Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa
File:                     323830333a333964303a3a2f33322d3438203d3e20323734313630.roa (raw, json)
Hash identifier:          6jIxPPC6nLH8Q2hvZYihid69V4g7ur0Tg1E3YbIkdKw=
Subject key identifier:   51:19:F9:D7:8F:2B:D5:37:F0:AF:C6:BA:0A:48:28:35:6D:57:1C:B9
Certificate issuer:       /CN=98F0260A04D4D28EF03F54292E6DFD875E7642A7
Certificate serial:       5C4524309835C78E4A3BC488F75CFBEA75F73427
Authority key identifier: 98:F0:26:0A:04:D4:D2:8E:F0:3F:54:29:2E:6D:FD:87:5E:76:42:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa
Signing time:             Wed 22 Oct 2025 02:00:00 +0000
ROA not before:           Wed 22 Oct 2025 01:55:00 +0000
ROA not after:            Wed 21 Oct 2026 02:00:00 +0000
asID:                     274160
IP address blocks:        2803:39d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 14:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:45:24:30:98:35:c7:8e:4a:3b:c4:88:f7:5c:fb:ea:75:f7:34:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F0260A04D4D28EF03F54292E6DFD875E7642A7
        Validity
            Not Before: Oct 22 01:55:00 2025 GMT
            Not After : Oct 21 02:00:00 2026 GMT
        Subject: CN=5119F9D78F2BD537F0AFC6BA0A4828356D571CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:d7:d8:90:1d:b9:3a:49:98:9a:2f:af:d7:
                    8d:f7:b6:5f:55:f1:0c:93:ee:5a:56:81:2e:22:df:
                    15:a3:b4:0f:7d:7d:4e:19:2b:78:76:7c:fe:4b:3c:
                    11:3b:1a:3a:a2:c2:e8:63:fb:cd:94:12:9a:11:20:
                    3d:6b:7c:5c:69:6a:d5:70:d3:b5:9b:cd:7b:59:49:
                    b6:75:78:ce:b9:38:f6:af:3d:73:91:bc:e4:72:64:
                    7e:8a:38:ed:db:76:e6:31:6b:60:d0:bb:ce:ec:de:
                    f8:e6:d3:30:48:93:65:34:8f:ab:33:82:99:d8:d0:
                    b9:ce:09:bb:85:ee:4e:a2:f1:de:87:a4:95:aa:95:
                    d1:70:40:ab:4a:21:6d:23:34:77:77:c7:7a:88:59:
                    97:29:8a:c3:a7:3d:c3:eb:4a:a0:da:67:48:19:68:
                    a3:8f:6d:9b:13:31:8f:67:d3:2c:00:13:5a:9e:8f:
                    77:72:88:ac:2e:dd:51:6c:9e:68:c5:ce:11:00:63:
                    14:11:f5:23:73:9c:8d:2c:12:03:6f:dd:d6:b4:85:
                    94:92:96:c3:74:60:7d:01:21:1c:be:72:3b:a4:72:
                    27:63:8a:f0:85:ab:94:35:a1:35:c3:36:73:fd:be:
                    d5:cd:b4:17:c6:4a:50:14:37:b6:30:69:77:95:60:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:F9:D7:8F:2B:D5:37:F0:AF:C6:BA:0A:48:28:35:6D:57:1C:B9
            X509v3 Authority Key Identifier:
                keyid:98:F0:26:0A:04:D4:D2:8E:F0:3F:54:29:2E:6D:FD:87:5E:76:42:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98F0260A04D4D28EF03F54292E6DFD875E7642A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:39d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:72:2b:7f:1c:20:97:01:25:a5:70:c7:4c:17:68:c2:8e:18:
