Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a633030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a613034303a633030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          bL5olobtRMuHXP08yD+Br0S2jA0PVICilYP46igDIA0=
Subject key identifier:   95:4D:34:3B:26:E5:07:61:6C:1B:F2:6F:4F:0D:DC:9D:B2:68:7B:7F
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       01E393F4F76FDB269FC8C429BF4EA4125550D813
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a633030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 31 Oct 2025 16:51:26 +0000
ROA not before:           Fri 31 Oct 2025 16:46:26 +0000
ROA not after:            Fri 30 Oct 2026 16:51:26 +0000
asID:                     263750
IP address blocks:        2803:a040:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e3:93:f4:f7:6f:db:26:9f:c8:c4:29:bf:4e:a4:12:55:50:d8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct 31 16:46:26 2025 GMT
            Not After : Oct 30 16:51:26 2026 GMT
        Subject: CN=954D343B26E507616C1BF26F4F0DDC9DB2687B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:51:ff:ce:78:ff:cc:96:67:e0:b8:ff:6d:
                    f6:7c:a5:2c:0e:ca:55:f3:59:c4:04:52:52:46:bb:
                    0a:e1:0e:05:12:86:ca:7c:e5:6a:5b:ac:e1:1f:af:
                    e8:09:37:21:53:b0:24:04:0d:33:ab:12:a3:5f:8c:
                    a5:cd:be:9d:46:c3:80:d5:06:cf:92:11:6a:00:6f:
                    ae:26:a9:31:c4:90:46:a6:54:0b:e3:a8:a0:95:41:
                    8b:4d:83:3d:2c:54:c6:f0:e9:f0:d1:b2:0b:55:0e:
                    fb:55:0f:02:b1:21:2b:8d:b9:bb:54:59:b9:3c:99:
                    df:a6:51:c5:79:6d:98:6a:c4:c9:07:ac:9a:9d:9c:
                    1c:1d:d6:89:af:cc:ee:57:00:80:5b:c5:79:9f:15:
                    fe:84:6e:5a:87:63:99:ef:1b:67:db:10:73:a2:2d:
                    fa:ee:4e:08:ba:0a:c7:f5:35:bb:cd:c4:20:f3:b9:
                    5f:83:2b:9d:33:37:3c:87:01:ad:59:98:7f:a4:ac:
                    cb:82:51:fb:ea:0a:b0:c8:18:33:fa:54:d2:66:ba:
                    00:2b:4d:ba:78:1e:3e:7a:2b:86:e7:74:7b:31:8b:
                    25:e6:3b:9d:82:12:f5:29:6e:60:48:87:76:39:b7:
                    bc:e0:23:bf:a6:27:23:ec:de:f7:13:e7:5e:80:5c:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:34:3B:26:E5:07:61:6C:1B:F2:6F:4F:0D:DC:9D:B2:68:7B:7F
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a633030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:88:ad:8b:aa:d1:bd:2e:42:91:71:3c:cc:ee:9b:ec:99:5d:
         95:8f:48:ab:b8:c4:71:05:7f:24:4a:f5:64:7a:d8:34:07:71:
         f8:94:f6:de:4f:99:5c:ed:ef:50:64:e6:1f:e8:b1:3b:4a:3b:
         8e:c8:9d:02:37:c8:d6:b6:b9:b8:c1:3a:86:48:ab:5f:b0:fd:
         a0:9e:13:11:0b:6f:9e:81:be:cd:4f:fe:09:3f:12:e3:f3:58:
         ec:41:04:32:3d:b4:bd:37:3e:0e:d9:ea:bc:a4:62:2a:bc:f9:
         97:67:1f:a5:05:c0:35:53:15:c1:6b:b7:b6:90:c3:9d:0d:df:
         c0:04:4f:cb:06:58:e4:f2:28:ab:f3:6f:6c:41:67:24:b7:b4:
         35:85:c7:1c:b7:4c:72:1d:81:49:9d:ba:8a:de:ba:b1:9e:4a:
         85:fb:93:e9:eb:84:44:e7:08:81:05:d5:1a:15:f9:ad:97:c2:
         11:49:29:72:24:59:06:2f:4b:0e:c2:61:9b:ff:fb:bf:11:79:
         92:f0:90:30:31:ac:fe:7b:09:96:24:33:88:20:56:49:91:1c:
         99:4a:f4:5e:b9:56:de:52:42:24:5e:ad:17:5e:09:38:70:a2:
         f0:3d:4d:c2:a0:15:e1:04:d5:78:53:9c:14:20:98:d8:e3:79:
         21:d5:54:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:11 2025 by rpki-client