Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/323830333a646139303a3a2f33322d3332203d3e20323732383731.roa
File:                     323830333a646139303a3a2f33322d3332203d3e20323732383731.roa (raw, json)
Hash identifier:          BwqMgpoffRS8Lf7B/gdsMy8EqEkDNhXQ4k/UxNJi/GQ=
Subject key identifier:   B9:85:DA:4D:1E:BA:07:60:D9:54:AE:1C:53:ED:4F:C5:9A:CF:4D:D5
Certificate issuer:       /CN=EC46C089D2308DED607F1405A1F7AD7A94C4B41A
Certificate serial:       142754296A8EC03405AE9EB7024B403E77714BDE
Authority key identifier: EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/323830333a646139303a3a2f33322d3332203d3e20323732383731.roa
Signing time:             Wed 17 Sep 2025 16:47:05 +0000
ROA not before:           Wed 17 Sep 2025 16:42:05 +0000
ROA not after:            Wed 16 Sep 2026 16:47:05 +0000
asID:                     272871
IP address blocks:        2803:da90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 16:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:54:29:6a:8e:c0:34:05:ae:9e:b7:02:4b:40:3e:77:71:4b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC46C089D2308DED607F1405A1F7AD7A94C4B41A
        Validity
            Not Before: Sep 17 16:42:05 2025 GMT
            Not After : Sep 16 16:47:05 2026 GMT
        Subject: CN=B985DA4D1EBA0760D954AE1C53ED4FC59ACF4DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:00:79:e5:d4:e1:df:34:ff:d3:bb:51:4e:
                    55:62:35:f1:c6:ad:6b:ee:68:de:06:79:56:55:ed:
                    8b:f0:16:4f:fc:46:de:91:c1:a3:ab:a7:03:b4:a6:
                    05:29:f5:9d:b2:fa:6d:f9:7a:0b:8a:81:41:4f:1b:
                    d8:a1:80:a6:1d:f1:e6:d1:45:0c:2a:de:b6:69:19:
                    64:67:7c:f0:05:19:60:f0:19:c5:db:88:f3:d3:73:
                    4d:4e:b8:5a:6c:c9:6e:2c:1b:55:b2:ef:82:68:a1:
                    31:15:a7:e8:4e:a9:a2:78:d4:88:9c:a0:33:fb:54:
                    41:1d:e7:49:c3:27:d9:a8:b5:b1:de:a6:f0:36:51:
                    8c:f1:65:47:88:e3:99:61:20:3d:84:39:0b:73:63:
                    e1:e4:04:24:da:f8:33:19:5b:22:d9:16:5f:4d:56:
                    6d:fb:7e:c6:20:8a:d0:ff:f5:d8:26:04:17:b3:d5:
                    15:08:87:8b:ac:17:f8:d5:d2:66:99:58:0e:cc:89:
                    64:de:e2:bd:e9:79:50:c2:22:48:0a:5a:76:86:81:
                    97:6f:55:8d:79:c9:b3:8e:f6:67:3d:00:9a:90:10:
                    b0:39:f7:62:a6:88:4c:06:03:5f:4f:2e:7b:2b:ea:
                    4a:48:98:ea:a7:07:09:a5:f5:84:5b:86:a5:40:22:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:DA:4D:1E:BA:07:60:D9:54:AE:1C:53:ED:4F:C5:9A:CF:4D:D5
            X509v3 Authority Key Identifier:
                keyid:EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/323830333a646139303a3a2f33322d3332203d3e20323732383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da90::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:de:34:12:6e:48:b3:60:25:10:db:9a:71:2c:31:bf:9c:1c:
