Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/323830333a383133303a3a2f33322d3438203d3e20323734393138.roa
File:                     323830333a383133303a3a2f33322d3438203d3e20323734393138.roa (raw, json)
Hash identifier:          IjV0524xyDHYB7BeHKz0QI0CnV69yICRw640UexZRmE=
Subject key identifier:   3B:32:94:92:92:BE:7D:68:CA:D2:1F:54:20:9C:CA:0D:B6:8A:63:EA
Certificate issuer:       /CN=788AD40AECCFC037C37A06EE3AE1915A27BD3589
Certificate serial:       0E765E55E1CC8D07BD4224BBB76FFF5697963B92
Authority key identifier: 78:8A:D4:0A:EC:CF:C0:37:C3:7A:06:EE:3A:E1:91:5A:27:BD:35:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/323830333a383133303a3a2f33322d3438203d3e20323734393138.roa
Signing time:             Fri 08 May 2026 12:10:00 +0000
ROA not before:           Fri 08 May 2026 12:05:00 +0000
ROA not after:            Fri 07 May 2027 12:10:00 +0000
asID:                     274918
IP address blocks:        2803:8130::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:76:5e:55:e1:cc:8d:07:bd:42:24:bb:b7:6f:ff:56:97:96:3b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788AD40AECCFC037C37A06EE3AE1915A27BD3589
        Validity
            Not Before: May  8 12:05:00 2026 GMT
            Not After : May  7 12:10:00 2027 GMT
        Subject: CN=3B32949292BE7D68CAD21F54209CCA0DB68A63EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:71:46:6c:c6:8e:36:bd:e2:e2:a2:6d:b1:
                    76:9c:fe:1f:c4:09:c8:28:f2:19:1e:67:1a:7c:a8:
                    39:b8:d7:28:de:f6:b0:b2:eb:49:28:4f:3f:37:4a:
                    51:f0:60:ef:40:03:ab:1d:2c:a4:a4:2d:ea:73:2e:
                    8e:9d:22:44:fe:d9:d6:a0:32:79:6b:ba:05:3f:bd:
                    5f:68:18:b4:b1:56:eb:17:83:b8:ea:e9:ce:05:99:
                    4b:30:c1:6b:3b:e4:d6:b8:72:8d:5d:8f:df:0b:8e:
                    36:2d:d8:5b:b7:6a:f6:45:fc:2a:3f:b3:a6:fc:9e:
                    68:17:3a:b9:ed:5b:e0:f3:ee:76:da:30:52:5b:ed:
                    d7:65:be:65:66:84:7b:13:f3:c0:b3:4f:62:20:bf:
                    f8:2e:2a:75:9a:67:7f:6d:eb:50:52:b6:ef:b3:e1:
                    eb:bc:1e:0b:fa:e1:16:f4:48:c2:ad:6d:93:c5:57:
                    82:e6:6e:c2:8f:44:76:41:9a:47:f6:a8:2f:36:41:
                    17:70:ab:5f:48:1e:58:95:fe:8f:1f:5d:7e:72:8a:
                    78:30:ce:6b:e9:e1:16:40:ac:af:3f:fc:c5:18:dc:
                    89:6f:63:78:f7:86:c1:8a:46:31:54:6d:db:31:86:
                    2a:8b:2b:e0:9a:ff:b6:aa:bb:54:f1:b1:c2:d9:07:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:94:92:92:BE:7D:68:CA:D2:1F:54:20:9C:CA:0D:B6:8A:63:EA
            X509v3 Authority Key Identifier:
                keyid:78:8A:D4:0A:EC:CF:C0:37:C3:7A:06:EE:3A:E1:91:5A:27:BD:35:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/788AD40AECCFC037C37A06EE3AE1915A27BD3589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E4DD692BCC48F12E063A68B3F1EECB97FE6E0DAB09DBAC91A5DBBB779CAFF59/0/323830333a383133303a3a2f33322d3438203d3e20323734393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8130::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:21:eb:8d:9f:a8:d9:90:27:25:48:60:65:91:33:55:88:90:
