Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          Vc/Evbtc4Ei/5ZokRHixlnyDU63F54JdlowpFPJdT9k=
Subject key identifier:   4C:94:2E:20:37:87:9F:29:20:40:74:BE:36:D2:81:EE:2B:82:CB:F8
Certificate issuer:       /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Certificate serial:       5FC22FAC4F87D4BA6F04FFCE6B5DE4F1B59A43A5
Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Mon 25 Aug 2025 20:05:00 +0000
ROA not before:           Mon 25 Aug 2025 20:00:00 +0000
ROA not after:            Mon 24 Aug 2026 20:05:00 +0000
asID:                     14080
IP address blocks:        2801:11:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 19:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:2f:ac:4f:87:d4:ba:6f:04:ff:ce:6b:5d:e4:f1:b5:9a:43:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
        Validity
            Not Before: Aug 25 20:00:00 2025 GMT
            Not After : Aug 24 20:05:00 2026 GMT
        Subject: CN=4C942E2037879F29204074BE36D281EE2B82CBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:84:e9:6c:fb:09:3c:0f:44:92:31:26:2d:
                    bd:85:2f:c1:9a:5d:e8:bf:dd:f5:e7:7a:59:66:ba:
                    d1:47:c0:29:42:d2:9f:26:ae:30:0a:04:c7:56:c5:
                    5e:32:64:75:80:3e:ea:81:fe:1d:3a:b5:c8:35:be:
                    a9:aa:7c:54:90:61:53:29:ff:ea:1d:d0:a1:41:c3:
                    a1:c4:3e:80:c8:b8:be:35:30:60:62:9f:af:d5:a5:
                    89:bb:b6:56:2a:12:aa:64:9f:05:00:f9:a4:a0:24:
                    07:12:5f:f7:6a:ce:df:73:2c:7e:40:43:25:74:db:
                    42:38:1a:02:6a:30:cb:89:4d:4c:da:5b:18:3f:8b:
                    e2:c1:f3:fd:cd:7f:5c:63:d0:6d:56:ee:8d:fa:c8:
                    be:9e:a4:14:97:70:ff:0a:2e:43:67:6d:00:aa:cd:
                    a2:22:48:40:26:d4:50:37:0a:f2:eb:ff:54:f6:e1:
                    4a:ef:d2:8f:3b:27:d5:e0:d9:45:36:2f:7d:b0:f8:
                    e2:e9:1e:ba:71:20:00:0d:06:fb:53:5d:de:0d:b6:
                    86:3c:5f:54:dd:33:8e:ba:14:7b:e2:2a:8b:28:13:
                    dc:97:41:01:2f:1e:fd:e3:6e:b0:ad:56:09:94:7a:
                    22:69:89:e7:8d:6a:23:3d:e3:df:2f:af:33:18:01:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:94:2E:20:37:87:9F:29:20:40:74:BE:36:D2:81:EE:2B:82:CB:F8
            X509v3 Authority Key Identifier:
                keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:ef:e2:49:02:e5:76:85:9b:62:90:c3:a8:fc:6c:8f:21:
         0b:9a:f6:c2:98:7f:ad:f4:32:39:04:cd:6e:15:16:c9:b7:0a:
         f0:d1:1a:29:fa:7f:d8:25:e3:69:28:01:53:cd:f6:66:c8:29:
         97:6a:e7:36:2b:e7:1a:10:0a:27:7b:26:33:87:61:fd:41:1c:
         b8:d3:6b:a8:f3:44:a9:54:c6:4a:a5:ec:ef:4c:a3:a3:b8:d0:
         38:b6:7d:8f:96:ce:db:58:e7:e3:e6:39:bf:c5:b4:e5:3a:a3:
         92:c7:47:b4:93:c2:5a:2e:3d:18:d5:89:60:87:6a:65:99:24:
         9a:f2:4a:a8:af:17:12:0c:9d:80:2c:95:93:1a:14:6c:a0:3f:
         03:6e:9a:90:92:8a:0f:20:84:95:b1:a1:91:52:17:8f:30:70:
         17:dd:01:ab:8c:ca:ef:8a:c6:42:9a:bd:2b:a1:5a:2c:20:de:
         db:38:f8:23:4d:10:6c:85:9d:81:2c:dd:7e:26:42:18:b7:a2:
         28:b6:c6:b3:7f:b9:45:22:0c:da:d9:51:8f:1d:fa:76:80:44:
         93:e5:57:d2:6b:dd:46:8e:40:a2:2e:ef:a8:f2:23:69:99:15:
         29:1f:5c:77:6a:65:42:5b:19:91:7f:78:6f:1e:04:df:c1:7f:
         5d:cb:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:42:15 2025 by rpki-client