Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/323830313a3137363a3a2f34342d3434203d3e203133343839.roa
File:                     323830313a3137363a3a2f34342d3434203d3e203133343839.roa (raw, json)
Hash identifier:          OWVqlxV8YvN7sGQY/t/o/uGNBq2BOGc5q18V4nk7odg=
Subject key identifier:   22:6B:4D:0E:E6:DD:DE:89:57:D3:9B:3F:95:2D:B1:1C:7D:57:B9:72
Certificate issuer:       /CN=162590DD964301A459B4B28F7BFB7B9FD93A8D2E
Certificate serial:       736DCD6A9E6672E69C7150F7EB5DBDEC784C7F63
Authority key identifier: 16:25:90:DD:96:43:01:A4:59:B4:B2:8F:7B:FB:7B:9F:D9:3A:8D:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/323830313a3137363a3a2f34342d3434203d3e203133343839.roa
Signing time:             Fri 15 Aug 2025 14:55:00 +0000
ROA not before:           Fri 15 Aug 2025 14:50:00 +0000
ROA not after:            Fri 14 Aug 2026 14:55:00 +0000
asID:                     13489
IP address blocks:        2801:176::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6d:cd:6a:9e:66:72:e6:9c:71:50:f7:eb:5d:bd:ec:78:4c:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162590DD964301A459B4B28F7BFB7B9FD93A8D2E
        Validity
            Not Before: Aug 15 14:50:00 2025 GMT
            Not After : Aug 14 14:55:00 2026 GMT
        Subject: CN=226B4D0EE6DDDE8957D39B3F952DB11C7D57B972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:05:0b:f6:46:3a:a7:d4:8d:ad:55:98:5b:
                    0b:4a:7d:bc:b0:ef:5d:27:4f:d3:dd:41:b8:19:d2:
                    33:39:9f:0c:eb:74:5c:e8:9c:00:26:e4:f3:3b:2c:
                    17:a0:67:39:8d:b4:2a:9c:04:a1:49:2e:9f:f1:33:
                    f8:f8:3c:c4:e9:81:4b:68:fb:31:26:fb:91:ee:fb:
                    d9:58:08:63:7f:f1:06:62:b2:1d:b1:f0:69:64:38:
                    2e:b4:f8:0f:05:fd:b0:01:22:4a:ea:e3:23:19:44:
                    1a:92:76:8c:13:ea:13:ca:d8:31:61:3d:4e:40:76:
                    36:7e:91:f1:b5:6e:3a:ef:b0:68:64:07:58:9f:30:
                    5b:2b:3c:2a:54:c8:20:66:82:6d:b4:33:99:1f:fb:
                    8f:74:e9:3e:c9:d1:1b:f7:a1:8b:df:25:56:e6:be:
                    5b:d3:ff:cc:db:ed:c7:a8:ec:fd:c6:69:4b:2a:0d:
                    31:17:9d:37:75:f8:e2:7a:50:6a:30:fb:8c:1e:0e:
                    08:bb:4b:42:89:99:aa:c7:99:e9:5a:ba:f4:e3:fc:
                    2b:60:47:2b:1a:7d:87:d8:38:87:e7:ca:8d:13:93:
                    b9:2b:e8:34:8a:b6:04:70:14:02:22:83:ce:5d:50:
                    59:7e:48:c0:e2:01:64:b6:4c:60:21:81:54:5b:2f:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:4D:0E:E6:DD:DE:89:57:D3:9B:3F:95:2D:B1:1C:7D:57:B9:72
            X509v3 Authority Key Identifier:
                keyid:16:25:90:DD:96:43:01:A4:59:B4:B2:8F:7B:FB:7B:9F:D9:3A:8D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162590DD964301A459B4B28F7BFB7B9FD93A8D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42193BE37F196E39BE68D707E10B5C716584B52475D154DB953C63DAD06D7E5F/0/323830313a3137363a3a2f34342d3434203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:176::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:36:8f:f4:35:c6:f3:7b:57:55:9a:d8:62:8a:6a:64:a6:
         58:51:09:e0:ec:09:60:a3:29:5c:45:8b:d6:94:13:62:d3:da:
         b0:d8:e3:e0:2e:44:6f:b0:99:a4:f7:03:c1:72:b2:6a:88:d7:
         99:54:d9:bd:6d:16:f9:00:02:3d:12:50:0b:b9:89:20:c4:b8:
         5a:f7:e7:69:e0:dc:cb:64:f0:61:14:f9:d4:54:0c:73:f2:8d:
         35:bf:4b:17:c9:41:f8:a2:bf:b3:86:de:eb:71:5d:33:97:b5:
         89:17:09:9c:f2:82:0e:6a:1e:fa:41:88:32:27:0b:21:db:a7:
         19:a6:54:e0:6b:0b:85:bb:42:c8:d1:39:c4:55:93:a7:a1:3c:
         b0:54:5f:ba:64:7d:23:41:ec:18:40:90:c3:2b:bf:28:a9:47:
         54:4b:d5:37:1e:83:30:7b:e6:e2:d4:c3:cb:04:a9:72:1f:cd:
         45:07:41:af:b4:e1:07:58:48:b2:7b:95:12:88:0b:a6:a9:f7:
         db:eb:79:4b:f3:8b:b5:2b:4a:4d:29:c3:6d:7d:77:d4:3a:21:
         c1:ab:03:5f:81:c8:47:79:11:50:21:5f:3e:27:45:f3:1e:5a:
         37:95:e0:62:db:20:cb:55:c2:09:27:47:d4:3d:7d:1f:9a:6f:
         ed:9b:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:36:37 2025 by rpki-client