Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323731393030.roa
File:                     323830333a613231303a3a2f33322d3332203d3e20323731393030.roa (raw, json)
Hash identifier:          1QzDKdrXTY60A2udjGT2bYXyy/BJUwYsGWjYRl8Nny0=
Subject key identifier:   56:96:00:4C:DF:9B:30:B2:BB:A2:20:82:F8:09:DF:A7:9F:10:3C:7B
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       2FCD50A21F25EF949B5E0BA00112044BFEBA344F
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323731393030.roa
Signing time:             Wed 29 Oct 2025 16:51:17 +0000
ROA not before:           Wed 29 Oct 2025 16:46:17 +0000
ROA not after:            Wed 28 Oct 2026 16:51:17 +0000
asID:                     271900
IP address blocks:        2803:a210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:50:a2:1f:25:ef:94:9b:5e:0b:a0:01:12:04:4b:fe:ba:34:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Oct 29 16:46:17 2025 GMT
            Not After : Oct 28 16:51:17 2026 GMT
        Subject: CN=5696004CDF9B30B2BBA22082F809DFA79F103C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:21:48:92:49:14:8d:af:48:e1:05:b4:d9:
                    6f:7a:5a:92:37:24:bf:7e:49:2e:3e:3e:25:ef:4f:
                    bd:8e:82:24:d3:17:70:27:2f:69:2b:d6:39:b7:c5:
                    f7:a6:85:f4:64:0e:48:d5:b5:b1:53:bd:33:14:fb:
                    b9:f7:25:87:51:ac:5e:a0:f2:8d:66:34:03:61:b7:
                    62:5f:7d:56:06:4d:d6:d9:d6:0c:48:64:0c:00:18:
                    d5:55:46:85:e3:bd:d4:f4:05:c9:91:7c:ec:6e:bc:
                    28:f3:5a:3c:74:83:ec:30:90:9b:c8:cc:fd:bf:a3:
                    b0:54:ec:cb:84:1d:6b:2e:82:1e:0a:60:a1:5a:6f:
                    5c:16:26:08:28:4b:dc:60:5a:29:90:29:46:51:62:
                    91:b7:42:6a:b7:40:9e:e6:56:94:7e:3e:ca:df:fd:
                    ba:bf:d9:ad:0c:86:9a:e5:28:14:66:2c:61:58:d7:
                    9d:55:f5:eb:3b:93:ae:f0:df:2d:f4:c5:e1:c3:61:
                    c1:85:2f:f3:b2:2b:99:a9:2a:b5:94:68:70:1f:95:
                    d9:f8:5b:aa:87:73:c2:5b:a8:f8:11:d7:54:c0:53:
                    2c:57:fc:a6:5e:f4:96:eb:76:5d:12:09:3d:6e:fe:
                    7b:69:57:f4:72:73:30:03:55:1d:00:dc:ca:03:ed:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:00:4C:DF:9B:30:B2:BB:A2:20:82:F8:09:DF:A7:9F:10:3C:7B
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323731393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a210::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:8c:38:87:a8:8f:4b:96:0b:35:c5:b7:d4:38:d9:8b:bc:8a:
         fc:5b:80:f7:68:91:a3:2e:3a:de:6e:9f:fa:76:ff:50:09:26:
