Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa
File:                     323830333a323335303a3a2f33322d3438203d3e20323733383836.roa (raw, json)
Hash identifier:          dE5w7GwUm7U/2SgRcN+NxEAXchiOpY8A4xkuyLfkVC4=
Subject key identifier:   DD:BF:53:33:18:FA:E9:5C:A7:5D:7E:8F:DE:70:7A:82:C5:4E:E5:F6
Certificate issuer:       /CN=AC842394CA1936A904B18308B26BDD9E35AB539C
Certificate serial:       2373B8518E35903AAC7619AF25C6C5A054266C21
Authority key identifier: AC:84:23:94:CA:19:36:A9:04:B1:83:08:B2:6B:DD:9E:35:AB:53:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa
Signing time:             Mon 25 Aug 2025 22:45:00 +0000
ROA not before:           Mon 25 Aug 2025 22:40:00 +0000
ROA not after:            Mon 24 Aug 2026 22:45:00 +0000
asID:                     273886
IP address blocks:        2803:2350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 11:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:73:b8:51:8e:35:90:3a:ac:76:19:af:25:c6:c5:a0:54:26:6c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC842394CA1936A904B18308B26BDD9E35AB539C
        Validity
            Not Before: Aug 25 22:40:00 2025 GMT
            Not After : Aug 24 22:45:00 2026 GMT
        Subject: CN=DDBF533318FAE95CA75D7E8FDE707A82C54EE5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:d7:5a:5b:82:07:79:0f:c0:52:28:00:e2:
                    a0:c8:15:d7:b6:59:23:0e:c7:ad:bc:b2:9f:1b:26:
                    79:6c:20:33:7c:49:97:2b:23:60:81:12:ef:6a:c8:
                    9f:7d:d9:0c:69:6a:be:28:3f:3c:a5:60:71:95:dd:
                    e2:80:9e:56:8e:f3:1c:64:cf:33:43:2a:ed:3c:5f:
                    28:48:3d:fd:ef:d3:f9:71:c2:a1:86:1b:5b:b4:a7:
                    fa:79:18:db:cc:e0:82:c9:1c:53:b2:69:b8:c5:9b:
                    da:40:a2:f0:2b:51:cf:13:be:7c:f8:00:cc:05:96:
                    c4:28:cd:a1:8a:a6:d8:d2:8e:07:ab:0c:c5:62:93:
                    4d:cc:03:99:c8:f7:6f:12:df:f3:82:12:cc:33:28:
                    8e:45:6c:c1:53:c6:81:97:36:74:95:8f:c7:f2:b6:
                    f6:c2:4a:6e:90:37:57:62:87:a2:36:7d:88:f9:c4:
                    d7:17:b7:f6:40:f6:00:10:1f:ed:93:77:c7:bf:23:
                    c3:94:54:a1:ad:22:66:67:43:24:23:60:54:b5:df:
                    7e:ab:d2:ec:80:e8:a2:f8:a7:e5:21:a1:c1:15:94:
                    39:93:b4:05:cb:4d:4f:48:28:8d:c9:8c:f2:cd:fd:
                    1f:4c:87:c9:9f:ec:30:70:4c:72:7d:52:72:3a:a0:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BF:53:33:18:FA:E9:5C:A7:5D:7E:8F:DE:70:7A:82:C5:4E:E5:F6
            X509v3 Authority Key Identifier:
                keyid:AC:84:23:94:CA:19:36:A9:04:B1:83:08:B2:6B:DD:9E:35:AB:53:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2350::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:ad:d9:e1:3d:11:81:15:dc:0a:f0:37:d3:8d:51:05:cc:
