Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130303a3a2f34302d3438203d3e20323732383036.roa
File:                     323830333a636436303a353130303a3a2f34302d3438203d3e20323732383036.roa (raw, json)
Hash identifier:          astuQ06PzHjqS7Qrj6ag+gvMplCbPKEBlmR3pJVoJhw=
Subject key identifier:   7A:0E:B9:FB:82:90:C4:0C:A1:74:78:C7:7B:FC:96:79:8E:D0:61:9C
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       21E7717569641F94EBE45D93B60189EA0AE30D66
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130303a3a2f34302d3438203d3e20323732383036.roa
Signing time:             Wed 03 Sep 2025 22:45:00 +0000
ROA not before:           Wed 03 Sep 2025 22:40:00 +0000
ROA not after:            Wed 02 Sep 2026 22:45:00 +0000
asID:                     272806
IP address blocks:        2803:cd60:5100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Sep 2025 05:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e7:71:75:69:64:1f:94:eb:e4:5d:93:b6:01:89:ea:0a:e3:0d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Sep  3 22:40:00 2025 GMT
            Not After : Sep  2 22:45:00 2026 GMT
        Subject: CN=7A0EB9FB8290C40CA17478C77BFC96798ED0619C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:af:b7:78:ee:33:3f:a8:e3:d7:8a:c6:38:
                    f6:1c:67:de:d9:f7:6d:a0:b9:83:ee:7f:65:8b:35:
                    c7:a4:cd:88:d0:ec:de:50:d5:af:b8:fe:b2:76:f7:
                    7f:c4:cc:71:e4:f2:83:1f:86:bf:eb:cd:5b:55:c7:
                    20:41:0b:d7:33:d3:86:e7:2c:d6:b8:45:56:33:18:
                    0f:07:5d:eb:ae:4f:9a:ea:05:33:2a:53:4a:e1:50:
                    66:be:51:45:1d:48:49:7a:f3:f5:4a:61:ab:a2:46:
                    95:bb:e3:ae:36:ae:90:c5:17:44:8c:08:f2:21:68:
                    23:34:37:80:47:34:ab:c3:e4:84:d5:53:12:64:35:
                    09:cc:d3:e3:df:c4:05:c9:62:43:4b:87:33:e1:ad:
                    3e:54:26:5f:f8:37:5b:a7:5a:2b:2a:e3:2d:1d:b4:
                    f7:72:cd:fd:ee:78:cb:70:c4:56:82:d9:b9:d5:2c:
                    24:7c:20:6d:fa:67:91:f5:e8:c0:cf:c1:d2:ce:42:
                    73:f8:fc:56:0f:db:2a:2d:c7:f2:9f:b9:84:13:89:
                    7e:d7:9e:56:6a:92:1a:de:8b:9e:ce:62:89:19:8b:
                    23:d9:05:a9:2e:03:11:d2:26:12:c0:38:40:76:d4:
                    ca:f9:1d:de:b7:23:a0:39:9b:e1:1d:1b:8d:03:e4:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:B9:FB:82:90:C4:0C:A1:74:78:C7:7B:FC:96:79:8E:D0:61:9C
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130303a3a2f34302d3438203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:04:6b:39:57:f0:69:da:b5:9b:fc:f1:d9:94:d0:37:d5:
         39:11:0c:de:2c:33:a6:ef:64:ab:80:11:fb:ea:c4:68:a6:85:
         87:0d:8b:38:9d:4c:53:e0:32:24:0f:c7:41:10:39:c9:9e:96:
         61:34:18:e9:23:96:02:c1:de:8a:d2:12:33:2f:95:29:58:dd:
         ff:0b:06:cd:7e:02:97:50:2e:5b:94:33:af:e7:21:b4:8d:0e:
         32:de:d5:1c:0d:e6:70:51:58:fe:33:ac:b8:80:ca:a7:ea:a8:
         8c:6c:ee:7c:b5:e0:b3:c7:c9:33:48:76:e6:ad:b0:32:37:51:
         c9:f8:ad:dd:cf:34:94:01:6f:7e:b5:96:12:11:fa:73:c0:d2:
         58:2c:c5:7c:a3:05:e7:f7:18:11:dd:c9:12:14:5c:e2:af:de:
         46:40:c3:46:58:52:d8:ac:0f:0b:04:b9:7c:84:30:63:ee:dd:
         2f:e1:4f:85:20:2c:34:8b:92:e5:61:31:b0:30:0f:e7:ac:ca:
         84:5a:2d:00:04:be:dc:f0:a4:d3:dc:a5:78:ec:61:a0:4b:35:
         9f:a4:3d:91:6e:77:4d:de:9b:41:61:2b:47:f2:17:fe:4a:bc:
         f0:c8:8e:c2:02:51:bb:43:c1:bf:0d:dc:4d:52:89:d6:d4:d4:
         04:86:b4:67
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUIedxdWlkH5Tr5F2TtgGJ6grjDWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz
Q0RGNzIyMzAeFw0yNTA5MDMyMjQwMDBaFw0yNjA5MDIyMjQ1MDBaMDMxMTAvBgNV
BAMTKDdBMEVCOUZCODI5MEM0MENBMTc0NzhDNzdCRkM5Njc5OEVEMDYxOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3q+3eO4zP6jj14rGOPYcZ97Z
922guYPuf2WLNcekzYjQ7N5Q1a+4/rJ293/EzHHk8oMfhr/rzVtVxyBBC9cz04bn
LNa4RVYzGA8HXeuuT5rqBTMqU0rhUGa+UUUdSEl68/VKYauiRpW74642rpDFF0SM
CPIhaCM0N4BHNKvD5ITVUxJkNQnM0+PfxAXJYkNLhzPhrT5UJl/4N1unWisq4y0d
tPdyzf3ueMtwxFaC2bnVLCR8IG36Z5H16MDPwdLOQnP4/FYP2yotx/KfuYQTiX7X
nlZqkhrei57OYokZiyPZBakuAxHSJhLAOEB21Mr5Hd63I6A5m+EdG40D5FgpAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUeg65+4KQxAyhdHjHe/yWeY7QYZwwHwYDVR0j
BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz
RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw
OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5
OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy
MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzUz
MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzIzODMwMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA81gUTANBgkqhkiG9w0BAQsFAAOCAQEADTQEazlX8GnatZv88dmU0DfV
OREM3iwzpu9kq4AR++rEaKaFhw2LOJ1MU+AyJA/HQRA5yZ6WYTQY6SOWAsHeitIS
My+VKVjd/wsGzX4Cl1AuW5Qzr+chtI0OMt7VHA3mcFFY/jOsuIDKp+qojGzufLXg
s8fJM0h25q2wMjdRyfit3c80lAFvfrWWEhH6c8DSWCzFfKMF5/cYEd3JEhRc4q/e
RkDDRlhS2KwPCwS5fIQwY+7dL+FPhSAsNIuS5WExsDAP56zKhFotAAS+3PCk09yl
eOxhoEs1n6Q9kW53Td6bQWErR/IX/kq88MiOwgJRu0PBvw3cTVKJ1tTUBIa0Zw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:53:51 2025 by rpki-client