Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3534303a3a2f34322d3432203d3e20323733313334.roa
File:                     323830333a353435303a3534303a3a2f34322d3432203d3e20323733313334.roa (raw, json)
Hash identifier:          lwwCZI5kI18xDbb6+B3vHxkzoA05Co2dk9Shhe3rLAg=
Subject key identifier:   E6:4E:5E:E2:61:D9:93:E0:0A:58:28:55:D8:39:42:8C:09:C4:3B:07
Certificate issuer:       /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
Certificate serial:       37734021DA458B114C9BA99B300200CA88F521F5
Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3534303a3a2f34322d3432203d3e20323733313334.roa
Signing time:             Mon 03 Nov 2025 01:25:03 +0000
ROA not before:           Mon 03 Nov 2025 01:20:03 +0000
ROA not after:            Mon 02 Nov 2026 01:25:03 +0000
asID:                     273134
IP address blocks:        2803:5450:540::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 15:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:40:21:da:45:8b:11:4c:9b:a9:9b:30:02:00:ca:88:f5:21:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
        Validity
            Not Before: Nov  3 01:20:03 2025 GMT
            Not After : Nov  2 01:25:03 2026 GMT
        Subject: CN=E64E5EE261D993E00A582855D839428C09C43B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e8:a5:b1:d5:f3:37:d1:09:45:be:32:5f:51:
                    c9:c6:b5:34:09:7b:0e:a8:2c:c0:f0:a3:21:9c:0c:
                    40:34:a2:6f:19:97:13:27:00:38:05:d3:40:06:59:
                    a7:c4:53:cb:ad:73:a0:2f:6a:47:9f:a6:2d:4c:df:
                    ea:43:9b:14:1f:82:5d:c4:b6:eb:96:8d:fc:7d:08:
                    20:b6:91:5b:8a:94:40:c1:33:22:11:24:d3:9d:10:
                    f6:bd:22:f4:87:12:3f:c6:04:29:b1:6f:99:d5:ee:
                    e2:02:3e:87:be:1d:b0:81:0b:d0:60:11:8d:5a:5f:
                    46:69:2b:61:9c:2e:9b:9e:86:bd:98:55:f1:ec:2f:
                    03:59:6f:33:2e:6a:26:9c:d3:8e:b2:bc:03:90:20:
                    95:2a:32:6f:59:46:3c:6f:01:4e:f5:de:a0:6a:f0:
                    92:18:b0:6b:f5:05:21:5d:f1:72:99:f8:29:e3:44:
                    2c:9c:09:e7:02:2c:ef:2a:33:ad:a2:f9:73:9c:2f:
                    2b:80:bb:9b:19:87:96:61:3e:76:57:57:c4:1d:90:
                    ec:5e:a2:00:dc:bc:f2:d7:ee:6e:67:0b:6e:01:3c:
                    d7:ce:bf:5f:5e:4d:77:c4:f2:08:6a:1f:c9:b5:7c:
                    7f:b9:26:d2:a5:44:3d:d7:22:5d:9a:34:8d:a2:e3:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4E:5E:E2:61:D9:93:E0:0A:58:28:55:D8:39:42:8C:09:C4:3B:07
            X509v3 Authority Key Identifier:
                keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3534303a3a2f34322d3432203d3e20323733313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5450:540::/42

    Signature Algorithm: sha256WithRSAEncryption
         94:14:4e:bb:38:89:4d:0b:1e:ab:5a:fa:66:aa:76:56:13:82:
         98:e8:d0:fc:6f:d4:e1:9f:91:3a:8f:3c:48:1d:48:02:e7:52:
         95:c1:52:6e:3a:39:16:7e:7d:ef:c2:f2:cb:a3:78:38:14:8b:
         e7:03:7d:d6:a1:6e:bc:25:b6:ac:94:9c:4a:61:0d:29:6d:82:
         a9:d3:f3:e7:ca:5e:3e:c7:7e:81:22:dc:4c:eb:79:3c:2a:f8:
         2c:f7:da:b9:42:0f:13:fe:e2:30:ed:1b:8c:c4:bd:94:64:b7:
         79:58:56:14:d3:b7:30:47:25:47:b8:fd:f2:bb:01:c2:5d:97:
         5f:94:9b:4d:8f:45:28:08:f9:b7:99:6b:7a:94:aa:cc:3d:bc:
         7c:60:c5:65:49:19:e4:9d:66:fc:17:0b:02:f3:df:51:a7:ab:
         69:81:5a:89:0b:f1:05:66:c8:e4:e3:59:56:cc:ee:80:a9:33:
         ae:8c:22:32:68:3e:f2:52:a6:6f:02:0e:8b:a8:8e:ac:b0:62:
         19:e3:07:ef:c8:b0:17:98:82:b4:30:46:a5:c5:f3:e4:40:0f:
         a1:33:98:26:b9:1d:45:ae:08:63:5d:83:8f:da:1c:3e:d9:8e:
         cd:9b:0f:13:95:2f:b3:ed:ac:8c:2e:33:15:c2:43:b6:72:b8:
         e3:4d:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:14 2025 by rpki-client