Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a633030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a633030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          vNwIZ/yafVpKP22Ow05KBbc1/jSSsv4XdDkb/YVgIzg=
Subject key identifier:   87:6B:63:2A:AC:AF:72:D8:63:F2:59:6A:9B:5E:C3:94:35:95:0C:BF
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       31C7CE12CFC49630211D1D51E43A0E3E17F62B8F
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a633030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 05 Sep 2025 06:40:00 +0000
ROA not before:           Fri 05 Sep 2025 06:35:00 +0000
ROA not after:            Fri 04 Sep 2026 06:40:00 +0000
asID:                     265780
IP address blocks:        2803:fd40:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:ce:12:cf:c4:96:30:21:1d:1d:51:e4:3a:0e:3e:17:f6:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Sep  5 06:35:00 2025 GMT
            Not After : Sep  4 06:40:00 2026 GMT
        Subject: CN=876B632AACAF72D863F2596A9B5EC39435950CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:39:8c:b3:b1:ad:7f:87:50:2d:e3:1c:cb:
                    d6:1a:f1:6c:57:8b:ac:bc:99:0f:8f:d7:bd:5e:6b:
                    36:6d:8c:d6:b0:36:71:b4:b2:5c:89:e5:85:d7:de:
                    a5:6b:2b:59:4d:4c:8c:1e:5e:9c:ac:4d:85:3b:c8:
                    c1:69:e1:ff:cf:09:c3:03:52:bc:0e:8e:83:1e:1b:
                    21:7d:3a:42:0b:5d:d7:88:02:8d:da:45:7b:e4:33:
                    38:c8:2f:0f:0c:07:13:7a:56:f6:b9:51:8b:aa:3b:
                    0c:41:23:7b:ca:fc:1d:0e:30:6f:a1:69:28:bf:79:
                    10:61:dc:17:03:2a:fb:be:07:52:da:b6:ca:4c:78:
                    8e:e3:ba:3b:7f:03:2d:f6:24:08:8c:ca:9b:b4:8d:
                    a5:95:8e:a6:49:14:ad:9f:d9:a7:8a:05:12:4e:81:
                    70:7d:8f:81:fd:d6:48:5a:f3:50:b2:c3:81:41:0a:
                    b8:70:e0:ff:6f:49:60:07:70:8c:81:70:2c:6d:a7:
                    66:e5:67:a8:fd:1b:24:7e:5d:f9:64:18:86:b4:9c:
                    c0:be:84:e0:5c:b7:81:03:f6:66:3f:d6:46:8d:03:
                    f3:88:73:61:7b:d6:ef:1d:71:57:dc:c3:cf:e7:91:
                    2f:c8:91:b3:ef:36:17:86:67:93:db:6a:f2:82:9f:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:63:2A:AC:AF:72:D8:63:F2:59:6A:9B:5E:C3:94:35:95:0C:BF
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a633030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:12:5f:4e:e3:8e:e6:93:89:74:de:16:f8:31:33:1b:a4:a1:
         70:85:d9:6e:e5:53:4c:05:82:34:83:92:b1:45:6f:f8:a1:f3:
         34:33:4a:c8:1b:6b:32:7d:88:69:43:4a:52:0e:f8:5a:b1:3a:
         42:6f:f4:a2:ed:4a:1e:b3:1a:74:fc:46:fb:24:ad:b3:2a:9b:
         64:69:14:66:6d:8b:e6:b9:4c:a5:01:01:75:a2:a1:bc:d5:74:
         8f:3f:48:ce:93:a7:7d:de:50:b8:9c:5c:09:80:ad:f1:e1:85:
         8b:c8:c2:0e:6f:ba:28:7c:67:47:cf:de:06:fd:e1:e5:37:87:
         7c:43:a4:f0:21:62:eb:be:76:56:a9:9d:30:e2:d8:07:be:b4:
         ae:62:f4:b1:e0:c1:11:79:de:7f:2f:81:2d:be:0a:a2:0c:de:
         cc:80:8f:35:9e:f2:97:44:24:41:c0:f2:8b:ac:c8:8e:92:32:
         e4:0b:d0:2a:bf:ab:8c:8b:d3:35:3b:14:e4:31:c9:1a:97:4a:
         9e:93:56:9c:12:ba:2a:f9:bf:97:93:47:49:d5:a0:e0:d1:f9:
         70:a8:b4:5a:2e:61:67:76:57:4e:0b:eb:12:7e:ea:db:0c:8f:
         85:ad:d7:28:9e:64:cf:0e:f2:4a:dd:ca:df:91:01:13:ca:60:
         21:73:d8:50
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUMcfOEs/EljAhHR1R5DoOPhf2K48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNTA5MDUwNjM1MDBaFw0yNjA5MDQwNjQwMDBaMDMxMTAvBgNV
BAMTKDg3NkI2MzJBQUNBRjcyRDg2M0YyNTk2QTlCNUVDMzk0MzU5NTBDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sDmMs7Gtf4dQLeMcy9Ya8WxX
i6y8mQ+P171eazZtjNawNnG0slyJ5YXX3qVrK1lNTIweXpysTYU7yMFp4f/PCcMD
UrwOjoMeGyF9OkILXdeIAo3aRXvkMzjILw8MBxN6Vva5UYuqOwxBI3vK/B0OMG+h
aSi/eRBh3BcDKvu+B1LatspMeI7jujt/Ay32JAiMypu0jaWVjqZJFK2f2aeKBRJO
gXB9j4H91kha81Cyw4FBCrhw4P9vSWAHcIyBcCxtp2blZ6j9GyR+XflkGIa0nMC+
hOBct4ED9mY/1kaNA/OIc2F71u8dcVfcw8/nkS/IkbPvNheGZ5PbavKCnyCfAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUh2tjKqyvcthj8llqm17DlDWVDL8wHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMyMzgzMDMzM2E2NjY0MzQzMDNhNjMz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzUzNzM4MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUoA/1AwDANBgkqhkiG9w0BAQsFAAOCAQEAIxJfTuOO5pOJdN4W+DEzG6Sh
cIXZbuVTTAWCNIOSsUVv+KHzNDNKyBtrMn2IaUNKUg74WrE6Qm/0ou1KHrMadPxG
+yStsyqbZGkUZm2L5rlMpQEBdaKhvNV0jz9IzpOnfd5QuJxcCYCt8eGFi8jCDm+6
KHxnR8/eBv3h5TeHfEOk8CFi6752VqmdMOLYB760rmL0seDBEXnefy+BLb4Kogze
zICPNZ7yl0QkQcDyi6zIjpIy5AvQKr+rjIvTNTsU5DHJGpdKnpNWnBK6Kvm/l5NH
SdWg4NH5cKi0Wi5hZ3ZXTgvrEn7q2wyPha3XKJ5kzw7ySt3K35EBE8pgIXPYUA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:49:36 2025 by rpki-client