Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa
File:                     323830333a333265303a3a2f33322d3438203d3e20323639393238.roa (raw, json)
Hash identifier:          rKev2828foJAgoHcNjntqYKVDlmpjTHRQcC9MyFK2yQ=
Subject key identifier:   8E:78:55:B5:3F:FD:25:61:2D:46:FC:10:12:9F:90:47:C2:46:9C:A0
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       112B758EF3F962E7B8E29EF4638060C921518081
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa
Signing time:             Thu 30 Oct 2025 13:30:00 +0000
ROA not before:           Thu 30 Oct 2025 13:25:00 +0000
ROA not after:            Thu 29 Oct 2026 13:30:00 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2b:75:8e:f3:f9:62:e7:b8:e2:9e:f4:63:80:60:c9:21:51:80:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Oct 30 13:25:00 2025 GMT
            Not After : Oct 29 13:30:00 2026 GMT
        Subject: CN=8E7855B53FFD25612D46FC10129F9047C2469CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ed:5b:56:5a:bd:bb:26:90:2c:e7:58:79:4a:
                    09:1b:df:6c:97:a7:44:c5:95:7b:35:eb:35:87:b5:
                    15:ab:bd:23:ec:21:98:6a:17:95:bb:1d:34:d7:78:
                    c4:6c:63:b0:da:7a:39:a8:32:e3:d0:a6:b4:a3:6b:
                    53:bd:2f:01:16:15:f6:cc:ee:21:0c:c8:a7:aa:c2:
                    24:60:37:ba:cd:ea:e7:5d:f9:3d:0b:ea:52:23:18:
                    2f:d2:67:6b:7b:4d:42:70:8c:40:8b:2a:50:6b:15:
                    4a:4f:85:db:bb:8d:27:0d:97:3a:a2:95:52:83:43:
                    ea:b1:8b:b4:03:08:aa:a3:87:a1:db:de:d3:00:f8:
                    a8:3c:14:30:c1:25:ce:ca:96:b9:c4:ae:f3:94:bb:
                    15:84:b5:ea:64:fa:06:7f:78:53:b3:6e:b6:63:c4:
                    e7:ae:02:f3:bd:2a:92:4e:4d:79:bb:65:5b:3e:78:
                    87:5f:d9:15:eb:26:67:44:dc:a1:24:86:ff:55:e5:
                    89:c3:39:97:23:6c:84:b4:a6:7b:8d:fb:26:45:ff:
                    9a:d2:67:75:8a:86:0d:08:4c:3c:1a:1e:54:2d:e1:
                    63:89:a1:0e:9b:2e:83:8c:e0:e9:04:2c:86:69:25:
                    f0:60:4a:61:25:08:0f:b1:9c:ac:5c:98:11:68:bf:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:55:B5:3F:FD:25:61:2D:46:FC:10:12:9F:90:47:C2:46:9C:A0
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:ff:5e:53:ff:f2:45:03:96:9d:23:df:5c:28:7d:37:f1:
         8c:0a:6d:88:12:c8:c4:cb:69:c9:52:42:e9:55:83:97:50:8b:
         19:0b:71:0a:c3:81:e9:03:57:99:98:c6:c6:0d:b3:5d:2f:36:
         b8:e2:ee:1a:07:5f:66:f0:58:62:99:cc:57:c7:ca:b8:19:c6:
         8a:ce:27:87:26:47:ef:37:04:ec:b0:7c:ce:83:8d:1b:e0:ef:
         bf:cd:5a:a6:79:4c:10:5b:57:44:95:8e:80:24:34:6b:13:02:
         b1:cd:2f:51:a8:f5:ba:95:ed:37:f0:1d:a8:7f:b5:d2:86:6c:
         02:6a:d5:dd:2c:9c:fc:77:9d:c7:c0:53:05:7b:98:a7:57:14:
         cc:6c:8c:9f:ca:f8:f4:85:26:74:39:dd:02:e0:e8:7c:70:25:
         3a:76:09:dc:9d:4d:1a:59:15:94:ea:59:75:f9:63:30:91:32:
         d1:86:41:58:63:19:31:5c:e3:ad:13:02:cb:dd:42:0d:13:3f:
         b0:90:42:27:d1:e2:b1:a1:df:ca:9e:9a:5d:03:99:06:74:d2:
         bf:99:55:f3:b5:7b:23:23:ba:64:1f:cb:68:b6:0f:48:b8:c3:
         5b:2e:a9:1e:6d:b9:16:5a:f1:d0:6d:95:e8:4a:f5:8e:33:55:
         a7:3a:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:58:11 2025 by rpki-client