Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/323830363a3431343a3a2f33322d3332203d3e20323732333633.roa
File:                     323830363a3431343a3a2f33322d3332203d3e20323732333633.roa (raw, json)
Hash identifier:          f8o4QB/ecm14UTXx9jiQ5vydq/QRNDIcEs4Q6vibaR4=
Subject key identifier:   DE:BB:D0:93:A2:A1:37:F5:86:B5:42:FC:A8:59:1F:C8:8E:04:6D:62
Certificate issuer:       /CN=25A5E547724139941D5CA03B2E00CE6680B60029
Certificate serial:       15D9C2CB28C8BC4112C743FAD2DB827B2C9D215F
Authority key identifier: 25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/323830363a3431343a3a2f33322d3332203d3e20323732333633.roa
Signing time:             Mon 20 Oct 2025 22:35:00 +0000
ROA not before:           Mon 20 Oct 2025 22:30:00 +0000
ROA not after:            Mon 19 Oct 2026 22:35:00 +0000
asID:                     272363
IP address blocks:        2806:414::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d9:c2:cb:28:c8:bc:41:12:c7:43:fa:d2:db:82:7b:2c:9d:21:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25A5E547724139941D5CA03B2E00CE6680B60029
        Validity
            Not Before: Oct 20 22:30:00 2025 GMT
            Not After : Oct 19 22:35:00 2026 GMT
        Subject: CN=DEBBD093A2A137F586B542FCA8591FC88E046D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:e2:41:d1:21:aa:92:ad:28:2c:27:a2:ec:
                    a6:fc:92:9d:ef:be:41:d1:68:86:3f:ca:34:91:7d:
                    aa:0b:78:d3:23:36:46:92:cc:d2:e2:78:ac:cb:08:
                    1a:42:1a:4b:aa:39:30:14:cd:a4:2e:a1:82:4a:c0:
                    7b:11:fe:15:82:10:1b:5f:05:72:45:20:97:03:7f:
                    f6:df:93:c2:0b:5c:72:aa:64:2d:e2:8f:7b:45:4a:
                    e2:32:d9:7b:3e:a0:1b:6a:91:3d:52:18:a4:73:c8:
                    c3:18:12:e7:7b:79:72:76:ce:c6:77:93:db:88:9b:
                    a1:c8:71:56:13:c3:90:4c:6e:59:9b:d1:7b:37:11:
                    75:90:57:85:14:7a:2d:84:ef:17:4e:21:5c:4e:d9:
                    64:d3:d3:30:18:39:0a:0f:6e:42:ad:df:af:a7:e8:
                    9a:ee:5c:81:fc:52:b4:47:72:a3:0d:88:37:ba:52:
                    e8:cb:39:38:06:88:83:49:06:69:55:c0:ab:26:75:
                    56:d8:f6:e3:79:a2:78:cb:0a:82:bc:ac:e2:ad:1d:
                    99:0e:69:23:70:0d:82:34:67:16:bd:1e:be:23:7d:
                    13:ac:08:f6:b4:2a:85:c7:46:7c:bc:41:4a:f4:41:
                    db:2d:1b:7e:99:c5:61:37:19:25:2a:d7:de:bf:e8:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BB:D0:93:A2:A1:37:F5:86:B5:42:FC:A8:59:1F:C8:8E:04:6D:62
            X509v3 Authority Key Identifier:
                keyid:25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/323830363a3431343a3a2f33322d3332203d3e20323732333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:414::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:76:86:0b:06:68:45:39:80:64:e4:cb:ce:50:92:44:f2:
         c1:61:0e:7c:a2:ff:3e:0b:3a:d3:00:41:0b:4f:f0:c7:d9:0c:
         b3:ab:ce:c9:cc:bd:9e:89:f9:65:ae:0f:92:a4:e4:c2:79:70:
         8d:8c:27:06:f4:e0:ed:ad:aa:4f:8b:91:60:b1:a9:3a:64:97:
         8c:69:3f:4b:57:59:6b:84:72:f9:aa:46:b6:ba:30:75:14:50:
         07:99:cc:4f:ef:fb:f3:c8:ea:df:cd:fa:4f:16:07:32:2a:8d:
         13:61:b1:e5:46:a5:50:d7:e9:9a:c7:e8:30:07:c4:18:b3:65:
         14:0c:88:35:79:29:d7:2f:53:bb:76:ec:bc:47:26:63:7a:44:
         35:88:12:78:da:2e:3f:d6:74:1d:cc:b3:9c:f0:d2:9d:de:3f:
         00:9e:6c:ff:17:e0:28:3f:bf:01:c3:af:f6:db:4f:1b:43:38:
         ba:34:c4:64:17:1e:3e:d7:90:cf:a2:32:3d:db:8e:01:36:bb:
         c3:0c:e0:33:34:90:d3:7c:d5:48:12:08:e2:39:10:f5:cd:bf:
         4d:0e:94:3e:e8:c4:60:90:b4:8d:87:4e:80:39:76:ad:7a:6a:
         9a:22:94:a2:42:3f:92:68:c3:21:72:fc:c5:34:c6:04:2d:bf:
         cc:70:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:32 2025 by rpki-client