Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          0h37IwnPRDC31V4+wDz7KbjBBdGSYZUTdbSxna4yLXQ=
Subject key identifier:   C1:E5:D0:AA:F8:70:3B:97:10:7B:27:54:B0:07:C7:28:C8:7A:DC:9C
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       157AD7ED78D5327584AFA2F231355AB1038401CB
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 31 Oct 2025 16:51:25 +0000
ROA not before:           Fri 31 Oct 2025 16:46:25 +0000
ROA not after:            Fri 30 Oct 2026 16:51:25 +0000
asID:                     263750
IP address blocks:        2803:a040:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:d7:ed:78:d5:32:75:84:af:a2:f2:31:35:5a:b1:03:84:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct 31 16:46:25 2025 GMT
            Not After : Oct 30 16:51:25 2026 GMT
        Subject: CN=C1E5D0AAF8703B97107B2754B007C728C87ADC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:b1:94:0f:0f:96:2d:dc:87:c0:8c:48:74:
                    75:f3:35:13:e8:ad:b4:7e:d2:e8:78:15:9c:cc:2f:
                    4c:a9:d5:44:f4:22:0e:75:90:c3:e1:bc:a2:89:0d:
                    1c:68:5f:3e:b2:2e:6d:69:77:13:73:aa:4a:51:66:
                    16:70:b0:74:27:cc:d9:ef:56:f1:90:7a:cb:52:2f:
                    f4:a6:f8:88:38:55:87:48:09:85:8b:d1:e9:e3:a8:
                    c8:46:41:e7:57:d1:82:0d:23:45:e3:4a:87:e5:0b:
                    7c:2b:49:36:b3:06:77:11:44:8f:5d:84:de:f5:23:
                    30:ba:86:0b:30:38:d6:61:69:01:0e:06:74:ad:89:
                    9b:ff:16:da:55:ce:1c:2a:05:d2:86:55:b4:30:95:
                    6b:23:5d:a7:ed:3b:5c:9c:bf:74:63:ac:88:95:e2:
                    00:e7:29:2b:7b:fb:71:c2:f2:1d:dc:15:a9:f1:77:
                    97:14:da:a0:75:a8:7c:8b:19:77:bf:8a:b7:2b:e9:
                    be:c8:22:ed:f7:80:5f:9f:1a:90:66:cb:57:d8:fa:
                    d9:13:4a:87:c4:fd:a8:41:b1:63:70:c9:1b:10:fc:
                    72:55:78:27:41:b0:c3:34:0e:a0:bc:52:41:c3:b5:
                    b9:95:6f:7d:82:e1:f0:60:b6:78:aa:e9:db:bd:80:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:D0:AA:F8:70:3B:97:10:7B:27:54:B0:07:C7:28:C8:7A:DC:9C
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:1b:31:b2:9a:9f:11:64:86:ec:0a:dd:b5:16:24:01:cd:
         3e:e3:33:34:12:65:eb:d0:fd:91:ad:5e:18:f2:f6:c3:6e:ed:
         74:9f:cd:87:42:92:2c:b9:b4:26:5a:af:0e:f1:37:58:bc:21:
         1e:2b:5a:3a:43:f0:4f:c1:72:90:c9:d2:f4:95:68:65:21:ae:
         fd:d7:ac:f3:61:39:4c:75:69:db:de:f2:4c:ea:48:47:b6:f5:
         6d:99:d8:c7:25:92:f1:8f:9a:93:78:1b:a2:b9:01:d4:0b:01:
         62:bc:bc:0e:46:e1:fb:46:45:b2:dd:ab:78:93:a7:63:a5:01:
         88:ee:5a:a6:06:a7:e9:a2:40:84:fc:d2:1e:b5:26:c9:10:97:
         50:bd:f9:5d:27:f1:3a:e0:f3:0e:61:cb:c1:67:89:d7:63:47:
         e9:e5:2e:e3:a5:b0:59:0e:f4:77:7c:f2:52:66:9d:4e:28:be:
         76:5c:87:91:9a:56:96:3d:f4:a0:07:dc:70:53:81:89:79:7f:
         25:14:8b:6f:10:2f:f9:9f:e3:2e:25:5e:17:9b:ec:99:a3:fb:
         ed:3a:3d:b2:a4:b8:2e:0a:ce:42:26:40:c2:63:d7:c4:1f:4c:
         04:d3:c7:47:8e:82:d9:13:21:ad:36:2b:71:3f:e5:5f:28:cb:
         5a:4f:62:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:01 2025 by rpki-client