Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
File:                     323830333a313235303a3a2f33322d3438203d3e20323733313634.roa (raw, json)
Hash identifier:          CriGTlSWY35vkf41/ahVv1l1CT9uBIYrvVfVYss6Ww8=
Subject key identifier:   52:CC:72:B8:70:DB:8A:E1:E8:10:4A:EF:CC:B4:BF:FD:8D:83:BA:C6
Certificate issuer:       /CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
Certificate serial:       4A6DBF5960893CD06FEDA2B56D05B7FB0A237C96
Authority key identifier: EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
Signing time:             Tue 28 Oct 2025 00:51:11 +0000
ROA not before:           Tue 28 Oct 2025 00:46:11 +0000
ROA not after:            Tue 27 Oct 2026 00:51:11 +0000
asID:                     273164
IP address blocks:        2803:1250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6d:bf:59:60:89:3c:d0:6f:ed:a2:b5:6d:05:b7:fb:0a:23:7c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
        Validity
            Not Before: Oct 28 00:46:11 2025 GMT
            Not After : Oct 27 00:51:11 2026 GMT
        Subject: CN=52CC72B870DB8AE1E8104AEFCCB4BFFD8D83BAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:ef:b0:f1:f5:69:f3:8d:c2:19:c4:41:0e:
                    51:f5:aa:00:78:4f:ee:83:a9:4d:29:cd:f6:66:42:
                    b2:ed:6f:21:c0:1c:ec:df:f1:cb:c6:91:04:5d:52:
                    7f:b5:90:f6:ec:75:cf:5b:0f:4f:d7:08:23:bc:a6:
                    27:66:d2:18:2f:98:72:c8:eb:f2:8d:7d:25:fb:e4:
                    5f:99:2a:9e:f1:93:eb:38:93:54:ec:b1:e3:91:2a:
                    a6:30:df:53:f6:56:7a:54:18:14:18:64:65:c1:81:
                    89:bc:28:29:5a:dd:e6:94:7f:39:25:ba:e1:07:83:
                    7a:6f:fc:65:db:f3:32:af:1b:30:8c:81:d6:23:d9:
                    df:e4:6b:66:3b:92:a1:11:a4:ad:34:96:ee:5d:ca:
                    c0:43:23:fa:f1:12:9a:7b:0b:93:9e:2c:f8:a7:e3:
                    9f:56:8f:ab:10:01:34:17:4b:fd:af:5d:15:56:ac:
                    05:ca:ff:38:12:bd:d8:bf:fa:86:d1:ae:f1:58:72:
                    7e:2d:2d:0e:58:f2:86:a0:fa:56:20:14:75:09:d3:
                    33:ab:51:12:d3:11:aa:82:3b:df:9f:a6:e0:66:e6:
                    2f:bd:2b:a1:17:4b:b2:06:31:a6:2c:4d:2d:b9:dd:
                    d4:8a:55:1c:bb:89:a7:3c:43:b7:ae:f0:96:b9:d0:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:72:B8:70:DB:8A:E1:E8:10:4A:EF:CC:B4:BF:FD:8D:83:BA:C6
            X509v3 Authority Key Identifier:
                keyid:EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1250::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:04:5e:cc:e1:39:88:44:9c:fd:fd:52:d9:36:ec:eb:4d:
         7e:81:fa:74:25:43:d5:fa:e2:98:d7:94:27:29:65:95:e1:01:
         3c:47:af:58:39:8b:4e:61:f4:a6:ee:10:f1:73:e1:fd:4f:30:
         25:7f:a8:eb:d8:25:bc:25:85:01:ac:3a:0b:46:b0:e6:17:d1:
         ed:89:f3:b3:86:74:75:e4:95:68:f4:68:bd:aa:b5:77:6c:2c:
         a7:58:48:14:33:91:4c:da:f2:df:ac:70:21:b3:11:be:13:76:
         23:8a:fe:42:e0:b9:6e:ec:18:33:ad:11:b3:ab:72:91:2a:39:
         1f:d6:2b:f9:6f:cc:d7:04:3e:52:b8:ca:95:f6:d4:12:5b:08:
         4a:99:67:25:29:7d:c9:bb:39:55:d8:0e:e1:d7:3c:ce:a6:c1:
         2f:ec:fc:26:3d:fc:0b:22:40:ba:0c:1a:75:ea:92:ca:02:42:
         82:18:b0:80:64:85:a9:72:a0:37:c7:76:77:76:a2:c3:a1:3e:
         c1:2e:3c:56:7b:de:cf:47:53:34:9b:06:88:38:62:46:c6:ce:
         b4:b3:7b:57:2c:7e:39:15:19:93:3b:e0:83:90:70:df:92:07:
         db:26:34:44:16:b4:5c:47:53:37:87:31:bc:d6:51:b0:e9:85:
         89:48:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:34:53 2025 by rpki-client