Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/323830333a613036303a3a2f33322d3438203d3e20323637383037.roa
File:                     323830333a613036303a3a2f33322d3438203d3e20323637383037.roa (raw, json)
Hash identifier:          xLdO0AQMz7s6hCEyJqK/XVXFgitc24MG/VluqwlKlRI=
Subject key identifier:   4F:D1:BB:68:FA:ED:B4:DE:08:2A:B5:73:A8:68:79:02:C7:4B:4F:51
Certificate issuer:       /CN=A2B7697124E3E04C84077E519A3633A382D4378C
Certificate serial:       516B7C2A7BFCDFB6B55783B29880CFD3BA3B51F2
Authority key identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/323830333a613036303a3a2f33322d3438203d3e20323637383037.roa
Signing time:             Thu 23 Jul 2026 01:26:58 +0000
ROA not before:           Thu 23 Jul 2026 01:21:58 +0000
ROA not after:            Thu 22 Jul 2027 01:26:58 +0000
asID:                     267807
IP address blocks:        2803:a060::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6b:7c:2a:7b:fc:df:b6:b5:57:83:b2:98:80:cf:d3:ba:3b:51:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B7697124E3E04C84077E519A3633A382D4378C
        Validity
            Not Before: Jul 23 01:21:58 2026 GMT
            Not After : Jul 22 01:26:58 2027 GMT
        Subject: CN=4FD1BB68FAEDB4DE082AB573A8687902C74B4F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:ae:b1:f5:0c:79:a8:04:56:a9:41:d3:6f:
                    bc:a1:bb:3c:90:7b:a5:2b:88:23:e8:17:e2:a1:d1:
                    84:aa:a4:fe:3e:ff:2f:72:bf:a7:ee:91:27:bd:7f:
                    9b:4f:52:ae:c4:5e:4d:0b:75:87:ab:89:00:2a:3c:
                    0b:67:0d:a1:42:fa:08:ea:0b:e6:f9:fd:03:d5:63:
                    d3:ab:7b:e1:ce:e1:9f:45:d7:a6:65:b3:07:42:3d:
                    dd:32:90:71:e5:31:ca:cc:f4:66:de:9e:b5:5a:b2:
                    2f:8e:bb:82:54:e0:ef:0a:6d:b4:d6:53:58:c2:ab:
                    26:ab:55:9d:a5:d2:4f:92:5c:af:da:e5:bc:63:1a:
                    2d:e2:4c:a7:fe:7c:b4:e6:a1:26:90:a7:c1:df:8e:
                    3b:db:0d:2e:5a:bf:87:f6:fa:05:f7:bc:52:56:ab:
                    80:29:65:e0:13:6f:75:be:4d:2a:ce:57:e0:00:14:
                    46:f8:77:34:63:b3:c4:35:79:ba:af:57:1e:6c:da:
                    28:08:ec:37:78:cf:2a:93:d8:2c:cd:18:04:34:ce:
                    27:07:dd:51:df:88:37:c3:55:d3:9c:90:34:48:3c:
                    7f:ea:83:60:62:9e:e4:ff:f1:7a:ad:fb:46:6e:dc:
                    73:d8:ed:5e:ea:c2:f1:ad:eb:eb:78:0f:8a:69:7e:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:BB:68:FA:ED:B4:DE:08:2A:B5:73:A8:68:79:02:C7:4B:4F:51
            X509v3 Authority Key Identifier:
                keyid:A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/323830333a613036303a3a2f33322d3438203d3e20323637383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a060::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:15:9e:84:eb:e0:d5:41:ff:a7:65:45:31:bf:1c:77:a2:
