Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          EQKOK2pZi4sTTEyvReUI/FifWvsDvSKrXBbaxRzp98w=
Subject key identifier:   2A:37:A1:1E:4C:F2:94:BC:28:77:03:67:EA:06:3F:C0:2C:CB:26:5B
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       2F8B6DF868B1C17C3942E21864854135EC7386BD
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 31 Oct 2025 16:51:27 +0000
ROA not before:           Fri 31 Oct 2025 16:46:27 +0000
ROA not after:            Fri 30 Oct 2026 16:51:27 +0000
asID:                     263750
IP address blocks:        2803:9ba0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8b:6d:f8:68:b1:c1:7c:39:42:e2:18:64:85:41:35:ec:73:86:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct 31 16:46:27 2025 GMT
            Not After : Oct 30 16:51:27 2026 GMT
        Subject: CN=2A37A11E4CF294BC28770367EA063FC02CCB265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:50:a9:5d:73:4b:62:71:64:aa:8b:3c:50:
                    0e:1c:75:13:5f:9d:fb:28:73:e9:b4:03:19:fa:44:
                    91:d8:40:78:b0:6f:72:27:44:62:4a:f6:b2:0d:61:
                    c5:53:cd:a4:55:d5:44:e3:f0:14:90:e0:74:63:fa:
                    e7:04:a3:07:fe:55:2c:c6:1c:d5:6a:75:98:35:75:
                    4d:28:6f:e6:8f:84:20:a4:45:e9:a6:5b:cc:d1:33:
                    6b:3e:9c:65:80:cb:9e:c9:29:e5:3b:b8:6d:c7:63:
                    e6:fe:93:3b:98:0c:76:e6:b1:63:7d:dd:56:f9:e5:
                    45:74:28:ed:cb:4e:67:4a:a1:c8:76:f0:7c:a9:30:
                    57:e0:3d:45:6f:a7:da:e5:97:5f:a8:b5:b6:04:5f:
                    1e:aa:1e:c2:f5:2b:31:81:ae:c6:99:f5:02:58:84:
                    07:44:2d:33:0d:7d:c1:a1:65:2f:99:39:d7:b7:58:
                    12:34:6a:ee:85:34:54:59:25:fc:41:21:b6:f3:4a:
                    35:82:d8:06:e3:d5:06:37:01:34:e2:8e:b6:67:e9:
                    7b:da:e6:f1:cb:c1:e2:d1:e3:46:35:0c:50:b1:ea:
                    75:ac:ec:64:a5:d9:61:a3:6c:74:f7:77:6a:69:72:
                    8d:d5:6c:22:c2:e1:e7:b7:3b:ae:74:d9:90:8b:0b:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:37:A1:1E:4C:F2:94:BC:28:77:03:67:EA:06:3F:C0:2C:CB:26:5B
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:85:27:92:f4:91:56:c2:a4:4e:76:fd:77:d4:25:6d:16:
         f5:ac:04:92:7c:43:18:e3:88:51:f3:ad:57:0b:e7:42:a9:dd:
         d4:38:6f:cb:0e:93:72:f5:a0:0a:0f:26:9f:c9:9e:47:3e:65:
         76:60:15:fe:e7:7b:59:5a:91:50:fa:64:9f:44:43:da:e6:fb:
         d7:94:71:a9:89:87:d0:c5:81:65:23:d6:21:13:d6:59:8d:6a:
         c0:7d:c5:7e:1e:62:56:fe:d9:54:75:71:36:31:d8:d1:45:99:
         db:f4:6d:15:23:cb:bf:e2:86:ab:ce:c4:81:30:ee:4e:81:75:
         26:87:46:1f:8b:82:2e:09:a9:39:7d:6d:1c:56:8c:5f:88:b8:
         d5:9d:ed:6e:f5:d8:71:8c:b4:d2:be:be:0b:b8:15:11:83:6d:
         28:6d:fe:96:a4:30:62:59:f6:6e:1d:02:f0:4a:5d:90:a5:ba:
         81:c9:60:68:e8:00:68:5e:e9:d7:b0:bc:06:72:27:52:76:71:
         fc:f7:f8:bf:cc:6b:27:f2:57:17:e2:b7:d8:d9:4b:9e:86:08:
         da:10:10:95:37:bf:d5:a4:49:93:c9:e1:67:ad:4a:99:28:81:
         48:7f:dd:84:37:ba:7f:9f:b3:f7:64:b5:39:ae:60:81:ae:ab:
         0f:11:f7:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:06:52 2025 by rpki-client