Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3438203d3e20323731373933.roa
File:                     323830333a31303a3a2f33322d3438203d3e20323731373933.roa (raw, json)
Hash identifier:          79MAoxT8qZ72DgHxaEGiS1wY/CYNYtK5o41hcSLug38=
Subject key identifier:   63:01:B5:6D:A6:CB:2C:02:93:C3:CA:0C:15:5E:91:91:76:B8:7B:22
Certificate issuer:       /CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
Certificate serial:       030A13DCD8B4217786D6BA548B9B26DDA87B467A
Authority key identifier: 18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3438203d3e20323731373933.roa
Signing time:             Wed 05 Nov 2025 15:10:00 +0000
ROA not before:           Wed 05 Nov 2025 15:05:00 +0000
ROA not after:            Wed 04 Nov 2026 15:10:00 +0000
asID:                     271793
IP address blocks:        2803:10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:13:dc:d8:b4:21:77:86:d6:ba:54:8b:9b:26:dd:a8:7b:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
        Validity
            Not Before: Nov  5 15:05:00 2025 GMT
            Not After : Nov  4 15:10:00 2026 GMT
        Subject: CN=6301B56DA6CB2C0293C3CA0C155E919176B87B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:94:7c:8e:94:7b:8e:8f:99:f0:3b:2e:08:
                    78:2d:08:43:96:c6:73:1a:f9:30:8d:7b:2f:46:54:
                    1d:67:d8:51:68:21:29:33:b1:d5:56:c9:4e:a4:b2:
                    3b:1c:85:c6:bd:46:39:73:a6:95:20:cd:f1:aa:cd:
                    4b:18:22:b0:1f:3e:80:e7:30:4d:e5:49:c4:9a:eb:
                    97:3a:83:d7:15:9a:cc:8a:cd:15:18:7c:3e:3c:63:
                    1f:d5:77:30:42:c8:6a:bb:f8:c5:a9:9f:13:95:e7:
                    63:db:9c:ce:cf:3a:d6:8b:e9:d6:41:95:63:52:84:
                    be:df:95:2d:4a:88:84:c2:64:6c:ef:02:0e:67:ba:
                    5f:af:de:12:32:35:17:f8:51:a9:22:bb:2a:44:d8:
                    38:e0:08:19:4c:e1:ea:79:15:e1:01:0c:76:79:2f:
                    82:7b:c5:12:88:08:b1:82:d9:18:fd:f3:03:01:96:
                    bf:68:95:b6:d1:ef:02:16:b2:ca:33:78:d2:6d:69:
                    36:88:8c:01:a1:5f:47:6f:9b:22:52:ca:2d:14:a8:
                    ad:b2:1d:32:f0:b9:09:c1:4f:fa:fe:fc:b1:9e:29:
                    57:90:3b:4d:4e:b8:33:e1:e6:7e:35:d5:ff:89:37:
                    35:4a:a7:28:dd:de:06:06:36:1d:6e:8b:d4:0f:14:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:B5:6D:A6:CB:2C:02:93:C3:CA:0C:15:5E:91:91:76:B8:7B:22
            X509v3 Authority Key Identifier:
                keyid:18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3438203d3e20323731373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:4d:8b:82:dd:c2:20:1a:df:35:57:64:24:f3:ae:f4:c1:
         10:ac:82:0c:cf:5e:2f:5c:ea:53:f0:e2:27:d2:23:b9:3f:6e:
         01:b8:71:d6:21:14:ea:a2:58:0a:66:b3:81:99:43:6f:a9:e1:
         1e:27:c4:a6:84:27:2c:42:f2:86:1a:36:7a:56:5d:7d:e1:24:
         4c:75:f8:12:22:78:db:81:28:44:2a:c2:ae:2d:22:6f:f2:90:
         8c:e7:f9:0a:7d:91:92:9e:73:b0:fa:f2:ef:35:c7:ca:4c:2c:
         ba:fa:34:d2:e0:a9:02:b3:6a:53:b5:2d:4f:aa:bf:b6:96:5e:
         94:90:2b:f8:a4:3e:56:38:65:5f:f4:b1:a8:bd:1a:65:66:c1:
         58:15:8f:f2:fe:22:47:ad:49:00:1b:36:29:2b:67:d3:a5:bc:
         4a:d8:d5:d4:a2:e8:0b:6e:95:cc:15:d0:9b:dd:75:08:67:d3:
         ec:10:f8:3f:fc:76:71:6e:3f:8e:d2:23:f9:27:30:31:a3:5a:
         24:49:27:cf:a0:3c:45:12:3e:8e:b1:fb:8c:b7:07:8c:79:21:
         96:0b:86:08:4f:95:4a:84:7a:cc:9b:50:a6:59:05:85:91:a7:
         6d:81:8a:df:31:f3:90:ff:97:b1:c0:43:24:40:a8:92:27:4c:
         3c:d2:9d:6b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUAwoT3Ni0IXeG1rpUi5sm3ah7RnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg2MDFDQkI1MkY1Rjk1MDlDNEJDQjdENzc5QUIzNzYz
MzE2MzQ3QTAeFw0yNTExMDUxNTA1MDBaFw0yNjExMDQxNTEwMDBaMDMxMTAvBgNV
BAMTKDYzMDFCNTZEQTZDQjJDMDI5M0MzQ0EwQzE1NUU5MTkxNzZCODdCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO35R8jpR7jo+Z8DsuCHgtCEOW
xnMa+TCNey9GVB1n2FFoISkzsdVWyU6ksjschca9RjlzppUgzfGqzUsYIrAfPoDn
ME3lScSa65c6g9cVmsyKzRUYfD48Yx/VdzBCyGq7+MWpnxOV52PbnM7POtaL6dZB
lWNShL7flS1KiITCZGzvAg5nul+v3hIyNRf4UakiuypE2DjgCBlM4ep5FeEBDHZ5
L4J7xRKICLGC2Rj98wMBlr9olbbR7wIWssozeNJtaTaIjAGhX0dvmyJSyi0UqK2y
HTLwuQnBT/r+/LGeKVeQO01OuDPh5n411f+JNzVKpyjd3gYGNh1ui9QPFDVDAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUYwG1babLLAKTw8oMFV6RkXa4eyIwHwYDVR0j
BBgwFoAUGGAcu1L1+VCcS8t9d5qzdjMWNHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjQ1MTNEQzdDREY3QTZGMjA4NkFBMzMxMzlFRTIyMzcx
MzJEMDkyQ0FCMDY2RTk0ODA2RDI3NEY4RDAzMDA4LzAvMTg2MDFDQkI1MkY1Rjk1
MDlDNEJDQjdENzc5QUIzNzYzMzE2MzQ3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODYwMUNCQjUyRjVGOTUwOUM0
QkNCN0Q3NzlBQjM3NjMzMTYzNDdBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzY0NTEzREM3Q0RGN0E2RjIwODZBQTMzMTM5RUUyMjM3MTMyRDA5MkNB
QjA2NkU5NDgwNkQyNzRGOEQwMzAwOC8wLzMyMzgzMDMzM2EzMTMwM2EzYTJmMzMz
MjJkMzQzODIwM2QzZTIwMzIzNzMxMzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMAEDANBgkq
hkiG9w0BAQsFAAOCAQEAk/ZNi4LdwiAa3zVXZCTzrvTBEKyCDM9eL1zqU/DiJ9Ij
uT9uAbhx1iEU6qJYCmazgZlDb6nhHifEpoQnLELyhho2elZdfeEkTHX4EiJ424Eo
RCrCri0ib/KQjOf5Cn2Rkp5zsPry7zXHykwsuvo00uCpArNqU7UtT6q/tpZelJAr
+KQ+VjhlX/SxqL0aZWbBWBWP8v4iR61JABs2KStn06W8StjV1KLoC26VzBXQm911
CGfT7BD4P/x2cW4/jtIj+ScwMaNaJEknz6A8RRI+jrH7jLcHjHkhlguGCE+VSoR6
zJtQplkFhZGnbYGK3zHzkP+XscBDJECokidMPNKdaw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:40 2025 by rpki-client