         eb:56:e6:10:e9:14:e3:31:15:14:52:d6:e4:6d:ca:61:37:e7:
         c1:7a:fd:2b:46:74:ff:9c:46:3b:24:7e:77:6c:10:f0:84:63:
         68:a7:7b:c2:96:2e:39:67:0f:08:e9:33:b3:d0:a8:e1:d6:1f:
         72:e0:b3:9e:47:94:d9:ae:be:fa:4f:06:67:89:ac:4e:51:43:
         12:66:90:16:1b:49:2b:83:3e:c0:a7:10:6f:a6:0e:6d:34:e2:
         5c:b3:9e:bb:00:97:68:dd:7a:cf:f7:19:73:15:b5:61:41:fc:
         3c:4e:dd:ef:8d:d1:ea:b4:1b:7f:ef:a1:d0:0e:66:48:74:84:
         00:1c:29:a1:5c:7e:47:6f:4f:f4:49:94:45:25:7a:a3:6b:98:
         26:a4:62:b9:0d:e2:a6:cd:1d:f8:62:04:87:3c:19:3f:11:62:
         de:b1:59:17:24:1d:58:92:31:e4:80:29:d4:65:6a:e6:7b:cf:
         f7:34:80:93:12:63:6b:9a:ef:22:80:88:d1:86:c9:6e:ae:e2:
         ef:5d:c4:67:57:5f:9c:a7:6f:bb:75:16:0c:75:9b:d5:b2:9d:
         0e:da:83:92:21:66:6a:74:cf:17:22:03:cb:12:5e:fa:e5:f8:
         45:99:19:8a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFCdUKWqOwDQFrp63AktAPndxS94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0NkMwODlEMjMwOERFRDYwN0YxNDA1QTFGN0FEN0E5
NEM0QjQxQTAeFw0yNTA5MTcxNjQyMDVaFw0yNjA5MTYxNjQ3MDVaMDMxMTAvBgNV
BAMTKEI5ODVEQTREMUVCQTA3NjBEOTU0QUUxQzUzRUQ0RkM1OUFDRjRERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJgB55dTh3zT/07tRTlViNfHG
rWvuaN4GeVZV7YvwFk/8Rt6RwaOrpwO0pgUp9Z2y+m35eguKgUFPG9ihgKYd8ebR
RQwq3rZpGWRnfPAFGWDwGcXbiPPTc01OuFpsyW4sG1Wy74JooTEVp+hOqaJ41Iic
oDP7VEEd50nDJ9motbHepvA2UYzxZUeI45lhID2EOQtzY+HkBCTa+DMZWyLZFl9N
Vm37fsYgitD/9dgmBBez1RUIh4usF/jV0maZWA7MiWTe4r3peVDCIkgKWnaGgZdv
VY15ybOO9mc9AJqQELA592KmiEwGA19PLnsr6kpImOqnBwml9YRbhqVAIvtVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuYXaTR66B2DZVK4cU+1PxZrPTdUwHwYDVR0j
BBgwFoAU7EbAidIwje1gfxQFofetepTEtBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENENBRjkwNzRFMzhBRDYzMjcwQzRGNzdGOEM0RkFEQkM0
MkRBRDRGNkFGOTBBNEU5QzE5RUZBQ0I4QTg3RERBLzAvRUM0NkMwODlEMjMwOERF
RDYwN0YxNDA1QTFGN0FEN0E5NEM0QjQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzQ2QzA4OUQyMzA4REVENjA3
RjE0MDVBMUY3QUQ3QTk0QzRCNDFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRDQUY5MDc0RTM4QUQ2MzI3MEM0Rjc3RjhDNEZBREJDNDJEQUQ0RjZB
RjkwQTRFOUMxOUVGQUNCOEE4N0REQS8wLzMyMzgzMDMzM2E2NDYxMzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjM4MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD2pAw
DQYJKoZIhvcNAQELBQADggEBABXeNBJuSLNgJRDbmnEsMb+cHOtW5hDpFOMxFRRS
1uRtymE358F6/StGdP+cRjskfndsEPCEY2ine8KWLjlnDwjpM7PQqOHWH3Lgs55H
lNmuvvpPBmeJrE5RQxJmkBYbSSuDPsCnEG+mDm004lyznrsAl2jdes/3GXMVtWFB
/DxO3e+N0eq0G3/vodAOZkh0hAAcKaFcfkdvT/RJlEUleqNrmCakYrkN4qbNHfhi
BIc8GT8RYt6xWRckHViSMeSAKdRlauZ7z/c0gJMSY2ua7yKAiNGGyW6u4u9dxGdX
X5ynb7t1Fgx1m9WynQ7ag5IhZmp0zxciA8sSXvrl+EWZGYo=
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:41:33 2025 by rpki-client