Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          VBeLCrI9f5VVClNLYR+E5JCjGIetd1IXbFO0kfif+Pc=
Subject key identifier:   E6:F3:77:6C:5C:0A:57:BA:8A:8C:07:C8:58:DA:E0:6C:BB:C5:7F:3E
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       4AFC5F9F15B5D59244CA607384C616A6DABDD17E
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 05 Sep 2025 06:40:00 +0000
ROA not before:           Fri 05 Sep 2025 06:35:00 +0000
ROA not after:            Fri 04 Sep 2026 06:40:00 +0000
asID:                     265780
IP address blocks:        2803:fd40:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:5f:9f:15:b5:d5:92:44:ca:60:73:84:c6:16:a6:da:bd:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Sep  5 06:35:00 2025 GMT
            Not After : Sep  4 06:40:00 2026 GMT
        Subject: CN=E6F3776C5C0A57BA8A8C07C858DAE06CBBC57F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:b2:1a:8f:48:d3:cd:db:9d:0a:e4:2b:ea:
                    f9:f9:0b:24:5d:13:cf:2c:f4:42:74:ce:26:dd:15:
                    46:50:50:29:c9:76:7a:1c:d4:2f:32:e0:e5:d4:0d:
                    4e:fd:29:aa:7d:40:54:df:f4:12:31:14:60:56:fb:
                    3a:2a:1c:11:c3:cd:21:4e:12:95:4b:bb:77:c3:85:
                    e7:7b:35:e8:6f:99:2f:0d:ec:44:63:bc:14:0d:93:
                    ec:df:d7:61:0e:13:53:5e:50:6c:3f:ed:c4:9f:7d:
                    79:b1:f7:a8:d0:d2:c2:d5:82:66:85:ef:ae:5c:59:
                    97:78:24:9e:c3:df:87:41:fe:09:c4:37:1a:88:9e:
                    d8:d3:db:d9:54:8f:16:2e:7b:f6:59:97:28:86:41:
                    21:a4:4b:1c:e6:0d:cf:c8:d5:d2:ea:c3:7e:cf:a7:
                    47:59:55:f7:30:40:2c:fb:0e:a3:d4:82:e3:31:eb:
                    59:3a:8a:cb:5c:05:bf:3e:66:8b:bc:b9:0e:08:51:
                    28:5d:fa:d7:19:bf:ce:c9:f4:d2:39:53:ef:27:4c:
                    6a:59:41:82:9c:1b:98:9c:b1:ee:5d:20:0d:65:cf:
                    c6:ea:bc:6b:13:a1:6f:15:cf:73:2b:54:93:62:8b:
                    c2:00:56:f3:ae:23:ad:47:35:b3:90:ad:ce:50:e8:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F3:77:6C:5C:0A:57:BA:8A:8C:07:C8:58:DA:E0:6C:BB:C5:7F:3E
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:97:63:ca:27:d8:b4:23:44:48:85:32:b2:ad:4d:7c:fd:
         f0:e9:3b:cd:94:27:b5:f5:2a:41:f9:8d:bb:31:f1:ba:99:c9:
         e4:e8:1f:4a:4e:39:8d:56:4c:5f:53:c1:da:32:ea:50:61:70:
         66:98:45:89:8e:4e:79:4d:fd:01:6e:5d:2f:fe:7b:8e:19:eb:
         e3:7b:b3:eb:66:3c:6c:33:f7:cc:ea:d0:b7:78:5d:73:59:50:
         86:14:f5:0f:80:b4:53:d1:9b:30:20:e1:62:2c:d5:9d:8a:92:
         bf:39:28:f6:4a:12:6a:bd:6c:4c:70:78:6d:4b:d0:be:f6:54:
         d3:b1:2f:b2:e3:18:9a:33:7d:2c:b9:30:43:54:db:e5:ab:33:
         6b:a1:0a:78:6f:19:29:7f:f9:6a:92:3b:7c:cd:9b:54:ae:b4:
         85:3c:b0:da:a2:17:8c:29:84:1b:d8:50:82:f0:da:7c:a4:d4:
         cf:5d:9c:51:59:f3:23:97:6a:19:da:9b:06:76:0d:49:f3:55:
         f2:c1:b3:10:ce:ca:23:f1:21:02:4b:10:b1:04:99:d4:80:41:
         50:27:a3:02:6f:69:b3:53:f5:90:a3:1b:8b:5d:3d:e2:19:8d:
         db:38:32:58:e3:be:3a:f6:80:70:74:63:2f:37:9c:20:79:53:
         24:46:7e:d6
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUSvxfnxW11ZJEymBzhMYWptq90X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNTA5MDUwNjM1MDBaFw0yNjA5MDQwNjQwMDBaMDMxMTAvBgNV
BAMTKEU2RjM3NzZDNUMwQTU3QkE4QThDMDdDODU4REFFMDZDQkJDNTdGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwLIaj0jTzdudCuQr6vn5CyRd
E88s9EJ0zibdFUZQUCnJdnoc1C8y4OXUDU79Kap9QFTf9BIxFGBW+zoqHBHDzSFO
EpVLu3fDhed7NehvmS8N7ERjvBQNk+zf12EOE1NeUGw/7cSffXmx96jQ0sLVgmaF
765cWZd4JJ7D34dB/gnENxqIntjT29lUjxYue/ZZlyiGQSGkSxzmDc/I1dLqw37P
p0dZVfcwQCz7DqPUguMx61k6istcBb8+Zou8uQ4IUShd+tcZv87J9NI5U+8nTGpZ
QYKcG5icse5dIA1lz8bqvGsToW8Vz3MrVJNii8IAVvOuI61HNbOQrc5Q6P6vAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU5vN3bFwKV7qKjAfIWNrgbLvFfz4wHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMyMzgzMDMzM2E2NjY0MzQzMDNhNjEz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzUzNzM4MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUoA/1AoDANBgkqhkiG9w0BAQsFAAOCAQEATdyXY8on2LQjREiFMrKtTXz9
8Ok7zZQntfUqQfmNuzHxupnJ5OgfSk45jVZMX1PB2jLqUGFwZphFiY5OeU39AW5d
L/57jhnr43uz62Y8bDP3zOrQt3hdc1lQhhT1D4C0U9GbMCDhYizVnYqSvzko9koS
ar1sTHB4bUvQvvZU07EvsuMYmjN9LLkwQ1Tb5asza6EKeG8ZKX/5apI7fM2bVK60
hTyw2qIXjCmEG9hQgvDafKTUz12cUVnzI5dqGdqbBnYNSfNV8sGzEM7KI/EhAksQ
sQSZ1IBBUCejAm9ps1P1kKMbi1094hmN2zgyWOO+OvaAcHRjLzecIHlTJEZ+1g==
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:49:29 2025 by rpki-client