Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a653630303a3a2f33322d3536203d3e203138383039.roa
File:                     323830333a653630303a3a2f33322d3536203d3e203138383039.roa (raw, json)
Hash identifier:          NcoTJZ9ts7Ok8XFbSZ5W7OmmQLyd/VV6E2Aez5FKp04=
Subject key identifier:   92:E6:4F:9D:67:F1:B7:83:89:0B:B2:EB:82:EA:44:5A:9C:0F:D6:C0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       524044CD57B04E762CE012F2DA7ED7A5445C333D
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a653630303a3a2f33322d3536203d3e203138383039.roa
Signing time:             Fri 24 Oct 2025 14:35:11 +0000
ROA not before:           Fri 24 Oct 2025 14:30:11 +0000
ROA not after:            Fri 23 Oct 2026 14:35:11 +0000
asID:                     18809
IP address blocks:        2803:e600::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Nov 2025 18:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:40:44:cd:57:b0:4e:76:2c:e0:12:f2:da:7e:d7:a5:44:5c:33:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:11 2025 GMT
            Not After : Oct 23 14:35:11 2026 GMT
        Subject: CN=92E64F9D67F1B783890BB2EB82EA445A9C0FD6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:6b:d3:63:0d:81:22:b6:12:e4:fe:b5:4e:
                    86:1c:7b:46:c5:49:9f:84:a9:0c:73:a7:e4:fb:e1:
                    af:fe:32:2d:34:bb:8a:35:b1:f8:c3:b4:38:61:8b:
                    96:07:a8:4d:6d:c4:05:29:e4:e0:e4:56:9d:38:c4:
                    9c:c2:d9:f1:97:62:95:06:42:fd:1f:50:f4:7e:a1:
                    e0:93:9b:48:8b:95:6a:1e:e7:a5:38:b0:24:38:42:
                    1c:d2:03:84:01:e2:db:5c:bf:76:2e:23:a6:2d:45:
                    d9:bf:6b:18:f4:11:71:97:37:97:72:68:0f:9f:b2:
                    6b:8a:07:cd:aa:e3:16:a6:01:63:d3:d1:e3:36:d5:
                    01:6e:df:c8:65:e7:2e:60:f1:bf:0e:dd:60:77:85:
                    31:77:34:dc:87:f6:95:c2:9a:3d:d3:94:e2:59:8f:
                    35:3c:64:f9:2e:5c:0c:5f:5a:2e:9c:4e:85:47:1e:
                    ce:dd:58:b0:ca:32:bd:91:99:06:b7:95:41:22:32:
                    53:22:1f:a5:ef:da:6a:a4:68:07:d3:49:28:89:82:
                    6e:79:11:5a:5e:ac:e9:19:6f:cd:9f:62:68:d4:40:
                    fd:98:ef:d7:87:29:bc:8e:90:a9:dd:1d:c8:ea:92:
                    ac:f7:8d:1c:9b:bd:97:3a:ea:4b:82:99:1e:09:46:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:4F:9D:67:F1:B7:83:89:0B:B2:EB:82:EA:44:5A:9C:0F:D6:C0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a653630303a3a2f33322d3536203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e600::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:17:e0:48:ed:4a:39:97:77:c3:36:a3:f1:5c:a5:85:f2:3e:
         81:a0:34:f8:e5:2b:3c:a3:b8:81:e2:65:5c:90:a2:5d:d6:dd:
         d3:15:39:46:bd:79:96:e8:41:c8:28:93:01:dc:5e:ea:14:cd:
         a8:c5:37:37:c1:85:27:17:52:05:a5:39:43:a8:ba:80:3c:78:
         74:0d:3c:25:8b:79:45:f7:6f:ec:92:68:6f:90:b1:5c:51:f7:
         76:f2:3e:7a:23:75:80:cd:38:b5:18:e4:69:a2:2a:03:6c:2a:
         a5:40:c5:c7:66:17:d6:b1:d9:5a:a6:01:70:b4:d6:76:d5:3d:
         28:af:ad:04:3f:87:81:a8:34:99:7c:80:71:68:61:28:9b:b6:
         3e:43:b3:f1:09:20:10:17:ec:84:dd:a0:07:d5:9f:c8:ca:84:
         2a:c6:0c:f6:a6:a0:1c:9b:4b:97:5f:57:4f:66:a9:d7:37:2c:
         be:95:57:32:63:3d:95:bc:22:20:af:c0:d7:92:19:99:a3:48:
         47:9c:79:d9:b7:2e:97:d1:29:6d:f4:98:d1:46:6a:af:dc:27:
         10:11:68:02:84:a5:62:35:65:7c:6b:63:11:b0:7d:fa:c0:5e:
         fb:4d:8f:e6:5a:a9:fc:36:81:ca:98:12:16:86:e8:bd:ba:19:
         8c:2a:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:02:46 2025 by rpki-client