Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa
File:                     323830333a626364303a3a2f33322d3332203d3e20323734303431.roa (raw, json)
Hash identifier:          JaWBvk4NMSfi5xqHT0pEDNoKm1PbShacBBS3rYJvC/U=
Subject key identifier:   98:58:BD:F1:98:60:C0:6B:F9:6B:15:95:16:2B:9F:15:71:41:63:17
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       20DA324E8C5FA4F0C1FF0039889008CB85418B6A
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa
Signing time:             Fri 01 Aug 2025 13:20:00 +0000
ROA not before:           Fri 01 Aug 2025 13:15:00 +0000
ROA not after:            Fri 31 Jul 2026 13:20:00 +0000
asID:                     274041
IP address blocks:        2803:bcd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:32:4e:8c:5f:a4:f0:c1:ff:00:39:88:90:08:cb:85:41:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Aug  1 13:15:00 2025 GMT
            Not After : Jul 31 13:20:00 2026 GMT
        Subject: CN=9858BDF19860C06BF96B1595162B9F1571416317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:e1:e6:97:3e:4e:8d:a8:19:00:71:70:10:
                    8a:cc:4d:66:cf:2d:ca:5b:10:27:7c:59:91:dd:bc:
                    05:03:9f:a1:65:5b:04:c1:5d:8f:ad:af:96:b7:d1:
                    2f:99:7e:f1:0c:36:4b:7d:af:25:9a:3b:b1:72:97:
                    6b:1d:db:a4:7c:a8:0c:b3:55:bd:a8:7b:e9:59:5a:
                    5b:5e:3c:66:ee:eb:61:9f:bf:fb:ce:b0:d9:7f:7e:
                    aa:90:a5:78:6b:a8:ba:24:c9:e1:e8:f8:e6:6f:f6:
                    46:7c:96:c0:5e:4a:d4:fd:1c:8a:aa:d1:3d:da:2a:
                    63:dd:e3:af:ca:3d:56:62:fc:29:16:02:ad:08:2c:
                    df:5a:ea:d3:51:6e:7d:91:4b:f8:92:80:69:b6:d1:
                    04:c6:ef:08:ed:94:7a:0e:f2:c5:46:b3:a4:ff:dd:
                    d7:88:aa:70:46:21:73:c5:24:9c:74:f2:7c:db:95:
                    a5:af:2c:29:0a:5e:ad:60:13:e6:f0:0a:86:cb:d1:
                    6d:48:13:57:af:2c:d4:a3:cb:aa:44:04:d4:4c:27:
                    c0:84:80:f5:15:28:0d:39:76:65:71:18:c7:07:3a:
                    01:27:99:a5:e7:d7:a3:f3:f5:b0:e4:7e:19:ee:82:
                    bf:e6:15:19:58:44:e7:97:db:bf:76:f6:fb:22:3c:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:BD:F1:98:60:C0:6B:F9:6B:15:95:16:2B:9F:15:71:41:63:17
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:07:f3:b9:7d:20:63:57:b7:9e:2c:81:f9:ed:05:7e:7f:d4:
         f3:4a:15:74:9a:87:c2:dc:a5:2d:12:d8:60:cc:3a:d0:d8:3b:
         81:55:8b:11:6b:35:5e:f9:ed:8a:3e:74:29:ad:70:ee:a9:ae:
         af:a0:9a:97:0c:8a:10:63:74:30:2f:f3:55:74:d8:a7:d6:d5:
         77:eb:5f:3e:c6:82:0b:a1:bb:a5:43:f1:c1:e7:cf:55:1d:27:
         f9:56:50:e3:1f:23:93:f8:73:9a:70:22:e7:18:c3:5f:2a:12:
         ed:33:fa:42:20:af:7d:64:37:46:81:02:68:46:b3:ee:3c:fc:
         16:7d:30:d0:e4:20:29:d4:00:5a:8e:2e:15:df:3b:5f:58:e3:
         6f:3e:75:0b:b7:d8:47:98:f7:f4:55:f5:de:d9:44:11:6e:5f:
         a2:a4:c0:b4:07:98:dd:3a:83:2e:8e:69:b9:ad:71:5d:f9:d1:
         a4:33:0f:9a:fe:ab:e9:0b:18:91:51:bf:3c:f1:a3:9c:6b:a9:
         fb:6f:cc:25:7d:47:77:79:aa:ae:7a:79:80:bd:64:39:85:62:
         77:9c:b3:55:47:e5:51:a6:5c:17:74:16:aa:ea:d4:35:8a:ef:
         18:16:81:fb:ea:41:8a:e4:f6:aa:db:6e:b4:2c:65:d9:d5:75:
         cf:4d:06:be
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUINoyToxfpPDB/wA5iJAIy4VBi2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5MTFDRkU5MTZFREVEMkMxMTk3NzAwN0Y0QTlCRDJB
OEYxRDE3NDAeFw0yNTA4MDExMzE1MDBaFw0yNjA3MzExMzIwMDBaMDMxMTAvBgNV
BAMTKDk4NThCREYxOTg2MEMwNkJGOTZCMTU5NTE2MkI5RjE1NzE0MTYzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiuHmlz5OjagZAHFwEIrMTWbP
LcpbECd8WZHdvAUDn6FlWwTBXY+tr5a30S+ZfvEMNkt9ryWaO7Fyl2sd26R8qAyz
Vb2oe+lZWltePGbu62Gfv/vOsNl/fqqQpXhrqLokyeHo+OZv9kZ8lsBeStT9HIqq
0T3aKmPd46/KPVZi/CkWAq0ILN9a6tNRbn2RS/iSgGm20QTG7wjtlHoO8sVGs6T/
3deIqnBGIXPFJJx08nzblaWvLCkKXq1gE+bwCobL0W1IE1evLNSjy6pEBNRMJ8CE
gPUVKA05dmVxGMcHOgEnmaXn16Pz9bDkfhnugr/mFRlYROeX27929vsiPPLJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmFi98ZhgwGv5axWVFiufFXFBYxcwHwYDVR0j
BBgwFoAULZEc/pFu3tLBGXcAf0qb0qjx0XQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDE2OUVBMjdEMUY2NUE4RjQ0QjU2NTQ2M0M3OTlCQkJD
NUZCRTY3Mjk3MUY3MTAzQzEyN0Y2NzI5MTYwNjI2LzAvMkQ5MTFDRkU5MTZFREVE
MkMxMTk3NzAwN0Y0QTlCRDJBOEYxRDE3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDkxMUNGRTkxNkVERUQyQzEx
OTc3MDA3RjRBOUJEMkE4RjFEMTc0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxNjlFQTI3RDFGNjVBOEY0NEI1NjU0NjNDNzk5QkJCQzVGQkU2NzI5
NzFGNzEwM0MxMjdGNjcyOTE2MDYyNi8wLzMyMzgzMDMzM2E2MjYzNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDMwMzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDvNAw
DQYJKoZIhvcNAQELBQADggEBAJQH87l9IGNXt54sgfntBX5/1PNKFXSah8LcpS0S
2GDMOtDYO4FVixFrNV757Yo+dCmtcO6prq+gmpcMihBjdDAv81V02KfW1XfrXz7G
gguhu6VD8cHnz1UdJ/lWUOMfI5P4c5pwIucYw18qEu0z+kIgr31kN0aBAmhGs+48
/BZ9MNDkICnUAFqOLhXfO19Y428+dQu32EeY9/RV9d7ZRBFuX6KkwLQHmN06gy6O
abmtcV350aQzD5r+q+kLGJFRvzzxo5xrqftvzCV9R3d5qq56eYC9ZDmFYnecs1VH
5VGmXBd0Fqrq1DWK7xgWgfvqQYrk9qrbbrQsZdnVdc9NBr4=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:36:18 2025 by rpki-client