Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
File:                     323830333a3630303a3a2f33322d3536203d3e203236313035.roa (raw, json)
Hash identifier:          N9UdxcgID/Y8uD4mGs5lK4rdpLcaGCB4oJZzfN+B0bI=
Subject key identifier:   BB:5E:0E:82:A7:19:30:62:71:64:D8:E6:30:7B:EB:EC:8C:F1:59:11
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       256403B90C81CD5BA7E1817C1A294A6846DA8827
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
Signing time:             Fri 24 Oct 2025 14:35:15 +0000
ROA not before:           Fri 24 Oct 2025 14:30:15 +0000
ROA not after:            Fri 23 Oct 2026 14:35:15 +0000
asID:                     26105
IP address blocks:        2803:600::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:64:03:b9:0c:81:cd:5b:a7:e1:81:7c:1a:29:4a:68:46:da:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:15 2025 GMT
            Not After : Oct 23 14:35:15 2026 GMT
        Subject: CN=BB5E0E82A71930627164D8E6307BEBEC8CF15911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:35:6b:0a:d2:d7:74:00:42:9b:4f:a0:79:
                    84:0a:b5:0a:07:08:54:54:bc:69:0d:bc:33:96:c8:
                    65:e0:60:06:92:85:70:f8:d8:89:09:7d:4d:53:24:
                    3f:95:00:d7:0c:1f:d1:45:92:d7:30:5a:83:80:75:
                    2c:cb:64:37:ad:96:05:fb:3d:43:d5:0e:1e:8e:d2:
                    80:68:aa:0a:a3:bd:8e:af:6d:51:e6:57:84:97:b4:
                    61:b8:bd:e4:52:cc:be:b7:12:db:c2:da:4b:66:ae:
                    76:fa:65:44:d1:5d:50:a3:11:01:eb:eb:9b:22:9b:
                    7f:49:bf:e9:e7:ab:61:90:e6:c6:3b:08:49:17:4f:
                    d2:de:b1:42:5f:72:28:82:c0:fa:66:ad:16:1c:83:
                    8a:13:c3:ad:d8:33:ef:e8:1a:6b:16:b3:53:97:92:
                    4e:b4:51:3d:73:d1:2e:37:b2:03:60:66:31:36:d9:
                    1f:1d:56:d7:2f:35:8a:4a:b5:17:e2:88:99:21:b7:
                    d2:77:4e:46:f9:c9:37:d4:0e:3d:d4:10:34:d8:1e:
                    d5:5b:da:4b:0d:a9:f5:de:20:bf:da:8d:f4:45:6f:
                    3b:7f:ee:f9:b3:1d:fc:e5:c1:37:df:93:09:4d:21:
                    25:a1:17:9d:51:8b:30:73:84:0e:74:32:35:95:07:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5E:0E:82:A7:19:30:62:71:64:D8:E6:30:7B:EB:EC:8C:F1:59:11
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:51:03:ff:3f:6e:17:a7:ff:5b:7d:b6:2c:0c:45:77:91:
         eb:af:40:99:70:13:db:b4:ba:78:39:ba:3e:1a:94:5c:ac:8d:
         a9:04:33:9b:6b:69:34:25:67:18:59:0b:45:99:2a:42:83:60:
         c9:a5:61:98:55:bd:ed:b3:95:ae:08:2d:dc:cf:40:3f:42:b5:
         42:d1:39:6d:a9:4c:3e:d0:4e:91:bf:2b:2b:40:f4:da:77:88:
         d1:57:92:cb:50:0a:a0:4e:0e:37:ea:28:11:5d:a6:a0:71:09:
         b9:dd:50:80:ce:73:13:c6:34:da:4b:0b:8f:b1:86:d7:f2:d1:
         f1:91:2d:3e:5e:10:88:21:2b:9b:0b:e5:94:7b:d2:0b:76:5c:
         4c:de:87:13:13:bd:44:1e:7d:e7:6b:67:86:78:10:21:bc:8b:
         22:62:45:4e:39:f1:02:b6:49:19:60:8a:56:d2:54:d6:97:54:
         af:25:62:e7:7c:a8:e5:5d:dd:90:40:f9:9f:3d:6d:ba:50:9a:
         4a:b8:8b:cb:f3:e3:f8:76:b0:62:b1:18:eb:b1:8d:2b:2c:32:
         50:31:6a:b8:ac:55:d1:88:2d:a9:ba:da:0d:bc:21:e3:12:4f:
         d5:74:68:8d:0c:4b:67:d3:ef:07:26:f3:a3:74:17:86:d7:34:
         96:90:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:30 2025 by rpki-client