         9c:19:ec:57:b6:d2:26:f2:22:44:58:6e:1e:18:ec:6a:18:61:
         7f:97:2d:f0:d8:af:f6:44:6b:09:07:1d:44:59:91:aa:93:39:
         f5:be:9d:b5:86:87:8e:56:cd:6e:64:62:c7:46:75:a9:ee:23:
         23:4a:21:cc:d1:14:78:d1:76:7c:95:41:6c:3a:13:99:d4:c9:
         12:e6:80:31:12:9e:ee:87:c0:b6:95:97:91:27:fa:3a:0b:11:
         cc:69:4a:75:a5:85:44:4c:a1:88:37:43:16:3a:6d:98:3e:37:
         91:f6:b7:ab:b5:dd:cb:3c:a7:8a:3d:27:3a:62:1b:a2:41:62:
         98:f3:31:dc:06:e1:26:a1:59:af:fa:ce:81:89:32:d0:7b:32:
         1d:ed:41:2e:a6:59:e0:aa:b9:2d:12:52:1c:2f:53:6b:fc:0b:
         52:70:55:93:74:9f:24:be:9a:eb:69:04:66:e9:f6:b3:fd:51:
         92:41:3a:a1:b3:ba:f3:d8:a7:10:fc:d2:88:33:26:dc:05:17:
         58:73:33:d8:bc:7a:c7:17:73:24:e7:30:19:f7:18:88:b8:ce:
         8e:43:f5:8c:a2:8b:16:e8:78:2d:99:45:fb:8d:67:e0:2e:44:
         75:fa:3e:19
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDnZeVeHMjQe9QiS7t2//VpeWO5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg4QUQ0MEFFQ0NGQzAzN0MzN0EwNkVFM0FFMTkxNUEy
N0JEMzU4OTAeFw0yNjA1MDgxMjA1MDBaFw0yNzA1MDcxMjEwMDBaMDMxMTAvBgNV
BAMTKDNCMzI5NDkyOTJCRTdENjhDQUQyMUY1NDIwOUNDQTBEQjY4QTYzRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQnFGbMaONr3i4qJtsXac/h/E
Ccgo8hkeZxp8qDm41yje9rCy60koTz83SlHwYO9AA6sdLKSkLepzLo6dIkT+2dag
MnlrugU/vV9oGLSxVusXg7jq6c4FmUswwWs75Na4co1dj98LjjYt2Fu3avZF/Co/
s6b8nmgXOrntW+Dz7nbaMFJb7ddlvmVmhHsT88CzT2Igv/guKnWaZ39t61BStu+z
4eu8Hgv64Rb0SMKtbZPFV4LmbsKPRHZBmkf2qC82QRdwq19IHliV/o8fXX5yingw
zmvp4RZArK8//MUY3IlvY3j3hsGKRjFUbdsxhiqLK+Ca/7aqu1TxscLZB+ivAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOzKUkpK+fWjK0h9UIJzKDbaKY+owHwYDVR0j
BBgwFoAUeIrUCuzPwDfDegbuOuGRWie9NYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTRERDY5MkJDQzQ4RjEyRTA2M0E2OEIzRjFFRUNCOTdG
RTZFMERBQjA5REJBQzkxQTVEQkJCNzc5Q0FGRjU5LzAvNzg4QUQ0MEFFQ0NGQzAz
N0MzN0EwNkVFM0FFMTkxNUEyN0JEMzU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODhBRDQwQUVDQ0ZDMDM3QzM3
QTA2RUUzQUUxOTE1QTI3QkQzNTg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEU0REQ2OTJCQ0M0OEYxMkUwNjNBNjhCM0YxRUVDQjk3RkU2RTBEQUIw
OURCQUM5MUE1REJCQjc3OUNBRkY1OS8wLzMyMzgzMDMzM2EzODMxMzMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDM5MzEzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgTAw
DQYJKoZIhvcNAQELBQADggEBABoh642fqNmQJyVIYGWRM1WIkJwZ7Fe20ibyIkRY
bh4Y7GoYYX+XLfDYr/ZEawkHHURZkaqTOfW+nbWGh45WzW5kYsdGdanuIyNKIczR
FHjRdnyVQWw6E5nUyRLmgDESnu6HwLaVl5En+joLEcxpSnWlhURMoYg3QxY6bZg+
N5H2t6u13cs8p4o9JzpiG6JBYpjzMdwG4SahWa/6zoGJMtB7Mh3tQS6mWeCquS0S
UhwvU2v8C1JwVZN0nyS+mutpBGbp9rP9UZJBOqGzuvPYpxD80ogzJtwFF1hzM9i8
escXcyTnMBn3GIi4zo5D9YyiixboeC2ZRfuNZ+AuRHX6Phk=
-----END CERTIFICATE-----
Generated at Wed May 13 16:05:34 2026 by rpki-client