Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa
File:                     323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa (raw, json)
Hash identifier:          BpTGJurnm/bfPm44Dbjc2KurVzjPRldqprtxirW4e9E=
Subject key identifier:   CB:32:E8:57:82:E2:68:54:A2:1B:78:DC:4C:FC:F2:00:46:59:E6:F0
Certificate issuer:       /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
Certificate serial:       47F68456D7F4EABFE0C895EF72F2D964AAF15E46
Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa
Signing time:             Mon 15 Sep 2025 22:05:00 +0000
ROA not before:           Mon 15 Sep 2025 22:00:00 +0000
ROA not after:            Mon 14 Sep 2026 22:05:00 +0000
asID:                     272816
IP address blocks:        2803:7f90:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:84:56:d7:f4:ea:bf:e0:c8:95:ef:72:f2:d9:64:aa:f1:5e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
        Validity
            Not Before: Sep 15 22:00:00 2025 GMT
            Not After : Sep 14 22:05:00 2026 GMT
        Subject: CN=CB32E85782E26854A21B78DC4CFCF2004659E6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:9f:c4:17:6c:62:31:d6:4b:04:36:22:ac:
                    13:4c:d9:88:5d:02:66:81:b0:92:be:ec:21:df:68:
                    1e:4a:9c:2a:c0:7f:0f:b1:70:f0:e3:53:dc:a9:75:
                    35:57:e1:10:df:57:0e:3f:c1:c0:35:e9:bb:33:ee:
                    16:78:d9:f5:86:bf:ee:c6:95:b3:43:ff:07:58:73:
                    14:98:e3:92:04:81:5e:4f:e1:8e:64:5e:22:72:13:
                    99:40:43:95:a6:e4:9a:4a:91:f4:fa:60:6e:2c:a2:
                    5c:c1:bd:ad:f9:ed:9e:eb:7c:ca:0a:ff:50:7a:46:
                    ac:eb:4e:87:54:a9:28:cc:e1:90:b4:ab:9d:57:04:
                    b9:8b:a8:50:4f:96:0e:ad:ac:24:72:a6:7e:f5:83:
                    f9:dd:ae:ee:66:cf:27:03:f5:01:53:70:51:95:ab:
                    3f:71:b1:f0:81:bc:da:4f:4b:85:71:d9:f6:0d:17:
                    33:86:0f:77:30:fa:1a:19:c5:ee:bc:4a:da:11:95:
                    fa:59:1f:d3:9f:9a:09:d3:22:ca:9a:9d:dc:74:1b:
                    11:68:05:c8:d7:9f:60:38:3c:83:62:92:e5:b2:ee:
                    db:2e:b7:4f:14:dd:65:a2:b8:8e:40:a6:29:35:5c:
                    f7:54:9d:3a:e7:43:e6:bc:8c:a9:8d:93:21:43:62:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:E8:57:82:E2:68:54:A2:1B:78:DC:4C:FC:F2:00:46:59:E6:F0
            X509v3 Authority Key Identifier:
                keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f90:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:57:85:21:43:75:09:e5:db:c1:53:f3:77:81:94:6a:70:
         54:c4:04:0a:6c:05:47:dd:a4:0b:c2:58:df:f3:ba:bc:25:c8:
