Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa
File:                     323830333a393463303a3a2f33322d3438203d3e203532323733.roa (raw, json)
Hash identifier:          B2V5SJZ7R8TnzoMyBA3ptT8RAmG1SIgkcGaUWiuBN3g=
Subject key identifier:   4A:3B:BA:5E:4A:95:A0:BE:8A:99:23:5A:BD:63:0D:31:A2:53:1E:F3
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       2E6F34F3E2DBFFE5369AB9780B893D44646DDF92
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa
Signing time:             Fri 24 Oct 2025 13:25:00 +0000
ROA not before:           Fri 24 Oct 2025 13:20:00 +0000
ROA not after:            Fri 23 Oct 2026 13:25:00 +0000
asID:                     52273
IP address blocks:        2803:94c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6f:34:f3:e2:db:ff:e5:36:9a:b9:78:0b:89:3d:44:64:6d:df:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Oct 24 13:20:00 2025 GMT
            Not After : Oct 23 13:25:00 2026 GMT
        Subject: CN=4A3BBA5E4A95A0BE8A99235ABD630D31A2531EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:f6:33:a6:46:76:38:85:b2:65:94:a1:2f:
                    1d:4f:b1:16:2b:6f:ea:f0:c8:8c:f3:a1:b3:f2:f4:
                    43:09:f2:45:90:33:96:52:c8:bd:6a:9d:1d:1e:19:
                    b4:1b:7a:85:d9:25:cd:0e:f0:62:b7:b1:5f:b3:67:
                    19:a4:72:f4:66:3a:c2:c4:77:34:a2:5a:dc:ad:dd:
                    a0:50:33:8a:a9:1f:7e:6f:a4:74:bb:c1:c2:69:81:
                    51:95:8c:ba:83:3f:e6:58:b1:f2:73:41:29:09:d5:
                    45:68:45:e0:cc:d9:2a:5a:c7:9a:0b:e1:fb:ce:a9:
                    9e:2f:23:2d:dd:1f:f1:ac:57:28:5b:fe:ae:18:3d:
                    12:bc:fd:8c:3d:d2:a8:18:50:37:76:e3:e2:df:a3:
                    65:15:8f:2b:e0:1c:95:3e:59:7c:ca:b5:81:b7:ef:
                    79:d0:f6:d3:56:92:03:0a:7b:b3:fc:30:aa:aa:d8:
                    e6:a3:69:e8:e1:00:cb:e8:4d:46:b0:17:e2:49:f2:
                    0e:55:a6:57:3e:99:04:52:07:5d:78:93:f9:91:96:
                    d5:bd:ca:35:ad:9e:92:bc:12:8d:d2:3b:b6:1b:7c:
                    55:dc:d1:59:ca:db:b7:2f:50:16:62:dd:53:bb:29:
                    81:c3:33:91:ee:e7:01:3c:64:88:a0:90:a7:fd:d3:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3B:BA:5E:4A:95:A0:BE:8A:99:23:5A:BD:63:0D:31:A2:53:1E:F3
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:dc:75:c4:96:0c:83:26:61:46:aa:3b:53:fb:de:3c:10:ce:
         f1:a3:18:f3:be:0a:2b:00:f0:23:6e:25:40:fd:0e:b9:21:44:
         8a:74:4e:3b:c6:03:52:89:78:6f:3c:bd:b6:ce:c2:e4:bc:81:
         31:18:45:ad:16:1c:97:b5:81:21:4c:0b:c2:6d:8f:0c:17:75:
         44:f7:0c:37:97:5a:d2:d4:d8:1f:d4:a7:c1:57:17:c9:d3:ea:
         01:af:9f:34:af:ac:5d:4c:e9:3e:7f:f7:af:dd:78:68:d3:b8:
         77:77:3d:31:17:d5:4d:40:80:88:e7:d4:c4:f6:95:7c:36:67:
         59:b6:ad:97:c5:5d:42:91:bf:18:cc:a1:e1:52:0c:e0:35:50:
         cf:58:cf:06:4f:dc:ff:c0:2b:0f:db:4e:2d:4c:b0:46:b1:e3:
         27:84:ba:2c:43:f1:e3:07:6e:7a:95:32:d9:e0:11:9b:90:32:
         c3:b9:cf:3b:ca:04:69:d4:7c:78:81:a5:e6:f0:b7:af:05:7f:
         6d:04:d0:ca:ef:73:fe:21:fd:5d:63:86:9a:53:63:4d:71:26:
         b9:94:3c:9d:8b:e2:55:fa:7c:e4:0b:fe:c4:6d:10:f8:92:6c:
         66:87:3d:a4:6e:e9:70:de:7c:65:01:06:d2:50:f4:51:5a:a9:
         20:4f:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:44:55 2025 by rpki-client