Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a313530303a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a313530303a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          DsbKNK4WPjYt5ZvTtCdpaCfxCyDLWo0ALy78PWQose8=
Subject key identifier:   BE:41:DE:4A:4A:E8:25:22:23:93:3C:A2:20:C1:E7:DA:D4:16:08:3F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       05AC991A50EE64EEDCD1202BF05F7F1E0C02A48A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a313530303a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 31 Jul 2025 13:35:00 +0000
ROA not before:           Thu 31 Jul 2025 13:30:00 +0000
ROA not after:            Thu 30 Jul 2026 13:35:00 +0000
asID:                     18678
IP address blocks:        2800:310:1500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ac:99:1a:50:ee:64:ee:dc:d1:20:2b:f0:5f:7f:1e:0c:02:a4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jul 31 13:30:00 2025 GMT
            Not After : Jul 30 13:35:00 2026 GMT
        Subject: CN=BE41DE4A4AE8252223933CA220C1E7DAD416083F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:93:e6:28:ab:13:8b:d6:0d:88:87:14:19:
                    81:f0:79:9e:df:84:5a:fe:f2:3a:04:42:17:2b:09:
                    21:28:72:de:58:c1:72:2b:c0:ce:09:ea:30:0a:4b:
                    d7:ad:d4:16:6c:bc:dd:8a:00:54:f5:8d:69:c2:5f:
                    cc:f3:6b:0b:a9:15:bf:7c:72:54:ba:f3:66:f9:09:
                    33:0f:94:aa:f0:8a:97:9f:84:5b:c1:cd:06:0a:ff:
                    07:b6:7c:a7:15:f2:bc:ac:06:aa:d7:3c:00:b8:e0:
                    03:d5:b0:b7:4a:29:52:0a:8c:a4:be:a9:11:7a:5a:
                    96:25:da:a9:fd:f0:88:a8:a9:61:79:81:3a:12:72:
                    0e:c6:6e:2a:39:10:93:31:e1:bd:ba:8d:b2:d5:2a:
                    ff:e3:56:51:fb:49:46:80:b7:06:a0:35:ca:af:ce:
                    0a:f7:e5:3f:7e:9c:bf:29:af:be:04:d7:2d:4b:e2:
                    14:a5:d1:d2:b7:47:c4:33:fc:15:8b:af:d5:7e:ac:
                    58:93:0c:85:23:61:83:3a:b0:c1:cb:1a:28:56:27:
                    43:2b:58:d1:79:e2:5b:7b:0f:b0:68:28:69:6f:dc:
                    b3:e4:15:53:4c:41:97:c3:6c:f8:21:d3:1c:21:ae:
                    5f:4e:14:9e:52:3d:80:fb:79:7f:2f:fe:0f:ab:6d:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:DE:4A:4A:E8:25:22:23:93:3C:A2:20:C1:E7:DA:D4:16:08:3F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a313530303a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:25:4f:20:be:cc:b9:44:68:72:54:78:14:c0:db:d2:57:c9:
         69:0a:d3:fb:2d:55:b9:74:d2:fa:8f:da:01:40:16:89:8d:18:
         0d:c7:be:8d:9e:03:0d:a4:8e:c6:c5:05:ab:cf:09:3b:0a:e6:
         c2:e1:d7:61:f0:c0:b1:84:8b:0f:3a:5f:c6:fe:98:f7:04:d8:
         dc:55:31:29:4c:0c:46:cc:4c:0b:a3:76:5a:5c:e0:5e:ab:73:
         21:4a:6a:e0:d7:66:e1:4e:af:43:f5:af:bc:3c:8a:48:9d:fd:
         96:33:3c:11:69:3c:e4:61:58:8d:0b:a2:f1:c7:4c:dd:e7:70:
         28:6e:94:f1:f8:1b:a5:cc:38:36:9b:35:de:48:ba:ba:51:e4:
         32:11:d5:6d:62:34:38:89:04:ad:09:36:67:c4:17:a9:2c:fe:
         44:51:8d:11:cc:a0:aa:82:80:47:c5:3b:fe:f6:26:52:c1:0f:
         46:d8:80:22:bf:76:f6:d9:6c:b0:c0:28:71:75:51:a1:6b:7b:
         5d:f4:f8:0c:0e:e3:a8:e5:7a:27:42:e3:d4:ca:52:70:b7:20:
         66:b3:ac:af:71:31:0a:8c:a3:cd:8c:84:9b:62:ac:ae:f5:fa:
         83:2c:88:6c:55:a0:82:16:cd:95:9e:ec:91:82:db:b6:56:62:
         c8:81:a3:57
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUBayZGlDuZO7c0SAr8F9/HgwCpIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTA3MzExMzMwMDBaFw0yNjA3MzAxMzM1MDBaMDMxMTAvBgNV
BAMTKEJFNDFERTRBNEFFODI1MjIyMzkzM0NBMjIwQzFFN0RBRDQxNjA4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMJPmKKsTi9YNiIcUGYHweZ7f
hFr+8joEQhcrCSEoct5YwXIrwM4J6jAKS9et1BZsvN2KAFT1jWnCX8zzawupFb98
clS682b5CTMPlKrwipefhFvBzQYK/we2fKcV8rysBqrXPAC44APVsLdKKVIKjKS+
qRF6WpYl2qn98IioqWF5gToScg7Gbio5EJMx4b26jbLVKv/jVlH7SUaAtwagNcqv
zgr35T9+nL8pr74E1y1L4hSl0dK3R8Qz/BWLr9V+rFiTDIUjYYM6sMHLGihWJ0Mr
WNF54lt7D7BoKGlv3LPkFVNMQZfDbPgh0xwhrl9OFJ5SPYD7eX8v/g+rbZCTAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUvkHeSkroJSIjkzyiIMHn2tQWCD8wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTMxMzUz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAAxAVADANBgkqhkiG9w0BAQsFAAOCAQEANyVPIL7MuURoclR4FMDb0lfJaQrT
+y1VuXTS+o/aAUAWiY0YDce+jZ4DDaSOxsUFq88JOwrmwuHXYfDAsYSLDzpfxv6Y
9wTY3FUxKUwMRsxMC6N2WlzgXqtzIUpq4Ndm4U6vQ/WvvDyKSJ39ljM8EWk85GFY
jQui8cdM3edwKG6U8fgbpcw4Nps13ki6ulHkMhHVbWI0OIkErQk2Z8QXqSz+RFGN
EcygqoKAR8U7/vYmUsEPRtiAIr929tlssMAocXVRoWt7XfT4DA7jqOV6J0Lj1MpS
cLcgZrOsr3ExCoyjzYyEm2KsrvX6gyyIbFWgghbNlZ7skYLbtlZiyIGjVw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:55:30 2025 by rpki-client