Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/323830333a666663303a3a2f33322d3634203d3e20323733393535.roa
File:                     323830333a666663303a3a2f33322d3634203d3e20323733393535.roa (raw, json)
Hash identifier:          9r93tfr2XOE4CfTvHAOad9lZvyepVwInmvuADpfJcmE=
Subject key identifier:   05:E1:2B:09:14:EC:D1:44:CA:7A:DB:12:F7:7F:D9:C7:AF:94:88:1B
Certificate issuer:       /CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
Certificate serial:       17A95202D43D3AA2E729FA72412B7435E2BE9780
Authority key identifier: 42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/323830333a666663303a3a2f33322d3634203d3e20323733393535.roa
Signing time:             Fri 24 Oct 2025 16:05:00 +0000
ROA not before:           Fri 24 Oct 2025 16:00:00 +0000
ROA not after:            Fri 23 Oct 2026 16:05:00 +0000
asID:                     273955
IP address blocks:        2803:ffc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:52:02:d4:3d:3a:a2:e7:29:fa:72:41:2b:74:35:e2:be:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
        Validity
            Not Before: Oct 24 16:00:00 2025 GMT
            Not After : Oct 23 16:05:00 2026 GMT
        Subject: CN=05E12B0914ECD144CA7ADB12F77FD9C7AF94881B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:3d:5b:ad:71:7b:33:ea:bb:de:0f:ce:3e:
                    3b:e0:3a:9a:0d:2b:99:58:a6:88:57:da:80:0d:57:
                    19:67:93:c5:70:43:84:87:d8:bf:44:da:dd:c7:83:
                    07:ea:fc:33:45:3e:2f:78:94:f4:ea:15:44:06:bf:
                    b7:49:2a:f5:5f:9e:57:16:d4:79:9d:81:ca:ea:ca:
                    c0:74:11:18:68:ef:17:7f:84:77:3b:22:df:4f:71:
                    ed:e7:26:ca:49:79:91:83:0b:70:f0:47:50:f9:61:
                    b9:eb:5a:f9:e7:b1:ca:c5:57:32:23:6c:97:be:dc:
                    59:85:5e:7c:51:7b:38:fd:da:cf:6c:ff:99:29:26:
                    3a:bc:79:d4:35:b6:72:e0:5d:fb:8f:aa:dc:26:b5:
                    af:37:fe:8d:8c:bd:6d:82:e6:ae:64:c6:3c:ed:a1:
                    6d:63:63:05:a7:a3:98:6a:d5:68:53:f0:48:b2:c1:
                    f7:1e:55:72:0a:05:e5:bd:00:f2:f9:c2:3d:a2:ca:
                    d7:d7:03:f5:26:59:42:bf:48:f0:77:4f:f4:e9:aa:
                    ff:11:ee:1c:b7:ab:69:87:a8:d7:c7:ae:85:17:3e:
                    27:00:9c:f0:0a:12:3f:95:4c:6d:f4:c9:74:7c:56:
                    01:83:ef:65:11:23:8e:64:ae:b0:27:7f:fa:83:9f:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:2B:09:14:EC:D1:44:CA:7A:DB:12:F7:7F:D9:C7:AF:94:88:1B
            X509v3 Authority Key Identifier:
                keyid:42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/323830333a666663303a3a2f33322d3634203d3e20323733393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ffc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:71:91:79:97:ca:1c:4b:5e:35:41:d9:4d:3e:22:7c:65:b5:
         e0:07:6e:8b:a5:db:f9:92:23:da:3a:56:9b:7d:be:f3:76:55:
         e6:66:df:23:c3:e3:a8:4f:ad:89:91:2c:ae:85:01:10:15:42:
         01:5e:1c:2a:66:0b:14:a8:34:db:db:a2:f8:b4:24:a7:44:be:
         35:32:25:28:f2:04:67:50:8b:d6:85:e1:48:56:ff:d9:07:63:
         d0:f6:8c:a7:b6:09:e4:1c:78:46:7b:e7:10:c4:e2:d6:2e:cc:
         99:bd:91:e4:e1:70:87:cd:37:75:77:ff:9e:bc:20:dd:02:26:
         a0:02:18:a4:00:42:ca:3a:02:98:05:f4:de:e3:7c:35:fb:94:
         ac:9e:b8:f4:6b:4e:84:20:ca:66:07:8d:85:30:54:9d:9b:4b:
         7c:5c:b5:5b:ba:6c:2f:d0:f5:d9:ec:7f:de:6d:b4:cc:0b:9c:
         2b:b4:a0:86:b1:ab:6c:41:28:d3:00:9a:a4:22:7a:c2:83:36:
         e6:30:31:41:36:98:5f:23:1b:3b:04:93:c1:e2:d8:9d:a9:a8:
         e3:33:38:ed:71:9a:a7:f0:de:23:47:8c:52:bf:db:84:c6:75:
         a1:c9:97:3c:eb:a8:a7:59:3b:d4:6b:d2:2e:7b:9f:41:db:57:
         28:60:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:47:11 2025 by rpki-client