Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          nJo1PinaPpybT7SBn2mnWjOzVXugJFZjs5TbrWyqHXc=
Subject key identifier:   A1:17:C7:92:86:9B:CF:6E:03:F4:A2:2A:92:A7:8E:6E:B2:DB:F1:06
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       3FCA083C204E6BC07B318E43F793AD7A5E2E2DF2
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 10 Sep 2025 15:44:20 +0000
ROA not before:           Wed 10 Sep 2025 15:39:20 +0000
ROA not after:            Wed 09 Sep 2026 15:44:20 +0000
asID:                     273920
IP address blocks:        2803:7b50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ca:08:3c:20:4e:6b:c0:7b:31:8e:43:f7:93:ad:7a:5e:2e:2d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Sep 10 15:39:20 2025 GMT
            Not After : Sep  9 15:44:20 2026 GMT
        Subject: CN=A117C792869BCF6E03F4A22A92A78E6EB2DBF106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:7d:1b:7a:61:06:88:4c:85:ea:5f:95:99:
                    7a:b1:27:03:3a:a3:71:b0:fc:59:e1:3e:85:a7:6d:
                    0e:e3:a1:b5:34:59:64:c3:08:ef:b0:6f:e8:7f:83:
                    fc:e1:05:ca:6b:f6:83:e4:bd:f3:95:b0:5e:0d:ab:
                    10:42:90:53:e1:d3:54:d4:a5:61:e2:ca:53:51:ae:
                    04:d2:c6:a1:f9:76:6d:d5:f6:3b:85:50:ef:a9:41:
                    ae:50:06:ea:a9:8e:08:56:5c:a8:c0:e4:74:0e:7c:
                    7a:8c:9e:ab:3a:72:cf:1e:25:b6:2a:b6:2c:19:00:
                    71:65:7b:96:f7:78:20:e0:2f:80:37:20:0f:6a:26:
                    5e:7e:2b:dd:53:ff:0e:c2:ba:68:51:08:b2:09:65:
                    be:d9:2a:ae:8f:b2:51:56:01:fb:5a:66:87:dc:19:
                    36:22:e3:73:f8:37:dd:b1:2e:22:5f:2b:fd:d3:4f:
                    28:cb:d7:ca:e7:26:61:15:a4:83:cc:2c:62:53:94:
                    34:84:17:6b:c0:e4:fc:7a:24:08:2a:ee:7b:02:5a:
                    bb:dc:bd:e1:d1:a1:b9:c0:4f:bc:a8:09:61:5e:89:
                    94:c4:3b:65:e3:f7:b5:fe:0d:22:9c:4f:dd:a6:d3:
                    c9:cc:ca:30:24:ea:9a:73:99:9c:ac:1e:09:35:d4:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:C7:92:86:9B:CF:6E:03:F4:A2:2A:92:A7:8E:6E:B2:DB:F1:06
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:c5:73:38:ce:0f:c2:ed:e5:fb:bd:e4:fd:24:ec:62:92:
         17:03:cd:b8:0d:aa:6a:4b:04:b4:21:2b:ce:f9:61:ed:af:c0:
         f6:cd:4c:89:35:dc:32:f6:6f:1a:62:f1:e9:d8:5f:3e:b9:19:
         a8:24:b1:9a:28:c7:e4:69:b6:ef:85:f5:05:ef:94:69:09:c8:
         0d:f5:c7:1d:d7:53:90:99:82:4c:a1:89:69:84:c9:f3:f2:3b:
         92:72:ec:08:23:21:d1:92:3b:d6:d0:a6:41:b4:e2:a5:d4:20:
         62:51:ad:e0:8d:86:f1:58:0f:a6:a1:bc:54:3e:0a:6f:55:0c:
         06:54:af:10:c0:29:e2:13:d2:80:47:71:35:7a:8d:13:76:8c:
         db:86:c5:5f:ba:40:38:6e:bd:fa:c4:75:2e:52:a3:e3:45:27:
         1e:3c:17:3e:2b:6c:78:8d:56:8e:df:66:3e:74:12:f4:92:f8:
         61:5d:9a:63:f8:1d:4a:7e:52:1e:96:8a:cd:86:16:26:43:cd:
         a2:26:6a:da:e6:2f:f4:12:6f:f9:0e:a1:b6:55:86:2e:6c:60:
         60:df:10:dd:5f:21:4f:11:8e:c9:9e:9e:e6:f0:9f:85:95:f0:
         e7:2f:80:6d:0e:30:9b:ad:18:8c:89:bd:c1:4c:70:de:73:3d:
         19:79:88:6a
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUP8oIPCBOa8B7MY5D95Otel4uLfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwNjUzMzI2ODAzNzE4REEzRkNGQUE3OTJFNzJBRkQ1
RERGMkQxRjAeFw0yNTA5MTAxNTM5MjBaFw0yNjA5MDkxNTQ0MjBaMDMxMTAvBgNV
BAMTKEExMTdDNzkyODY5QkNGNkUwM0Y0QTIyQTkyQTc4RTZFQjJEQkYxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibX0bemEGiEyF6l+VmXqxJwM6
o3Gw/FnhPoWnbQ7jobU0WWTDCO+wb+h/g/zhBcpr9oPkvfOVsF4NqxBCkFPh01TU
pWHiylNRrgTSxqH5dm3V9juFUO+pQa5QBuqpjghWXKjA5HQOfHqMnqs6cs8eJbYq
tiwZAHFle5b3eCDgL4A3IA9qJl5+K91T/w7CumhRCLIJZb7ZKq6PslFWAftaZofc
GTYi43P4N92xLiJfK/3TTyjL18rnJmEVpIPMLGJTlDSEF2vA5Px6JAgq7nsCWrvc
veHRobnAT7yoCWFeiZTEO2Xj97X+DSKcT92m08nMyjAk6ppzmZysHgk11FibAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUoRfHkoabz24D9KIqkqeObrLb8QYwHwYDVR0j
BBgwFoAUtAZTMmgDcY2j/Pqnkucq/V3fLR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQzVDN0UwREExQTBGMUJFMDM5ODlFMTA4NzExNzg4ODM0
OTkxNDMxMzUyOTA2MzFCMkVFMjU0MUM4QkYwOTBCLzAvQjQwNjUzMzI2ODAzNzE4
REEzRkNGQUE3OTJFNzJBRkQ1RERGMkQxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNDA2NTMzMjY4MDM3MThEQTNG
Q0ZBQTc5MkU3MkFGRDVEREYyRDFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUM1QzdFMERBMUEwRjFCRTAzOTg5RTEwODcxMTc4ODgzNDk5MTQzMTM1
MjkwNjMxQjJFRTI1NDFDOEJGMDkwQi8wLzMyMzgzMDMzM2EzNzYyMzUzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDe1AA
ADANBgkqhkiG9w0BAQsFAAOCAQEApx3FczjOD8Lt5fu95P0k7GKSFwPNuA2qaksE
tCErzvlh7a/A9s1MiTXcMvZvGmLx6dhfPrkZqCSxmijH5Gm274X1Be+UaQnIDfXH
HddTkJmCTKGJaYTJ8/I7knLsCCMh0ZI71tCmQbTipdQgYlGt4I2G8VgPpqG8VD4K
b1UMBlSvEMAp4hPSgEdxNXqNE3aM24bFX7pAOG69+sR1LlKj40UnHjwXPitseI1W
jt9mPnQS9JL4YV2aY/gdSn5SHpaKzYYWJkPNoiZq2uYv9BJv+Q6htlWGLmxgYN8Q
3V8hTxGOyZ6e5vCfhZXw5y+AbQ4wm60YjIm9wUxw3nM9GXmIag==
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:21:35 2025 by rpki-client