         16:27:bc:70:7f:b9:96:a3:a3:32:5d:3b:7d:08:15:91:e3:08:
         a5:93:2f:55:47:cc:27:fa:f3:25:78:ac:c9:0a:a1:a7:21:d6:
         99:8b:4b:5b:71:57:b7:17:cd:b7:b1:c6:e9:38:62:ca:e4:94:
         c1:0d:39:8d:25:5b:30:a5:bf:ad:85:b8:6e:c2:91:6f:f0:8d:
         1e:a3:d3:74:b8:54:34:ce:48:c1:c7:cd:7e:c7:fc:02:20:92:
         ca:ae:ef:d8:4e:d2:4c:e1:ea:c9:9a:f8:a3:3a:a5:6d:ef:9a:
         ab:62:bc:1d:d6:67:27:4c:50:97:1e:f1:3a:f0:9b:75:11:63:
         8c:73:95:02:e1:ee:3d:3d:9d:49:da:20:62:6b:77:18:65:53:
         26:47:6e:84:5d:33:4d:cd:bb:63:65:f0:93:9e:d5:cb:55:53:
         bc:af:f1:47:d0:8b:99:cf:80:08:10:b8:76:63:c4:5e:59:c4:
         2f:80:34:b9:1c:e2:a9:b0:a8:18:b5:57:be:cb:4e:24:c4:a5:
         36:82:7c:69:73:72:39:24:0f:62:1e:84:af:83:8c:fc:5d:41:
         29:3d:ec:ba:af:7e:6f:0f:63:c9:a0:f8:d3:6b:6b:bf:9c:7c:
         48:0b:f8:e2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXEUkMJg1x45KO8SI91z76nX3NCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGMDI2MEEwNEQ0RDI4RUYwM0Y1NDI5MkU2REZEODc1
RTc2NDJBNzAeFw0yNTEwMjIwMTU1MDBaFw0yNjEwMjEwMjAwMDBaMDMxMTAvBgNV
BAMTKDUxMTlGOUQ3OEYyQkQ1MzdGMEFGQzZCQTBBNDgyODM1NkQ1NzFDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8dfYkB25OkmYmi+v1433tl9V
8QyT7lpWgS4i3xWjtA99fU4ZK3h2fP5LPBE7Gjqiwuhj+82UEpoRID1rfFxpatVw
07WbzXtZSbZ1eM65OPavPXORvORyZH6KOO3bduYxa2DQu87s3vjm0zBIk2U0j6sz
gpnY0LnOCbuF7k6i8d6HpJWqldFwQKtKIW0jNHd3x3qIWZcpisOnPcPrSqDaZ0gZ
aKOPbZsTMY9n0ywAE1qej3dyiKwu3VFsnmjFzhEAYxQR9SNznI0sEgNv3da0hZSS
lsN0YH0BIRy+cjukcidjivCFq5Q1oTXDNnP9vtXNtBfGSlAUN7YwaXeVYOhVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUURn5148r1Tfwr8a6CkgoNW1XHLkwHwYDVR0j
BBgwFoAUmPAmCgTU0o7wP1QpLm39h152QqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjkzNkJCNzE3ODFCQTkxRjU0MzQ3RkI3RERERTk5NjY2
OTg4RDBGRkREOUYwRDgzQzNCRDNFRDA3ODBBNjA3LzAvOThGMDI2MEEwNEQ0RDI4
RUYwM0Y1NDI5MkU2REZEODc1RTc2NDJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEYwMjYwQTA0RDREMjhFRjAz
RjU0MjkyRTZERkQ4NzVFNzY0MkE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUY5MzZCQjcxNzgxQkE5MUY1NDM0N0ZCN0REREU5OTY2Njk4OEQwRkZE
RDlGMEQ4M0MzQkQzRUQwNzgwQTYwNy8wLzMyMzgzMDMzM2EzMzM5NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMxMzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOdAw
DQYJKoZIhvcNAQELBQADggEBAFhyK38cIJcBJaVwx0wXaMKOGBYnvHB/uZajozJd
O30IFZHjCKWTL1VHzCf68yV4rMkKoach1pmLS1txV7cXzbexxuk4YsrklMENOY0l
WzClv62FuG7CkW/wjR6j03S4VDTOSMHHzX7H/AIgksqu79hO0kzh6sma+KM6pW3v
mqtivB3WZydMUJce8Trwm3URY4xzlQLh7j09nUnaIGJrdxhlUyZHboRdM03Nu2Nl
8JOe1ctVU7yv8UfQi5nPgAgQuHZjxF5ZxC+ANLkc4qmwqBi1V77LTiTEpTaCfGlz
cjkkD2IehK+DjPxdQSk97Lqvfm8PY8mg+NNra7+cfEgL+OI=
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:19 2025 by rpki-client