Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/323830333a363564303a3a2f33322d3438203d3e20323734313734.roa
File:                     323830333a363564303a3a2f33322d3438203d3e20323734313734.roa (raw, json)
Hash identifier:          1mOxrtNXCCGjjrLxOCjwvzAXy9f1i43BxhTanXByAao=
Subject key identifier:   FC:7A:1B:57:CD:05:C1:80:C9:9A:DE:8F:9B:5F:82:51:10:2A:2B:7A
Certificate issuer:       /CN=AF9640C2202700AABA2DF54F969C8E24872E2892
Certificate serial:       736F9679829DF87F6DE895CB50EADC68E1AE574D
Authority key identifier: AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/323830333a363564303a3a2f33322d3438203d3e20323734313734.roa
Signing time:             Tue 04 Nov 2025 08:00:00 +0000
ROA not before:           Tue 04 Nov 2025 07:55:00 +0000
ROA not after:            Tue 03 Nov 2026 08:00:00 +0000
asID:                     274174
IP address blocks:        2803:65d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 14:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6f:96:79:82:9d:f8:7f:6d:e8:95:cb:50:ea:dc:68:e1:ae:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF9640C2202700AABA2DF54F969C8E24872E2892
        Validity
            Not Before: Nov  4 07:55:00 2025 GMT
            Not After : Nov  3 08:00:00 2026 GMT
        Subject: CN=FC7A1B57CD05C180C99ADE8F9B5F8251102A2B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:c2:52:a1:47:b6:5e:f3:a6:eb:60:92:13:
                    e5:1e:37:67:fa:b4:45:b3:c6:64:57:fb:e9:9e:ac:
                    82:e0:7c:1d:6a:05:45:f1:3b:a8:b0:65:39:b6:50:
                    11:f6:7b:99:b8:99:d0:08:19:e3:48:e2:4f:e4:20:
                    99:2c:25:db:f1:1d:84:e6:72:15:58:2d:a5:cc:33:
                    7b:ff:fd:c0:18:4a:a4:36:03:21:69:1b:ad:5b:f9:
                    43:03:08:1c:7d:b4:cd:7c:11:5c:ba:6f:3b:b7:fa:
                    f4:8d:ea:12:b6:8c:ce:e9:05:af:e0:6f:25:96:dd:
                    44:2c:5b:00:9e:36:d4:27:ef:d8:13:86:67:fd:70:
                    d6:89:b8:49:32:61:68:35:7a:8b:fe:31:7f:ff:4a:
                    82:06:12:8b:3a:58:b4:3c:5a:e0:7c:0e:ca:13:1f:
                    ae:96:5c:b5:06:f9:07:65:04:74:ae:b8:85:d6:f2:
                    92:d4:8e:f4:22:9e:bb:ab:7c:21:66:32:44:4e:ef:
                    1b:1b:8b:cc:16:f9:82:94:e1:bf:5d:44:2f:f9:83:
                    d2:ba:28:aa:f6:69:ef:97:0c:22:ff:f2:11:e1:2a:
                    46:b6:55:b1:69:50:f2:b1:e6:96:d6:b6:5a:11:2a:
                    fb:c7:9b:05:1b:17:cd:c8:48:9f:3f:f6:67:eb:02:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:1B:57:CD:05:C1:80:C9:9A:DE:8F:9B:5F:82:51:10:2A:2B:7A
            X509v3 Authority Key Identifier:
                keyid:AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/323830333a363564303a3a2f33322d3438203d3e20323734313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:65d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:56:a5:14:dc:17:4f:34:b3:53:d0:cf:ef:ac:39:f1:01:
         39:dc:a3:00:06:7f:8a:ac:af:8d:bd:b9:49:18:01:15:94:fd:
         22:98:de:67:4b:fc:83:b2:55:93:f3:05:f3:2d:b8:5d:95:53:
         58:71:7c:7b:3e:ff:b6:86:34:25:6e:ed:57:d5:f0:e2:4f:0b:
         8b:f0:38:98:de:21:34:d1:65:3e:30:be:45:03:83:84:0c:cf:
         31:4d:7a:4c:fb:c8:4b:f2:55:5d:de:78:70:7a:62:52:3a:1a:
         a1:de:e0:ba:a6:51:e3:56:b5:72:ae:b3:21:75:8d:49:1d:a9:
         98:5f:34:ee:a7:d8:91:a2:e8:94:02:8b:2c:09:35:db:13:f8:
         a3:37:88:05:30:fd:9e:f7:0d:b1:b8:a6:4f:5e:a6:5b:90:96:
         16:3c:98:82:6b:b6:b7:70:2f:8e:2a:27:e1:5a:24:fa:8b:4e:
         2b:12:41:b2:00:b6:c0:ac:d7:c9:3a:82:db:0d:65:95:fc:6d:
         8a:b3:48:53:13:bf:ec:09:04:58:4f:4f:39:28:4b:de:8b:24:
         1c:1e:25:78:35:a3:0b:b9:fb:e6:94:33:da:14:60:bc:7f:98:
         40:32:b5:8e:a7:98:fa:31:06:d0:f8:40:b7:a3:c7:d1:e0:2d:
         6e:dd:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:14:27 2025 by rpki-client