Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a343030303a3a2f33342d3334203d3e20323732303533.roa
File:                     323830333a356431303a343030303a3a2f33342d3334203d3e20323732303533.roa (raw, json)
Hash identifier:          Azj/ufYMUK0Hg+EwqLPrfBSj0IuZVwfcE2n+DRu8zXM=
Subject key identifier:   0D:CD:A6:94:30:9B:EA:6C:81:9C:79:C3:6F:12:5F:90:BE:F7:28:91
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       078CE71434CBBD5DC74BFD7AAD31D0B5DE419989
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a343030303a3a2f33342d3334203d3e20323732303533.roa
Signing time:             Mon 23 Mar 2026 17:50:01 +0000
ROA not before:           Mon 23 Mar 2026 17:45:01 +0000
ROA not after:            Mon 22 Mar 2027 17:50:01 +0000
asID:                     272053
IP address blocks:        2803:5d10:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:e7:14:34:cb:bd:5d:c7:4b:fd:7a:ad:31:d0:b5:de:41:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: Mar 23 17:45:01 2026 GMT
            Not After : Mar 22 17:50:01 2027 GMT
        Subject: CN=0DCDA694309BEA6C819C79C36F125F90BEF72891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:04:2f:44:b3:de:5d:df:c5:af:e1:50:6d:
                    ce:6c:53:43:d5:c0:88:0e:43:46:21:1d:24:4a:28:
                    e6:46:3e:60:ae:f0:1c:06:d4:51:76:a5:fa:89:48:
                    3a:71:7a:d4:e7:b7:4b:24:ae:5b:83:d0:37:a8:6f:
                    cf:2b:80:00:0f:9e:ef:ba:62:62:c7:d3:74:19:8e:
                    95:9d:e9:a5:bb:7a:c1:cd:9a:dc:71:df:f1:79:57:
                    cf:08:e7:b6:af:b7:72:11:ff:37:55:d4:5c:5e:d6:
                    7d:d3:67:33:c7:3f:25:2d:cc:e5:06:b5:71:30:c8:
                    39:9e:02:c3:3a:21:b8:37:7f:e4:7f:f5:96:8b:1d:
                    35:2e:d0:0a:15:a0:9f:0e:55:11:f7:29:fd:67:38:
                    9c:83:4c:69:34:73:48:e3:ad:89:0d:0f:c8:da:ce:
                    8d:98:d7:a1:fc:c0:b2:2e:28:f9:a6:45:78:d1:9b:
                    eb:30:c7:fa:62:8a:07:39:fb:c7:17:c2:8d:28:ab:
                    cc:e6:0c:c7:5d:c6:a3:2e:cc:29:d1:c4:55:78:ad:
                    85:ea:f9:57:ba:f3:e0:87:5f:0f:1f:67:3e:50:6c:
                    16:35:30:c5:37:5c:e1:cf:fa:33:7f:52:32:63:8b:
                    52:92:c6:97:bf:fa:79:f0:49:d0:ba:69:59:d7:fa:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:A6:94:30:9B:EA:6C:81:9C:79:C3:6F:12:5F:90:BE:F7:28:91
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a343030303a3a2f33342d3334203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:c8:9f:6e:a1:77:11:ea:79:d9:71:2e:8b:aa:1a:a9:70:
         8f:f5:8b:cc:3d:e3:93:8a:dc:93:ba:1e:5b:c4:3b:19:f4:ff:
         ac:c9:a0:d5:8c:ab:09:a2:92:1d:51:c4:00:32:95:74:49:a9:
         01:0e:16:1e:46:06:d9:9e:6c:04:be:68:15:b1:cb:64:20:8b:
         a0:1b:45:a2:c3:1f:7c:b6:5c:09:65:ed:81:5e:c1:90:54:03:
         03:2c:75:e4:af:05:a4:53:97:bc:fb:ce:21:3b:1c:02:72:f4:
         a9:5e:31:a6:d7:af:97:22:42:b4:31:4a:54:2a:7a:cf:5c:19:
         f6:15:ff:04:b5:04:70:9f:2e:c9:2b:d8:00:ed:7c:78:ec:14:
         6e:e1:55:34:a7:b1:30:ed:15:4a:7e:52:91:62:9a:95:dc:f2:
         d3:a4:fb:00:fb:64:e8:88:06:71:48:39:2f:3f:b6:af:a9:da:
         9b:d8:22:d7:47:83:b5:e2:ec:fe:e7:ec:80:be:b0:fe:bb:8e:
         2f:b1:5e:b7:46:b3:5c:c0:71:f6:2e:a9:b2:c5:2f:89:53:e8:
         ab:51:c2:d9:fa:ad:f4:bd:87:d9:f9:d7:76:b1:73:af:c8:1a:
         40:ee:ec:98:27:9b:1c:6e:75:f0:00:b7:e7:6d:a4:79:e0:4a:
         6e:68:5a:c0
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUB4znFDTLvV3HS/16rTHQtd5BmYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDMkI1ODJBMzhBNzczQjZBNzU1QkY2RDZFMzAyNjU4
NENBRjJGMTAeFw0yNjAzMjMxNzQ1MDFaFw0yNzAzMjIxNzUwMDFaMDMxMTAvBgNV
BAMTKDBEQ0RBNjk0MzA5QkVBNkM4MTlDNzlDMzZGMTI1RjkwQkVGNzI4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZAQvRLPeXd/Fr+FQbc5sU0PV
wIgOQ0YhHSRKKOZGPmCu8BwG1FF2pfqJSDpxetTnt0skrluD0Deob88rgAAPnu+6
YmLH03QZjpWd6aW7esHNmtxx3/F5V88I57avt3IR/zdV1Fxe1n3TZzPHPyUtzOUG
tXEwyDmeAsM6Ibg3f+R/9ZaLHTUu0AoVoJ8OVRH3Kf1nOJyDTGk0c0jjrYkND8ja
zo2Y16H8wLIuKPmmRXjRm+swx/piigc5+8cXwo0oq8zmDMddxqMuzCnRxFV4rYXq
+Ve68+CHXw8fZz5QbBY1MMU3XOHP+jN/UjJji1KSxpe/+nnwSdC6aVnX+sGxAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUDc2mlDCb6myBnHnDbxJfkL73KJEwHwYDVR0j
BBgwFoAU88K1gqOKdztqdVv21uMCZYTK8vEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODA4OUIwOEU1N0VGQzI4OENEQ0ZBNkNDMThGNzUxRkZE
NkE0NkUwN0VFMjJCNDE2NjAxQTQ0RjQ0RjcxMEYwLzAvRjNDMkI1ODJBMzhBNzcz
QjZBNzU1QkY2RDZFMzAyNjU4NENBRjJGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GM0MyQjU4MkEzOEE3NzNCNkE3
NTVCRjZENkUzMDI2NTg0Q0FGMkYxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDgwODlCMDhFNTdFRkMyODhDRENGQTZDQzE4Rjc1MUZGRDZBNDZFMDdF
RTIyQjQxNjYwMUE0NEY0NEY3MTBGMC8wLzMyMzgzMDMzM2EzNTY0MzEzMDNhMzQz
MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzIzMDM1MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgYoA10QQDANBgkqhkiG9w0BAQsFAAOCAQEAnhzIn26hdxHqedlxLouqGqlw
j/WLzD3jk4rck7oeW8Q7GfT/rMmg1YyrCaKSHVHEADKVdEmpAQ4WHkYG2Z5sBL5o
FbHLZCCLoBtFosMffLZcCWXtgV7BkFQDAyx15K8FpFOXvPvOITscAnL0qV4xptev
lyJCtDFKVCp6z1wZ9hX/BLUEcJ8uySvYAO18eOwUbuFVNKexMO0VSn5SkWKaldzy
06T7APtk6IgGcUg5Lz+2r6nam9gi10eDteLs/ufsgL6w/ruOL7Fet0azXMBx9i6p
ssUviVPoq1HC2fqt9L2H2fnXdrFzr8gaQO7smCebHG518AC3522keeBKbmhawA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:08:33 2026 by rpki-client