         56:95:a9:e8:c9:0a:b6:83:a1:9d:37:9f:68:76:1b:f9:05:30:
         6f:27:dc:b8:06:3e:4e:3d:27:6c:7b:f6:cb:f2:b6:d6:62:6a:
         a8:24:e6:2b:1c:45:52:cc:fc:8c:2f:c7:5f:ef:c7:89:5e:17:
         cc:26:49:68:87:85:fe:18:50:79:36:40:2e:aa:40:4c:55:1c:
         2d:1b:af:b8:c2:d7:b3:33:07:1a:ff:fd:6b:db:73:6d:13:74:
         f0:1b:f7:ed:a9:64:e7:a4:54:1d:a3:df:86:ff:60:ca:be:8a:
         7a:62:03:09:8c:6e:7d:dc:d4:28:cc:91:a2:d4:33:a5:ed:68:
         89:41:f7:ae:dd:84:8c:66:2c:a5:c8:f1:e6:85:f6:75:d7:c1:
         dc:4e:c9:75:64:d0:de:47:4e:9c:9c:02:b2:f2:61:28:2e:18:
         19:4d:66:f4:1f:6d:cf:48:02:9b:69:33:d8:0d:4a:7c:d1:51:
         eb:73:d4:a4:6b:0f:43:15:93:b2:05:b2:b9:a5:ce:1e:6e:b3:
         92:59:e2:34:13:61:d1:21:e0:9c:b6:22:a0:cd:a4:e0:06:3f:
         85:c7:ae:81
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUR/aEVtf06r/gyJXvcvLZZKrxXkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4RTQzQzMzRDNFOUU0QzU3Njk5MjRGRjNFODRCQTk5
MDZBQjZCNjAeFw0yNTA5MTUyMjAwMDBaFw0yNjA5MTQyMjA1MDBaMDMxMTAvBgNV
BAMTKENCMzJFODU3ODJFMjY4NTRBMjFCNzhEQzRDRkNGMjAwNDY1OUU2RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3p/EF2xiMdZLBDYirBNM2Yhd
AmaBsJK+7CHfaB5KnCrAfw+xcPDjU9ypdTVX4RDfVw4/wcA16bsz7hZ42fWGv+7G
lbND/wdYcxSY45IEgV5P4Y5kXiJyE5lAQ5Wm5JpKkfT6YG4solzBva357Z7rfMoK
/1B6RqzrTodUqSjM4ZC0q51XBLmLqFBPlg6trCRypn71g/ndru5mzycD9QFTcFGV
qz9xsfCBvNpPS4Vx2fYNFzOGD3cw+hoZxe68StoRlfpZH9OfmgnTIsqandx0GxFo
BcjXn2A4PINikuWy7tsut08U3WWiuI5Apik1XPdUnTrnQ+a8jKmNkyFDYjctAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUyzLoV4LiaFSiG3jcTPzyAEZZ5vAwHwYDVR0j
BBgwFoAUHo5Dwz0+nkxXaZJP8+hLqZBqtrYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTM2M0M0MjA4ODlFMDQ1ODgzMERCMjc1ODlDNzA3MDdC
MzFEMzYzNjZCNDA1QzBERTIyMTVFM0M1OEQ0OUExLzAvMUU4RTQzQzMzRDNFOUU0
QzU3Njk5MjRGRjNFODRCQTk5MDZBQjZCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRThFNDNDMzNEM0U5RTRDNTc2
OTkyNEZGM0U4NEJBOTkwNkFCNkI2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEzNjNDNDIwODg5RTA0NTg4MzBEQjI3NTg5QzcwNzA3QjMxRDM2MzY2
QjQwNUMwREUyMjE1RTNDNThENDlBMS8wLzMyMzgzMDMzM2EzNzY2MzkzMDNhMzUz
ODMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMxMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA3+QWDANBgkqhkiG9w0BAQsFAAOCAQEAfg1XhSFDdQnl28FT83eBlGpw
VMQECmwFR92kC8JY3/O6vCXIVpWp6MkKtoOhnTefaHYb+QUwbyfcuAY+Tj0nbHv2
y/K21mJqqCTmKxxFUsz8jC/HX+/HiV4XzCZJaIeF/hhQeTZALqpATFUcLRuvuMLX
szMHGv/9a9tzbRN08Bv37alk56RUHaPfhv9gyr6KemIDCYxufdzUKMyRotQzpe1o
iUH3rt2EjGYspcjx5oX2ddfB3E7JdWTQ3kdOnJwCsvJhKC4YGU1m9B9tz0gCm2kz
2A1KfNFR63PUpGsPQxWTsgWyuaXOHm6zklniNBNh0SHgnLYioM2k4AY/hceugQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:41:05 2025 by rpki-client