTnJbyNBwFzInNNEQsONwFs0+FZms1OeizWVcT7nuO5Fs4VSVL91EEaFgVMCb
2z4I4xZvIKgNRKpUwEnmtROx5LXIbGRR2sdaxutCWYfiy3yx/R89ipCu+HjCOv7H
01atgjxVyADNVLI0KuDhoz9rEDndLTkEDGU/d8lCMiBnORw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:19:09 2025 by rpki-client