Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa
File:                     323830333a6464303a3a2f33322d3438203d3e20323734313833.roa (raw, json)
Hash identifier:          8G3aMslGrQaX9TDY2yN9YthkZggpqccK9Cn4gvyv0DM=
Subject key identifier:   C4:8C:72:5D:B8:B8:D9:AD:B5:E9:17:F0:7B:20:8C:4C:3C:7B:FA:27
Certificate issuer:       /CN=1C16C74806E76A43254B7956DCD705E7D260C85E
Certificate serial:       7E75F75975F88087ECA05F4CEE730FFEDF96C278
Authority key identifier: 1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa
Signing time:             Mon 06 Oct 2025 21:25:00 +0000
ROA not before:           Mon 06 Oct 2025 21:20:00 +0000
ROA not after:            Mon 05 Oct 2026 21:25:00 +0000
asID:                     274183
IP address blocks:        2803:dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:f7:59:75:f8:80:87:ec:a0:5f:4c:ee:73:0f:fe:df:96:c2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C16C74806E76A43254B7956DCD705E7D260C85E
        Validity
            Not Before: Oct  6 21:20:00 2025 GMT
            Not After : Oct  5 21:25:00 2026 GMT
        Subject: CN=C48C725DB8B8D9ADB5E917F07B208C4C3C7BFA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:2b:d9:bd:ec:d1:2b:5e:34:5e:b8:99:d4:
                    2f:6d:77:b0:b5:64:91:8b:66:a5:46:87:23:9a:ea:
                    d1:ac:67:4d:fd:c7:6f:9f:8a:19:df:dd:85:a6:a7:
                    e9:ef:4d:6b:f3:1d:22:8d:bd:01:8d:57:08:1d:a1:
                    ee:2d:6a:af:f9:5c:f1:58:25:e7:0e:64:e6:22:78:
                    31:dc:0f:52:69:63:f5:28:79:5d:f3:6d:a7:7e:68:
                    0d:25:26:08:65:c1:b2:7a:9c:69:2f:5e:18:3e:7b:
                    db:65:09:47:1b:32:e7:b4:8b:e2:48:c4:3d:8a:7a:
                    7c:66:be:8e:23:1c:57:50:3f:b0:ea:2e:1d:7a:fc:
                    c2:b3:20:39:fd:99:59:d9:f8:3b:29:ea:94:e7:59:
                    67:89:f5:30:f4:d5:7f:58:a5:22:50:2c:81:3a:2b:
                    45:47:e0:57:94:d3:63:1d:8c:6a:d3:d2:ec:c7:d1:
                    02:3f:c6:92:69:d0:e8:ca:dc:c4:e8:3c:ce:35:d6:
                    b0:a0:38:ec:0f:47:b2:fb:11:63:ea:ad:ac:75:5c:
                    af:fb:e3:73:7f:a4:03:cb:73:75:2e:ee:f5:4b:97:
                    4b:89:89:12:6c:36:10:76:63:ac:c3:fa:6a:3f:10:
                    a7:90:c3:1a:3d:d2:d5:d1:86:33:3d:a0:85:2c:16:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:72:5D:B8:B8:D9:AD:B5:E9:17:F0:7B:20:8C:4C:3C:7B:FA:27
            X509v3 Authority Key Identifier:
                keyid:1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:45:4c:2e:76:c5:3f:fd:f0:29:f9:9a:27:6e:dc:35:ce:1a:
         0a:c5:1a:0b:16:23:f8:a2:69:e8:02:86:f8:6a:3d:86:bc:6c:
         3f:57:21:22:d6:d8:fd:1a:31:10:dd:c5:7a:f6:44:a4:0d:bb:
         5c:58:cf:a8:d4:4a:66:89:a5:77:90:b5:40:74:cf:ed:49:9f:
         17:1c:f6:bf:13:ae:72:51:04:ff:cc:21:c9:f1:3e:23:7d:18:
         dc:ba:b1:b8:b6:e0:0a:71:bb:6c:06:22:1d:a7:19:55:32:1d:
         93:4b:57:60:3f:e2:27:1b:56:26:66:22:42:ea:e8:2d:c9:75:
         5a:b3:27:8b:f1:ee:6c:44:2e:12:27:2a:e7:60:a1:63:e2:17:
         ce:90:3e:9c:28:12:b2:28:6a:5a:0f:0e:f0:4d:02:60:bb:e3:
         4b:ed:e1:9f:43:51:dc:67:d2:61:2c:98:76:35:85:c9:d1:6c:
         de:b6:7c:e5:4d:49:3f:5f:c5:34:4c:b4:13:67:a1:b8:cb:fd:
         46:e9:3e:bf:8b:1e:9c:e3:ae:c8:02:3b:87:79:5f:a0:23:22:
         f3:f5:c3:14:1d:ba:2b:a9:bd:1e:dc:a7:1d:68:dc:28:c4:0e:
         fa:cd:e8:12:8a:6f:06:91:a3:b7:f5:11:59:5d:ca:56:3a:dd:
         65:a1:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:25 2025 by rpki-client