Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa
File:                     323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa (raw, json)
Hash identifier:          B4c3AnmfuWgiJvHnSLM5mlKu95UvoLLRxmjiVeQziKQ=
Subject key identifier:   23:AC:AD:22:D3:43:36:9D:40:10:E6:5A:03:E5:5E:92:14:E8:7E:CF
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       67403A93D78BC1181F0D464F6C45C7DF6988715B
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa
Signing time:             Thu 30 Oct 2025 03:10:00 +0000
ROA not before:           Thu 30 Oct 2025 03:05:00 +0000
ROA not after:            Thu 29 Oct 2026 03:10:00 +0000
asID:                     273242
IP address blocks:        2801:19:7800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 00:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:3a:93:d7:8b:c1:18:1f:0d:46:4f:6c:45:c7:df:69:88:71:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: Oct 30 03:05:00 2025 GMT
            Not After : Oct 29 03:10:00 2026 GMT
        Subject: CN=23ACAD22D343369D4010E65A03E55E9214E87ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:db:a7:34:25:af:b2:0b:aa:fc:2d:1f:99:
                    53:d7:04:7b:c5:77:4d:6b:c9:10:81:20:f3:2d:08:
                    76:bd:72:ba:d1:ee:a5:0c:48:86:aa:88:0b:7f:02:
                    04:2e:0d:5e:b5:f8:95:34:29:28:07:43:e3:27:ed:
                    17:4b:d9:d9:85:c5:9b:ff:ec:a6:c8:be:42:66:fc:
                    16:a0:de:b5:32:4b:40:a2:91:25:d1:8f:29:28:12:
                    57:54:d7:57:c9:7c:62:ec:2e:12:79:12:75:01:96:
                    58:78:7b:e0:8e:3a:79:43:4b:e8:12:c6:c0:2e:25:
                    38:01:d8:d0:4a:68:b3:13:0d:51:58:24:16:d6:e7:
                    09:c6:f3:cd:ac:a0:54:b0:66:81:a7:c1:f6:c4:e4:
                    7e:42:eb:d9:cc:eb:e2:16:8a:ca:8e:d8:09:f2:da:
                    d3:ba:f5:86:b5:9d:c3:3c:7c:36:cc:8d:d2:95:bc:
                    9b:02:42:00:80:dc:56:ab:4a:1e:76:ff:1a:52:e7:
                    5e:2d:2d:23:32:a5:8e:5d:07:83:e9:d1:f9:00:3c:
                    4c:ec:47:62:21:d3:83:12:18:81:59:49:2b:25:4a:
                    cc:e0:c1:33:06:97:b9:54:94:a7:63:31:6b:41:0c:
                    e6:64:8f:73:2d:df:60:a4:08:c0:52:d4:4a:af:7d:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:AD:22:D3:43:36:9D:40:10:E6:5A:03:E5:5E:92:14:E8:7E:CF
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:7800::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:17:ea:9d:3a:1f:92:1f:bd:3b:2d:ca:21:9e:01:7a:95:ea:
         fc:6e:e4:e7:59:36:1a:67:b9:cf:72:a7:19:57:33:65:7e:a1:
         45:8a:1e:02:0d:f7:87:0e:65:2a:4c:18:44:db:3e:b4:0a:27:
         67:70:90:9f:c3:3e:93:12:ec:55:62:a2:43:41:e9:47:3b:93:
         b8:dc:f2:5c:42:86:97:71:65:08:03:d3:df:ec:a4:30:dd:43:
         d0:e6:85:9b:ef:c3:86:7d:d5:b7:09:88:18:93:f1:18:12:65:
         fd:30:cb:3d:0f:df:44:5b:2a:aa:36:cc:92:55:4f:ce:37:dd:
         02:fd:95:87:89:69:94:0d:4f:90:0b:15:b2:96:26:cc:f1:f0:
         09:dd:6f:df:6b:c4:c7:e2:97:22:6b:33:5f:a4:fd:0c:73:4e:
         d1:50:c4:b6:97:6b:d5:10:aa:3a:13:af:52:6c:68:50:b1:ee:
         30:0f:df:33:5a:c3:25:4e:ac:b6:73:e7:e4:9d:8f:f4:0e:44:
         ae:33:2c:42:34:30:db:0a:62:57:0d:22:c6:4c:34:49:c5:2d:
         ba:fa:88:ec:dd:be:2c:24:c6:ad:59:07:88:33:cc:6f:65:85:
         15:04:11:63:db:e1:b8:02:0a:0b:fa:4c:9b:ef:4f:37:86:03:
         ed:44:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:06:33 2025 by rpki-client