         b3:51:28:01:83:54:fd:be:30:d1:bb:74:02:c0:f0:7b:cf:e4:
         7e:ad:6c:38:1e:dc:6d:f4:24:1a:c9:e1:31:e2:0d:f2:66:d2:
         03:c5:da:fa:81:00:60:f6:ad:17:84:ec:eb:e2:99:7f:9b:63:
         d5:95:0c:c5:da:7e:03:6d:2c:65:c1:b9:15:ee:ff:d6:40:93:
         86:7e:65:05:ec:f9:c7:7d:8f:82:e9:b2:aa:69:8d:67:8d:0c:
         d2:60:72:13:f1:04:ef:0a:dd:57:67:eb:d9:80:89:44:fa:c2:
         b8:93:16:8b:06:18:60:e5:f6:f6:57:dc:71:d9:bb:38:f9:68:
         32:0b:18:e6:29:a7:43:5a:43:44:d1:90:a3:8f:fd:4f:6b:a6:
         11:fa:50:de:28:7d:b1:2d:a3:ac:65:ea:59:99:79:b1:25:9c:
         eb:82:1e:e9:6b:22:c7:5f:fa:a5:03:5a:e7:2f:a7:b7:b4:5e:
         f0:41:5c:4a:91:30:55:8a:89:cc:dd:0b:e9:50:db:42:b7:b2:
         5b:ef:7e:2c:4a:b5:aa:32:fd:c3:dc:ee:d9:b7:56:e1:bc:f7:
         c0:e5:a3:ec
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL81Qoh8l75SbXgugARIES/66NE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjQ0REY1M0NEQjYwODlCNzg1N0NERTUyMDFCMDZE
M0Y2QjFEQjAeFw0yNTEwMjkxNjQ2MTdaFw0yNjEwMjgxNjUxMTdaMDMxMTAvBgNV
BAMTKDU2OTYwMDRDREY5QjMwQjJCQkEyMjA4MkY4MDlERkE3OUYxMDNDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3CFIkkkUja9I4QW02W96WpI3
JL9+SS4+PiXvT72OgiTTF3AnL2kr1jm3xfemhfRkDkjVtbFTvTMU+7n3JYdRrF6g
8o1mNANht2JffVYGTdbZ1gxIZAwAGNVVRoXjvdT0BcmRfOxuvCjzWjx0g+wwkJvI
zP2/o7BU7MuEHWsugh4KYKFab1wWJggoS9xgWimQKUZRYpG3Qmq3QJ7mVpR+Psrf
/bq/2a0MhprlKBRmLGFY151V9es7k67w3y30xeHDYcGFL/OyK5mpKrWUaHAfldn4
W6qHc8JbqPgR11TAUyxX/KZe9Jbrdl0SCT1u/ntpV/RyczADVR0A3MoD7WRRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVpYATN+bMLK7oiCC+Anfp58QPHswHwYDVR0j
BBgwFoAUL1ZE31PNtgibeFfN5SAbBtP2sdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81N0EwNDM4REQwRUE1RjUzMzc3N0E5RDgzMTY5NEQ3M0I4
NjgzN0YwRjVDODUyNzcwMDAyMjUwQjAzOENEREVELzAvMkY1NjQ0REY1M0NEQjYw
ODlCNzg1N0NERTUyMDFCMDZEM0Y2QjFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjU2NDRERjUzQ0RCNjA4OUI3
ODU3Q0RFNTIwMUIwNkQzRjZCMURCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTdBMDQzOEREMEVBNUY1MzM3NzdBOUQ4MzE2OTRENzNCODY4MzdGMEY1
Qzg1Mjc3MDAwMjI1MEIwMzhDRERFRC8wLzMyMzgzMDMzM2E2MTMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDohAw
DQYJKoZIhvcNAQELBQADggEBAFCMOIeoj0uWCzXFt9Q42Yu8ivxbgPdokaMuOt5u
n/p2/1AJJrNRKAGDVP2+MNG7dALA8HvP5H6tbDge3G30JBrJ4THiDfJm0gPF2vqB
AGD2rReE7OvimX+bY9WVDMXafgNtLGXBuRXu/9ZAk4Z+ZQXs+cd9j4LpsqppjWeN
DNJgchPxBO8K3Vdn69mAiUT6wriTFosGGGDl9vZX3HHZuzj5aDILGOYpp0NaQ0TR
kKOP/U9rphH6UN4ofbEto6xl6lmZebElnOuCHulrIsdf+qUDWucvp7e0XvBBXEqR
MFWKiczdC+lQ20K3slvvfixKtaoy/cPc7tm3VuG898Dlo+w=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:12:39 2025 by rpki-client