Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa
File:                     323830333a316265303a3a2f33322d3332203d3e20323733303635.roa (raw, json)
Hash identifier:          EDnsk6Pe6w45gt7fELta4L5+EE/w3uMbDtLtTK8jGe8=
Subject key identifier:   CF:CC:B9:04:8C:67:0E:8D:5D:9C:5C:7E:29:C4:62:33:CA:1E:8F:AC
Certificate issuer:       /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial:       12DA02F3563ECF0ADCEF19BBFBC2371AB2618946
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa
Signing time:             Tue 28 Oct 2025 11:51:13 +0000
ROA not before:           Tue 28 Oct 2025 11:46:13 +0000
ROA not after:            Tue 27 Oct 2026 11:51:13 +0000
asID:                     273065
IP address blocks:        2803:1be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:da:02:f3:56:3e:cf:0a:dc:ef:19:bb:fb:c2:37:1a:b2:61:89:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
        Validity
            Not Before: Oct 28 11:46:13 2025 GMT
            Not After : Oct 27 11:51:13 2026 GMT
        Subject: CN=CFCCB9048C670E8D5D9C5C7E29C46233CA1E8FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:c1:c8:02:3a:0e:f0:ed:ad:46:6d:b9:28:
                    4f:68:1e:7c:d7:77:fc:27:3f:56:d2:8c:66:0f:99:
                    f5:64:c3:1a:28:cf:91:11:2f:75:21:0a:49:d8:26:
                    6f:8a:87:bc:9d:8c:c0:38:35:0d:1b:a1:6b:f8:1e:
                    b0:be:79:34:88:26:b1:fe:5e:86:f4:e7:e2:c1:ed:
                    a4:48:2a:ef:0a:ea:bf:a6:ee:66:c4:8c:0c:f4:59:
                    0b:16:59:b4:bb:28:a2:14:22:d1:9a:26:7b:9a:2e:
                    19:70:b3:bc:ce:10:52:a0:e5:62:e3:59:63:fb:2d:
                    37:23:a9:e0:c4:19:7c:3e:8b:20:2b:b2:89:65:2b:
                    fe:81:b7:25:fe:c9:e4:fb:d8:6d:22:c3:93:96:d8:
                    62:08:91:e0:d8:d2:de:a3:55:98:54:e1:71:9e:a5:
                    71:10:4f:cc:a9:7d:a0:a7:c1:4a:d8:9c:40:e3:ad:
                    3f:16:c6:1f:60:17:68:65:1b:5e:a3:15:40:62:07:
                    b2:e4:6a:cb:54:bc:44:56:14:c0:6b:cf:65:98:8a:
                    21:ef:ae:8c:5a:2e:d9:26:1d:73:1b:70:61:1d:76:
                    1f:46:8e:2f:c5:ef:6e:54:29:91:ce:13:2f:a1:73:
                    6c:59:da:00:20:f8:13:9d:95:2a:5f:1c:a5:a0:a7:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:B9:04:8C:67:0E:8D:5D:9C:5C:7E:29:C4:62:33:CA:1E:8F:AC
            X509v3 Authority Key Identifier:
                keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:0b:a0:96:f4:e8:37:c4:56:d3:61:a2:ef:b8:a5:4c:9a:
         e4:0a:43:a4:07:ae:83:98:a4:b1:20:ec:d5:ee:74:6a:21:0c:
         4e:9a:f1:07:30:18:7b:f9:77:e7:0c:67:42:92:8c:4c:66:b3:
         69:4b:bf:d4:f6:6a:f2:1c:fa:45:e4:1d:36:f3:45:b8:59:ff:
         3a:86:78:60:4c:11:04:5d:9c:80:a3:53:5f:cd:89:68:4a:5b:
         f1:66:f1:46:5d:d0:3e:c7:60:96:c6:8d:ff:1b:e5:83:83:41:
         ac:48:a5:f3:95:fa:65:d0:07:79:fa:df:1c:44:92:60:2a:11:
         e1:9e:9f:66:8c:0f:a0:28:f8:a5:25:6b:b8:8b:e7:96:70:c2:
         1b:79:31:ce:86:f1:e3:0f:d1:a8:d8:61:98:61:b9:06:53:c8:
         22:26:26:aa:bd:61:08:71:bf:a1:59:65:83:fa:d9:15:e1:e1:
         e1:54:fe:80:52:5f:8a:ad:f4:a4:36:28:db:71:56:6e:95:2d:
         d3:fc:0c:c4:bf:c6:98:21:91:a4:cc:34:f3:73:c0:ce:23:63:
         df:9c:0e:6f:0c:f4:0f:53:61:a6:a6:72:62:47:ed:be:30:bc:
         92:33:2b:10:1d:78:29:c2:9a:38:a2:03:8b:a7:0f:e2:d7:f6:
         db:17:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:50 2025 by rpki-client