Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330623a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6330623a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          wr5LIBr0PGCtE3ceksEy5Ouj0T7795B6xNMeNNFqBqA=
Subject key identifier:   B6:B7:81:A6:75:B5:B1:4F:5E:55:9E:B2:0D:02:A8:E6:36:C7:DA:DA
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       31A68C4470A8BED328C01D9EA1C61546B8713382
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330623a3a2f34382d3438203d3e203138363738.roa
Signing time:             Mon 28 Jul 2025 19:30:00 +0000
ROA not before:           Mon 28 Jul 2025 19:25:00 +0000
ROA not after:            Mon 27 Jul 2026 19:30:00 +0000
asID:                     18678
IP address blocks:        2800:310:c0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a6:8c:44:70:a8:be:d3:28:c0:1d:9e:a1:c6:15:46:b8:71:33:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jul 28 19:25:00 2025 GMT
            Not After : Jul 27 19:30:00 2026 GMT
        Subject: CN=B6B781A675B5B14F5E559EB20D02A8E636C7DADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:10:bd:5c:81:cf:13:d6:03:11:a3:42:ff:
                    39:cd:fa:ce:3f:aa:61:41:12:ac:37:42:c5:1f:75:
                    61:4c:de:68:5c:35:2c:14:f8:7d:f5:8c:da:75:7a:
                    45:58:7c:31:19:dc:6c:e0:f5:37:e2:69:94:3d:ce:
                    5e:30:93:21:1c:e5:14:8a:39:4b:f0:5a:ac:24:25:
                    e8:e4:dd:1c:74:4b:8e:d9:33:b0:84:19:4b:7c:5e:
                    8e:9d:d2:64:47:52:f6:ee:03:67:6d:3a:a5:dc:96:
                    87:cf:f9:6b:9f:44:c0:a3:45:cc:de:25:1c:dd:52:
                    2e:ab:9b:41:bc:1e:c1:3d:8d:4b:97:84:71:49:d3:
                    ae:73:90:7c:24:0f:d6:24:68:5d:35:0e:bf:61:ac:
                    89:b5:3c:59:0d:da:bf:ba:4d:58:ee:aa:92:23:29:
                    9f:91:f4:4b:34:56:68:3a:3c:84:4c:8d:bb:79:6a:
                    0f:18:c2:ac:b8:c9:07:a6:42:42:09:7f:b9:f8:48:
                    9c:5c:2e:fa:57:74:17:cf:5e:5a:93:98:e2:f9:1e:
                    80:ea:e8:f9:85:88:cd:ba:a2:73:46:b0:02:9c:04:
                    07:bc:88:61:38:d2:9a:52:cb:38:15:09:68:d5:91:
                    ea:7c:1e:7a:14:27:ec:9b:1d:5c:07:d8:5b:b4:d2:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:81:A6:75:B5:B1:4F:5E:55:9E:B2:0D:02:A8:E6:36:C7:DA:DA
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6330623a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:c0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:3a:1a:bc:7d:81:ad:13:6b:c9:f5:bb:79:94:fd:00:fe:
         09:00:f9:b1:1f:81:d4:ed:dc:a7:3a:7b:0f:11:ed:dc:80:29:
         cb:7a:4e:4d:95:f2:9b:19:be:51:3f:c9:ba:bb:f8:f9:23:24:
         9d:3b:18:41:68:6a:c8:07:7e:bf:53:c2:26:9b:63:47:f0:ce:
         b5:3f:10:67:48:dc:a7:c8:42:06:60:7b:d0:0b:5f:e3:74:df:
         ab:80:8f:ce:13:a0:af:d9:01:5f:87:4b:a1:5c:f0:82:69:35:
         ba:0b:2d:c2:b9:92:59:48:34:a8:8f:f3:73:fc:66:ea:f9:7a:
         65:5c:d1:db:7d:37:b2:38:2f:c3:e7:b0:d5:41:9c:6d:05:1c:
         37:2c:b7:16:b5:d6:7a:da:08:7e:1f:94:c1:29:9d:d0:1b:c4:
         46:b9:41:0f:c6:a0:aa:83:35:b3:3a:ec:c1:d6:e8:82:7c:cb:
         27:de:c3:4e:61:af:b8:08:c1:7a:d8:52:47:10:4d:45:33:76:
         0d:ff:2f:7e:fb:36:04:50:31:75:99:ba:7b:72:bf:48:69:b7:
         9e:3b:08:33:b0:7e:c2:c6:08:46:b4:53:a4:7a:f6:27:fe:eb:
         ed:ea:da:2d:6d:84:3f:b6:43:ea:20:3c:74:2f:20:e0:82:b1:
         5c:a6:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:41:39 2025 by rpki-client