Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa
File:                     323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa (raw, json)
Hash identifier:          x3cro7ADE/os5BPUZP5jyDdkyopRLsuMv8tpi/XSkfI=
Subject key identifier:   15:0D:69:AD:E2:F9:65:E7:89:CF:3A:07:8B:22:99:7B:2D:A0:1A:07
Certificate issuer:       /CN=9E72ECAD48F886D2A48F18F7E7234FE3D2745890
Certificate serial:       42A225FD9297CA0863730061F352A7C5798B6346
Authority key identifier: 9E:72:EC:AD:48:F8:86:D2:A4:8F:18:F7:E7:23:4F:E3:D2:74:58:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa
Signing time:             Sat 01 Nov 2025 20:51:28 +0000
ROA not before:           Sat 01 Nov 2025 20:46:28 +0000
ROA not after:            Sat 31 Oct 2026 20:51:28 +0000
asID:                     269822
IP address blocks:        2801:18:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 21:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:25:fd:92:97:ca:08:63:73:00:61:f3:52:a7:c5:79:8b:63:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E72ECAD48F886D2A48F18F7E7234FE3D2745890
        Validity
            Not Before: Nov  1 20:46:28 2025 GMT
            Not After : Oct 31 20:51:28 2026 GMT
        Subject: CN=150D69ADE2F965E789CF3A078B22997B2DA01A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:31:3e:ed:ce:00:c7:c2:52:50:e0:fc:74:
                    04:26:83:39:41:f7:86:b4:91:a8:e7:ca:08:6e:7c:
                    cd:1d:cd:99:55:4e:b9:d6:99:e3:26:7d:b4:28:89:
                    ac:d6:1c:da:42:7a:59:42:a0:4d:15:13:50:c3:6f:
                    3f:f6:af:90:25:95:48:89:6e:1b:6a:d3:f1:1d:80:
                    3a:84:2b:ef:a4:2c:d7:eb:90:f9:00:f8:b2:5f:a0:
                    46:5e:34:ca:61:af:77:61:6b:b5:b2:58:3b:a8:b5:
                    61:54:2c:88:6d:ed:ce:4f:ee:ff:8c:40:53:30:be:
                    c3:ce:eb:55:a6:64:69:95:c5:e7:0f:2c:2c:c9:b7:
                    a0:a4:42:9b:86:7e:21:e9:63:f1:4c:0d:99:12:c2:
                    da:1b:19:6a:c3:a8:b3:cd:1a:7c:43:4c:da:bd:9f:
                    56:c7:61:1e:4f:23:7b:f9:16:79:99:d2:dd:44:d3:
                    ae:f5:63:18:6e:05:e7:ef:e1:75:9b:58:ce:4e:68:
                    ff:24:09:40:f8:18:47:d4:27:5a:0b:b7:ea:75:ad:
                    9f:9d:f6:75:70:50:f4:65:3f:8c:57:44:75:30:a2:
                    20:ce:29:f1:68:0e:6e:29:3a:57:54:6d:8a:10:2b:
                    55:52:dc:30:0e:e0:48:fd:23:48:b1:1b:a7:50:e1:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:69:AD:E2:F9:65:E7:89:CF:3A:07:8B:22:99:7B:2D:A0:1A:07
            X509v3 Authority Key Identifier:
                keyid:9E:72:EC:AD:48:F8:86:D2:A4:8F:18:F7:E7:23:4F:E3:D2:74:58:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:27:0d:2c:59:36:bc:aa:c8:45:57:0c:ab:a1:ef:14:1d:f7:
         88:ed:b5:f0:03:55:ef:a6:cf:88:46:ef:9b:cb:1c:48:6a:84:
         9b:77:cc:d3:34:fd:27:d1:45:2e:b9:c5:61:c9:fe:e4:1c:48:
         ed:ef:a2:fc:b4:26:f6:d6:e8:47:3a:e8:c3:79:90:54:c1:c5:
         e8:01:32:73:4d:b3:b4:7a:1f:57:7d:f5:1a:43:3f:cd:0b:a9:
         dc:03:0d:8a:b7:8a:90:56:91:03:48:e5:fc:e6:c8:af:0e:40:
         67:5a:c8:f2:78:67:9e:07:6b:21:69:ae:a4:6e:8f:dd:50:19:
         11:8a:0e:85:94:bc:83:8a:a0:24:f4:6a:45:d4:9f:16:3c:36:
         a3:65:bb:32:08:a9:24:e4:d3:61:bb:8b:5a:50:b3:1a:67:1e:
         75:44:50:ef:75:98:27:0d:6e:9b:ec:43:b1:11:70:76:22:74:
         25:03:d4:2f:70:83:66:89:6d:4b:de:f9:4e:1f:a1:16:a7:6d:
         17:10:c0:76:88:d6:e9:bc:61:1d:d1:87:67:ae:15:c3:ba:f2:
         85:4f:78:29:19:38:2d:93:bf:31:61:a4:7d:90:aa:a8:2f:c9:
         ed:b2:41:6c:76:de:79:92:12:53:09:ed:ee:83:a1:ab:5e:53:
         37:47:38:c5
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUQqIl/ZKXyghjcwBh81KnxXmLY0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3MkVDQUQ0OEY4ODZEMkE0OEYxOEY3RTcyMzRGRTNE
Mjc0NTg5MDAeFw0yNTExMDEyMDQ2MjhaFw0yNjEwMzEyMDUxMjhaMDMxMTAvBgNV
BAMTKDE1MEQ2OUFERTJGOTY1RTc4OUNGM0EwNzhCMjI5OTdCMkRBMDFBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0zE+7c4Ax8JSUOD8dAQmgzlB
94a0kajnyghufM0dzZlVTrnWmeMmfbQoiazWHNpCellCoE0VE1DDbz/2r5AllUiJ
bhtq0/EdgDqEK++kLNfrkPkA+LJfoEZeNMphr3dha7WyWDuotWFULIht7c5P7v+M
QFMwvsPO61WmZGmVxecPLCzJt6CkQpuGfiHpY/FMDZkSwtobGWrDqLPNGnxDTNq9
n1bHYR5PI3v5FnmZ0t1E0671YxhuBefv4XWbWM5OaP8kCUD4GEfUJ1oLt+p1rZ+d
9nVwUPRlP4xXRHUwoiDOKfFoDm4pOldUbYoQK1VS3DAO4Ej9I0ixG6dQ4UZnAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUFQ1preL5ZeeJzzoHiyKZey2gGgcwHwYDVR0j
BBgwFoAUnnLsrUj4htKkjxj35yNP49J0WJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QjI0Nzc4MkJDM0Q2QjFGNjk2OUM4Njg4OTJBNjM4QjQ0
RTBCMDhFQUQ0QTI5MTYxMjcyQ0RBQTA2OTgzMTgzLzAvOUU3MkVDQUQ0OEY4ODZE
MkE0OEYxOEY3RTcyMzRGRTNEMjc0NTg5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTcyRUNBRDQ4Rjg4NkQyQTQ4
RjE4RjdFNzIzNEZFM0QyNzQ1ODkwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEIyNDc3ODJCQzNENkIxRjY5NjlDODY4ODkyQTYzOEI0NEUwQjA4RUFE
NEEyOTE2MTI3MkNEQUEwNjk4MzE4My8wLzMyMzgzMDMxM2EzMTM4M2EzMTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzIzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABgYADANBgkqhkiG9w0BAQsFAAOCAQEAdScNLFk2vKrIRVcMq6HvFB33iO21
8ANV76bPiEbvm8scSGqEm3fM0zT9J9FFLrnFYcn+5BxI7e+i/LQm9tboRzrow3mQ
VMHF6AEyc02ztHofV331GkM/zQup3AMNireKkFaRA0jl/ObIrw5AZ1rI8nhnngdr
IWmupG6P3VAZEYoOhZS8g4qgJPRqRdSfFjw2o2W7MgipJOTTYbuLWlCzGmcedURQ
73WYJw1um+xDsRFwdiJ0JQPUL3CDZoltS975Th+hFqdtFxDAdojW6bxhHdGHZ64V
w7ryhU94KRk4LZO/MWGkfZCqqC/J7bJBbHbeeZISUwnt7oOhq15TN0c4xQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:32:21 2025 by rpki-client