         ff:a0:5b:de:97:a1:12:3a:e5:e0:78:7e:af:e6:5b:0d:d8:ab:
         b0:d3:c0:36:80:41:c3:c8:a7:18:dd:38:83:80:06:a5:53:91:
         d3:f1:d6:b6:5c:34:70:fd:b3:18:ff:4a:4f:d0:13:27:4c:cf:
         79:0e:d8:05:41:36:36:10:9f:09:c2:e7:7c:4f:f2:06:30:ab:
         5e:f5:c1:f8:c7:20:49:54:2b:ac:91:0b:80:ab:e4:2a:24:6e:
         cb:0c:a0:67:0f:83:8c:91:ea:9d:f8:7c:5c:9e:f7:f9:53:19:
         85:29:df:80:62:94:34:80:8b:43:76:73:89:53:16:44:9d:e3:
         bb:95:22:b1:89:90:98:86:3d:a9:d0:05:ed:bb:6b:b5:23:bb:
         e7:da:1e:4d:00:9e:73:ee:1c:d8:8d:dc:c1:23:15:9f:4c:c6:
         85:fb:fb:c4:39:52:1d:8f:93:5a:3c:8c:b4:78:48:52:04:4d:
         dc:7b:39:31:9d:4e:c7:1b:17:1f:20:15:cf:6d:f2:52:a4:e6:
         3a:91:0f:d9:29:9b:ab:bf:07:8d:36:a3:eb:bf:ff:7a:51:a8:
         45:5f:53:fa:d9:60:3d:44:5b:6b:76:06:71:68:2a:8e:f8:2d:
         0a:f2:0d:79
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUI3O4UY41kDqsdhmvJcbFoFQmbCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4NDIzOTRDQTE5MzZBOTA0QjE4MzA4QjI2QkREOUUz
NUFCNTM5QzAeFw0yNTA4MjUyMjQwMDBaFw0yNjA4MjQyMjQ1MDBaMDMxMTAvBgNV
BAMTKEREQkY1MzMzMThGQUU5NUNBNzVEN0U4RkRFNzA3QTgyQzU0RUU1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgx9daW4IHeQ/AUigA4qDIFde2
WSMOx628sp8bJnlsIDN8SZcrI2CBEu9qyJ992Qxpar4oPzylYHGV3eKAnlaO8xxk
zzNDKu08XyhIPf3v0/lxwqGGG1u0p/p5GNvM4ILJHFOyabjFm9pAovArUc8Tvnz4
AMwFlsQozaGKptjSjgerDMVik03MA5nI928S3/OCEswzKI5FbMFTxoGXNnSVj8fy
tvbCSm6QN1dih6I2fYj5xNcXt/ZA9gAQH+2Td8e/I8OUVKGtImZnQyQjYFS1336r
0uyA6KL4p+UhocEVlDmTtAXLTU9IKI3JjPLN/R9Mh8mf7DBwTHJ9UnI6oLthAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU3b9TMxj66VynXX6P3nB6gsVO5fYwHwYDVR0j
BBgwFoAUrIQjlMoZNqkEsYMIsmvdnjWrU5wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BREM5QkRCODIzQkNDODY5MDdBRTIzQjU1NTUxM0Q4RUUw
QjVGNzdDNzgwN0FDMEZBNzUzMTVBMEI4QTVCNEZELzAvQUM4NDIzOTRDQTE5MzZB
OTA0QjE4MzA4QjI2QkREOUUzNUFCNTM5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzg0MjM5NENBMTkzNkE5MDRC
MTgzMDhCMjZCREQ5RTM1QUI1MzlDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQURDOUJEQjgyM0JDQzg2OTA3QUUyM0I1NTU1MTNEOEVFMEI1Rjc3Qzc4
MDdBQzBGQTc1MzE1QTBCOEE1QjRGRC8wLzMyMzgzMDMzM2EzMjMzMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM4MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDI1Aw
DQYJKoZIhvcNAQELBQADggEBACHLrdnhPRGBFdwK8DfTjVEFzP+gW96XoRI65eB4
fq/mWw3Yq7DTwDaAQcPIpxjdOIOABqVTkdPx1rZcNHD9sxj/Sk/QEydMz3kO2AVB
NjYQnwnC53xP8gYwq171wfjHIElUK6yRC4Cr5CokbssMoGcPg4yR6p34fFye9/lT
GYUp34BilDSAi0N2c4lTFkSd47uVIrGJkJiGPanQBe27a7Uju+faHk0AnnPuHNiN
3MEjFZ9MxoX7+8Q5Uh2Pk1o8jLR4SFIETdx7OTGdTscbFx8gFc9t8lKk5jqRD9kp
m6u/B402o+u//3pRqEVfU/rZYD1EW2t2BnFoKo74LQryDXk=
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:21:23 2025 by rpki-client