         7c:4d:d5:a1:03:70:fd:de:5b:f3:e4:01:4c:98:4f:9e:4f:d4:
         c8:63:c6:44:4d:da:8b:90:c0:08:73:b4:cf:f1:d3:9f:12:25:
         55:3e:8d:48:83:60:3f:e9:22:15:c2:1c:2a:18:f6:92:5f:79:
         26:60:ea:33:12:3e:37:6f:75:be:87:fa:94:6a:23:b9:da:23:
         fa:32:c1:83:31:19:47:7e:18:fe:58:46:09:66:ff:65:a2:77:
         3d:e8:e3:fe:64:ab:a1:33:35:5f:ea:68:5c:ff:d8:30:38:20:
         83:d4:2a:f6:c9:2e:4a:37:f5:08:a1:d0:4b:78:05:6a:cd:d3:
         48:f2:e3:f9:d8:82:84:1d:9e:f6:7e:d2:a7:d7:62:b1:ea:90:
         21:48:df:19:3b:14:03:91:74:61:57:8e:a7:93:df:b5:dc:9b:
         8e:ef:fe:da:34:a1:2f:fc:06:fc:6b:fa:e5:59:10:77:3b:78:
         cd:6c:9c:10:bb:4d:69:e0:42:da:ba:60:1d:b0:6c:96:3b:c6:
         56:09:93:50:4a:cd:63:1a:fc:26:38:e4:f0:b9:83:5f:24:78:
         2d:a8:47:5c:c5:48:0c:21:ec:4a:cd:61:09:b8:93:69:95:1e:
         a8:b2:58:5c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUWt8Knv837a1V4OymIDP07o7UfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCNzY5NzEyNEUzRTA0Qzg0MDc3RTUxOUEzNjMzQTM4
MkQ0Mzc4QzAeFw0yNjA3MjMwMTIxNThaFw0yNzA3MjIwMTI2NThaMDMxMTAvBgNV
BAMTKDRGRDFCQjY4RkFFREI0REUwODJBQjU3M0E4Njg3OTAyQzc0QjRGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWK6x9Qx5qARWqUHTb7yhuzyQ
e6UriCPoF+Kh0YSqpP4+/y9yv6fukSe9f5tPUq7EXk0LdYeriQAqPAtnDaFC+gjq
C+b5/QPVY9Ore+HO4Z9F16ZlswdCPd0ykHHlMcrM9GbenrVasi+Ou4JU4O8KbbTW
U1jCqyarVZ2l0k+SXK/a5bxjGi3iTKf+fLTmoSaQp8HfjjvbDS5av4f2+gX3vFJW
q4ApZeATb3W+TSrOV+AAFEb4dzRjs8Q1ebqvVx5s2igI7Dd4zyqT2CzNGAQ0zicH
3VHfiDfDVdOckDRIPH/qg2BinuT/8Xqt+0Zu3HPY7V7qwvGt6+t4D4ppfiEdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUT9G7aPrttN4IKrVzqGh5AsdLT1EwHwYDVR0j
BBgwFoAUordpcSTj4EyEB35RmjYzo4LUN4wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkYzMkQzN0MxNzY4OTVCNDE3RjA3NjE0NTdFRDZEQzY3
NTdDOTRFM0YxQjhBN0YyQjc1NUNCNzU1QjVEQThELzAvQTJCNzY5NzEyNEUzRTA0
Qzg0MDc3RTUxOUEzNjMzQTM4MkQ0Mzc4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMkI3Njk3MTI0RTNFMDRDODQw
NzdFNTE5QTM2MzNBMzgyRDQzNzhDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJGMzJEMzdDMTc2ODk1QjQxN0YwNzYxNDU3RUQ2REM2NzU3Qzk0RTNG
MUI4QTdGMkI3NTVDQjc1NUI1REE4RC8wLzMyMzgzMDMzM2E2MTMwMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDoGAw
DQYJKoZIhvcNAQELBQADggEBAKE/FZ6E6+DVQf+nZUUxvxx3onxN1aEDcP3eW/Pk
AUyYT55P1MhjxkRN2ouQwAhztM/x058SJVU+jUiDYD/pIhXCHCoY9pJfeSZg6jMS
Pjdvdb6H+pRqI7naI/oywYMxGUd+GP5YRglm/2Widz3o4/5kq6EzNV/qaFz/2DA4
IIPUKvbJLko39Qih0Et4BWrN00jy4/nYgoQdnvZ+0qfXYrHqkCFI3xk7FAORdGFX
jqeT37Xcm47v/to0oS/8Bvxr+uVZEHc7eM1snBC7TWngQtq6YB2wbJY7xlYJk1BK
zWMa/CY45PC5g18keC2oR1zFSAwh7ErNYQm4k2mVHqiyWFw=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:17:35 2026 by rpki-client