Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          +b8wRoO1G4N3dIdVQE8O3MnVsAr0TkJlWWnAgTYo+IY=
Subject key identifier:   D5:E2:23:CE:84:B5:67:4F:1D:DE:05:BB:03:3F:9A:3B:5E:CF:30:DC
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       2CF88A8976FDB6D50C72AC606E99F2032F9722B6
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 31 Oct 2025 16:51:26 +0000
ROA not before:           Fri 31 Oct 2025 16:46:26 +0000
ROA not after:            Fri 30 Oct 2026 16:51:26 +0000
asID:                     263750
IP address blocks:        2803:9ba0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:8a:89:76:fd:b6:d5:0c:72:ac:60:6e:99:f2:03:2f:97:22:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct 31 16:46:26 2025 GMT
            Not After : Oct 30 16:51:26 2026 GMT
        Subject: CN=D5E223CE84B5674F1DDE05BB033F9A3B5ECF30DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:72:19:0b:b0:1e:63:30:8e:99:18:99:5f:
                    31:cb:41:9a:6e:a4:b2:11:59:a2:e9:4c:7a:fa:78:
                    ef:49:f5:ff:7a:96:c8:cc:c9:21:9b:5c:e4:8e:49:
                    ce:ae:24:ea:52:ae:fe:73:5d:72:f9:59:c2:93:10:
                    1b:c0:c7:d8:19:6c:70:9a:c2:d3:ef:7a:93:fa:45:
                    f2:33:3f:56:bb:bd:bb:1d:2b:0c:d8:1d:40:9e:ec:
                    08:97:f4:d4:2d:5e:4b:16:82:75:bc:a5:4a:af:5d:
                    6e:4b:38:cf:3b:26:57:51:e4:e5:be:da:8a:ad:1f:
                    76:3b:e4:72:21:ab:93:85:4a:94:93:bb:7a:64:ff:
                    77:a6:c2:d1:31:65:3f:1c:7e:66:fd:73:9b:24:bb:
                    56:b7:cb:4e:ad:24:73:fb:a2:2c:bd:7a:bb:84:1f:
                    68:9d:16:d0:7d:2d:aa:b3:9d:34:f8:f6:61:e5:fb:
                    c3:56:a6:df:1e:40:18:2d:0f:4b:dc:dd:04:28:f5:
                    44:29:d8:cc:85:48:93:1d:62:fa:28:ab:db:26:7c:
                    d9:8c:88:46:e4:a4:e8:9f:48:7a:62:d5:58:60:0f:
                    c0:30:22:72:7e:ea:82:ed:69:ef:d9:2e:f7:05:8d:
                    1c:a1:6c:5a:bd:c1:e6:d4:ac:fa:61:fa:6a:65:1b:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:23:CE:84:B5:67:4F:1D:DE:05:BB:03:3F:9A:3B:5E:CF:30:DC
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:51:34:9f:c1:a1:38:0d:b2:93:6a:6a:9a:8d:43:bf:85:90:
         ff:20:fd:66:8e:7c:7e:70:d8:93:b6:c1:5f:07:72:b0:6a:68:
         fe:44:85:3f:b6:ee:ae:17:6b:95:b1:1e:45:5c:46:e6:1f:f4:
         74:9b:2c:2f:15:13:39:19:0d:68:62:3f:a1:96:0b:ce:80:c2:
         00:5b:f7:b5:29:9b:33:7e:e2:fc:6b:6b:e1:d7:8c:1c:c5:43:
         92:b4:19:df:bf:2e:51:ed:84:dd:0c:e5:cf:6e:c4:06:d8:5b:
         e1:67:8b:79:e3:94:e6:54:35:7b:b2:64:70:11:f8:c1:71:10:
         67:e3:00:a1:84:38:81:d6:ac:4f:74:30:09:eb:22:93:cb:ab:
         b2:b4:ef:f7:c8:1d:12:a5:da:a4:e5:39:0b:7e:1c:f0:a7:8b:
         e6:64:6c:02:8d:12:5f:9d:27:2e:d2:cd:79:31:4c:b7:52:54:
         95:6e:b8:aa:12:90:3d:d2:4d:ed:e2:22:be:24:ff:b2:d2:40:
         a2:a8:98:bd:61:18:5f:ac:bf:d3:08:0c:7d:09:fa:3f:cd:44:
         fe:ed:8b:7e:b9:6b:db:96:8c:15:8a:e6:74:65:aa:96:6b:5b:
         4a:22:e2:fc:65:20:73:54:6b:34:e4:f5:c0:59:06:55:e5:e8:
         1c:dd:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:34 2025 by rpki-client