Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3730303a3a2f34322d3432203d3e20323733313334.roa
File:                     323830333a353435303a3730303a3a2f34322d3432203d3e20323733313334.roa (raw, json)
Hash identifier:          tWh0me0CuiDooC9OP47qNj3+n5U3QWYYRvuplGLHJ4w=
Subject key identifier:   C1:F3:16:5B:DC:23:AA:D8:97:61:86:80:28:05:16:C4:C7:0C:A2:EB
Certificate issuer:       /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
Certificate serial:       6B54B9B9748CC083CE03779FC7F55DFE3E786FEF
Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3730303a3a2f34322d3432203d3e20323733313334.roa
Signing time:             Mon 03 Nov 2025 01:25:02 +0000
ROA not before:           Mon 03 Nov 2025 01:20:02 +0000
ROA not after:            Mon 02 Nov 2026 01:25:02 +0000
asID:                     273134
IP address blocks:        2803:5450:700::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 15:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:54:b9:b9:74:8c:c0:83:ce:03:77:9f:c7:f5:5d:fe:3e:78:6f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
        Validity
            Not Before: Nov  3 01:20:02 2025 GMT
            Not After : Nov  2 01:25:02 2026 GMT
        Subject: CN=C1F3165BDC23AAD897618680280516C4C70CA2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:c5:d5:77:f0:f0:98:aa:aa:2f:cb:dc:22:
                    1b:95:e8:c9:d8:2d:fe:b1:17:25:76:47:d9:c8:92:
                    a0:94:af:16:05:63:4e:68:d0:26:f4:24:22:e1:ce:
                    a8:d7:cd:05:d4:61:4b:8c:f7:00:e0:34:4d:7c:1e:
                    c6:bb:5e:da:06:1a:eb:70:09:97:eb:2e:fc:8a:8d:
                    25:67:3c:af:41:19:7a:bc:09:05:94:76:84:3e:93:
                    94:b7:0a:49:11:11:92:98:31:16:db:70:62:50:a7:
                    34:e4:8d:c1:bb:be:0c:c8:b1:82:f2:db:76:12:dd:
                    ca:10:54:a0:ee:b7:86:69:0a:00:10:2e:f5:e7:63:
                    54:cb:0e:63:ae:cd:4d:29:2e:65:63:dd:75:a9:88:
                    52:c6:d8:49:0c:6d:d3:eb:fb:27:ea:de:b3:a9:53:
                    34:26:85:d6:29:89:5c:68:d5:22:6a:8b:12:54:10:
                    e0:67:69:e0:6e:f4:ee:fc:bb:6b:2f:b6:19:5b:90:
                    72:62:a4:fa:13:be:b6:de:05:00:28:87:08:74:e8:
                    93:bf:3b:95:da:d1:ee:ef:99:f5:6e:83:38:4e:58:
                    a4:ab:ba:74:30:ab:a6:d8:6c:33:7d:a2:b5:9a:77:
                    7f:cf:d6:ff:eb:35:6e:4a:d1:05:db:9b:21:92:e5:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:16:5B:DC:23:AA:D8:97:61:86:80:28:05:16:C4:C7:0C:A2:EB
            X509v3 Authority Key Identifier:
                keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3730303a3a2f34322d3432203d3e20323733313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5450:700::/42

    Signature Algorithm: sha256WithRSAEncryption
         02:de:d1:5d:97:72:66:98:9c:9c:d8:16:7c:44:1e:96:33:c5:
         0d:e2:ef:a7:de:27:89:93:58:b9:80:5f:68:a7:91:b8:ac:23:
         88:e8:cc:b3:64:24:45:94:86:4e:87:58:07:77:92:52:e0:d3:
         c5:4c:7a:98:52:5c:de:94:3b:f1:52:9a:90:dd:0d:60:95:ac:
         4a:2e:05:36:2a:4d:ce:c2:8e:28:b7:7e:e1:21:55:8c:14:ab:
         01:ab:0a:7b:42:73:8d:22:d5:25:e1:4f:b2:3d:85:c3:6c:df:
         9e:e5:a7:9d:32:3b:26:93:81:b6:fc:bb:64:47:44:d3:5c:47:
         47:b3:90:65:f1:d8:b3:cb:a8:c4:bf:2b:e1:f0:ab:92:e5:31:
         e5:7b:75:ed:03:e1:ed:64:02:1c:20:90:91:d6:3c:da:9f:b6:
         01:58:74:c2:91:ff:e9:bb:aa:fc:69:8c:bc:ac:1a:85:d8:35:
         6f:57:13:ae:af:c8:31:af:9a:44:37:d0:11:f6:19:fd:15:b1:
         2f:a1:a3:20:f5:d5:69:d2:bb:16:1f:c5:62:0a:cf:65:ee:68:
         98:69:3e:fd:c1:90:b5:c0:bd:e3:1a:3f:e6:9b:20:f7:ec:ac:
         26:20:96:48:3e:af:0b:56:c0:2a:34:d2:69:86:80:5a:10:cd:
         7c:ac:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:18 2025 by rpki-client