Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/323830333a316364303a3a2f33322d3430203d3e20323734303331.roa
File:                     323830333a316364303a3a2f33322d3430203d3e20323734303331.roa (raw, json)
Hash identifier:          arH5UwOelRHY98HWivduvwfXB+eXSoOYm4Z7xlgro6k=
Subject key identifier:   5B:01:9C:4D:50:82:8E:50:45:6B:A2:43:F6:33:46:86:65:9D:DF:57
Certificate issuer:       /CN=EC26A95A8D493E8519177437FA89CC286F0FAEE6
Certificate serial:       10125B68D6753799BFD5ED51F39968EC188BC145
Authority key identifier: EC:26:A9:5A:8D:49:3E:85:19:17:74:37:FA:89:CC:28:6F:0F:AE:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/323830333a316364303a3a2f33322d3430203d3e20323734303331.roa
Signing time:             Wed 13 Aug 2025 23:50:00 +0000
ROA not before:           Wed 13 Aug 2025 23:45:00 +0000
ROA not after:            Wed 12 Aug 2026 23:50:00 +0000
asID:                     274031
IP address blocks:        2803:1cd0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:5b:68:d6:75:37:99:bf:d5:ed:51:f3:99:68:ec:18:8b:c1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC26A95A8D493E8519177437FA89CC286F0FAEE6
        Validity
            Not Before: Aug 13 23:45:00 2025 GMT
            Not After : Aug 12 23:50:00 2026 GMT
        Subject: CN=5B019C4D50828E50456BA243F6334686659DDF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:93:e2:93:0b:51:f6:88:1e:1d:7a:8d:54:
                    b9:be:93:9d:9e:3c:14:2c:3c:ed:77:ce:06:f6:dd:
                    30:7b:a3:3c:bf:c3:6d:74:cc:98:72:74:79:03:0f:
                    02:f6:67:25:67:49:ce:4f:3b:89:65:28:ff:5b:93:
                    a9:f7:15:58:3c:c1:e8:76:60:d6:04:71:e7:58:76:
                    12:c1:6e:bf:bf:48:40:88:40:0b:05:ec:ea:10:65:
                    c4:7c:c0:58:fc:2f:82:fa:9e:38:bf:3f:54:6a:15:
                    74:33:64:68:53:21:89:ab:85:b7:e0:22:30:92:ba:
                    32:36:01:92:d7:70:8c:bd:19:f3:7a:67:c3:50:90:
                    66:76:40:68:9d:a8:cb:15:d3:90:e0:ad:07:b5:63:
                    eb:1f:f9:45:3f:0e:86:e1:74:43:25:fa:4b:37:44:
                    f5:dd:04:85:ee:dc:67:3c:eb:19:85:7c:37:b6:c2:
                    10:1c:e0:88:a2:56:50:b9:7b:0b:b7:c5:e4:99:18:
                    49:3e:93:74:9b:0c:af:06:74:b6:f4:14:29:75:0d:
                    f5:c9:71:e8:d0:d3:ee:5d:90:c2:90:c6:7f:79:50:
                    48:b3:d8:74:9d:9c:7b:e7:8e:c2:47:46:40:93:93:
                    26:92:9d:3d:34:67:e7:7a:76:7d:9e:91:bb:fb:7c:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:9C:4D:50:82:8E:50:45:6B:A2:43:F6:33:46:86:65:9D:DF:57
            X509v3 Authority Key Identifier:
                keyid:EC:26:A9:5A:8D:49:3E:85:19:17:74:37:FA:89:CC:28:6F:0F:AE:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/323830333a316364303a3a2f33322d3430203d3e20323734303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:59:10:63:ba:32:60:25:38:a0:10:08:ba:1c:37:45:e1:
         6f:e9:38:db:ca:e4:84:c9:4e:b5:a4:f7:df:fb:26:5e:db:4d:
         91:0f:ed:df:95:6f:8b:6b:07:04:b1:0e:2c:bb:b4:38:88:af:
         87:a3:6f:ad:ca:35:28:08:d2:6c:c0:22:f8:99:9e:9f:ed:2c:
         88:75:e8:27:ba:8c:99:82:63:e1:97:19:4f:91:eb:aa:4a:3f:
         ea:2a:0c:63:fc:10:f1:0f:98:93:8c:54:53:7e:d1:3d:65:96:
         d6:e0:e9:b0:00:b4:8f:e8:d1:d7:5c:57:25:a7:95:64:d9:89:
         d2:6f:df:34:8b:19:94:ba:cd:d3:50:3a:30:c9:8d:39:c8:07:
         f6:a6:41:07:cc:1f:e3:86:d5:fc:d1:76:2d:c2:e0:73:75:b4:
         ec:8f:a2:d7:71:ce:ef:6e:c3:64:57:a2:c8:79:f3:a0:ad:5a:
         f0:b2:91:3a:09:1a:9c:7a:45:c7:1f:94:7b:04:95:d1:16:ac:
         70:dc:6e:ac:75:b5:92:9c:49:48:86:bd:f9:10:b7:65:4b:a1:
         a5:07:df:93:d5:aa:b9:c5:da:7e:02:34:66:a0:5f:89:09:8d:
         d6:8a:03:f9:40:f5:17:15:ee:49:67:6b:38:46:8d:7f:84:6c:
         c7:42:94:ba
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEBJbaNZ1N5m/1e1R85lo7BiLwUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyNkE5NUE4RDQ5M0U4NTE5MTc3NDM3RkE4OUNDMjg2
RjBGQUVFNjAeFw0yNTA4MTMyMzQ1MDBaFw0yNjA4MTIyMzUwMDBaMDMxMTAvBgNV
BAMTKDVCMDE5QzRENTA4MjhFNTA0NTZCQTI0M0Y2MzM0Njg2NjU5RERGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+5PikwtR9ogeHXqNVLm+k52e
PBQsPO13zgb23TB7ozy/w210zJhydHkDDwL2ZyVnSc5PO4llKP9bk6n3FVg8weh2
YNYEcedYdhLBbr+/SECIQAsF7OoQZcR8wFj8L4L6nji/P1RqFXQzZGhTIYmrhbfg
IjCSujI2AZLXcIy9GfN6Z8NQkGZ2QGidqMsV05DgrQe1Y+sf+UU/DobhdEMl+ks3
RPXdBIXu3Gc86xmFfDe2whAc4IiiVlC5ewu3xeSZGEk+k3SbDK8GdLb0FCl1DfXJ
cejQ0+5dkMKQxn95UEiz2HSdnHvnjsJHRkCTkyaSnT00Z+d6dn2ekbv7fKjZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWwGcTVCCjlBFa6JD9jNGhmWd31cwHwYDVR0j
BBgwFoAU7CapWo1JPoUZF3Q3+onMKG8PruYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzA4MUI5RTQ3REI1NzVDMzhBMUM4MzhEMjY3MkJCNjAz
QTAwOTdGQTczMDQyMUYzMzJCQTQ3RUYyMDU1QzVFLzAvRUMyNkE5NUE4RDQ5M0U4
NTE5MTc3NDM3RkE4OUNDMjg2RjBGQUVFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzI2QTk1QThENDkzRTg1MTkx
Nzc0MzdGQTg5Q0MyODZGMEZBRUU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTcwODFCOUU0N0RCNTc1QzM4QTFDODM4RDI2NzJCQjYwM0EwMDk3RkE3
MzA0MjFGMzMyQkE0N0VGMjA1NUM1RS8wLzMyMzgzMDMzM2EzMTYzNjQzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzczNDMwMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHNAw
DQYJKoZIhvcNAQELBQADggEBAE0JWRBjujJgJTigEAi6HDdF4W/pONvK5ITJTrWk
99/7Jl7bTZEP7d+Vb4trBwSxDiy7tDiIr4ejb63KNSgI0mzAIviZnp/tLIh16Ce6
jJmCY+GXGU+R66pKP+oqDGP8EPEPmJOMVFN+0T1lltbg6bAAtI/o0ddcVyWnlWTZ
idJv3zSLGZS6zdNQOjDJjTnIB/amQQfMH+OG1fzRdi3C4HN1tOyPotdxzu9uw2RX
osh586CtWvCykToJGpx6RccflHsEldEWrHDcbqx1tZKcSUiGvfkQt2VLoaUH35PV
qrnF2n4CNGagX4kJjdaKA/lA9RcV7klnazhGjX+EbMdClLo=
-----END CERTIFICATE-----
Generated at Thu Aug 21 01:59:55 2025 by rpki-client