Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          ITPM3V27KxCubqpdjLYmTzU+jDHW02gMwRIG3WzDR20=
Subject key identifier:   BD:51:D7:67:74:C9:C4:0F:58:AB:94:00:6C:A5:6D:9E:ED:C2:A9:8D
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       3E9DAF7B89702FF433F7A66EA2E22D5C91EB9405
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:40 +0000
ROA not before:           Fri 03 Jul 2026 01:45:40 +0000
ROA not after:            Fri 02 Jul 2027 01:50:40 +0000
asID:                     273832
IP address blocks:        2803:8950:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9d:af:7b:89:70:2f:f4:33:f7:a6:6e:a2:e2:2d:5c:91:eb:94:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:40 2026 GMT
            Not After : Jul  2 01:50:40 2027 GMT
        Subject: CN=BD51D76774C9C40F58AB94006CA56D9EEDC2A98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:c8:93:07:c4:2d:a4:15:52:fb:c6:e2:58:
                    45:0d:d5:af:0d:f4:58:94:07:95:a7:e1:bd:f5:ce:
                    0f:c0:1b:93:77:b8:31:5c:db:5f:4c:d5:c7:3e:8e:
                    80:c4:05:45:16:ce:f3:28:d5:12:7e:b7:62:31:72:
                    d9:d2:6b:dc:6e:16:9f:4d:50:85:29:74:6a:5d:cf:
                    7f:b4:d6:97:db:d1:da:84:87:e3:88:35:c0:e8:0c:
                    dd:13:ea:9b:0e:7b:b7:3b:f5:54:3d:ee:58:3a:52:
                    19:54:ff:26:5a:9d:7e:74:9b:ee:d4:69:3c:c2:75:
                    07:aa:e9:28:2a:ef:0b:97:19:c5:7d:cc:6f:34:42:
                    71:b7:07:1b:f6:20:3a:b4:83:e8:5b:32:07:c4:6f:
                    50:e8:4d:e6:6c:e1:f6:27:5c:35:7a:0b:fd:dd:90:
                    e4:d0:ff:91:27:68:54:3c:af:8d:20:3c:33:c8:09:
                    b4:bd:57:61:d5:d3:e9:92:63:26:64:92:06:ec:90:
                    7a:38:41:87:5a:99:29:8f:a3:f2:a5:47:34:e3:79:
                    11:86:c7:a5:2b:8b:a6:c2:55:29:f5:16:32:e3:9f:
                    98:32:46:1d:c3:c2:90:ee:ae:7a:16:5c:5a:5c:21:
                    ac:a4:a9:03:ae:c5:ba:7d:a2:cb:42:e4:81:91:9b:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:D7:67:74:C9:C4:0F:58:AB:94:00:6C:A5:6D:9E:ED:C2:A9:8D
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3230303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:48:b3:0e:0b:42:5c:68:41:a1:39:c1:af:6b:e2:32:9b:
         da:8f:a8:62:f6:6f:c6:44:9d:44:d1:9b:7b:5c:0b:e0:50:97:
         6e:57:97:f9:78:e8:71:d8:9b:08:48:c1:72:21:06:98:69:e7:
         cd:32:80:bb:b8:78:6a:4f:de:c6:8a:05:42:7a:cd:6a:a2:2b:
         5c:c4:f1:ba:c4:18:01:52:b8:40:b4:99:30:1d:25:5c:61:7f:
         b0:22:43:7c:fa:ab:e4:2c:5b:7e:ba:8f:99:2f:e3:dc:6a:b2:
         9b:9b:23:2e:67:b3:40:17:5a:18:17:8f:70:67:0b:17:a6:2d:
         b2:1c:55:fe:e4:e2:91:01:dd:b6:66:a7:e2:92:d2:a0:1b:f4:
         14:ac:25:0b:c6:10:d1:27:a4:11:02:13:37:f4:c1:7d:c0:a9:
         05:5a:6b:2c:37:47:fa:93:a0:81:ff:fa:fa:0f:01:63:b2:4a:
         ba:bf:91:71:a3:c6:14:6c:95:fe:07:c7:bc:a1:6f:2b:d5:7a:
         ee:63:79:41:13:91:bf:6f:31:ce:3c:43:9c:2f:1a:8f:3b:41:
         e6:b8:41:ff:99:c6:54:23:75:b6:3c:24:e7:97:f6:18:93:df:
         d5:85:05:a1:e9:f8:60:8d:dd:27:95:84:b9:5f:d9:0d:0d:c8:
         e6:7c:94:76
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPp2ve4lwL/Qz96ZuouItXJHrlAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkxOTgwMTcyOTdFMjY2Mjk1N0I2RjI3NjE2RkY3QTQ0
QTgxMjk4QTAeFw0yNjA3MDMwMTQ1NDBaFw0yNzA3MDIwMTUwNDBaMDMxMTAvBgNV
BAMTKEJENTFENzY3NzRDOUM0MEY1OEFCOTQwMDZDQTU2RDlFRURDMkE5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemciTB8QtpBVS+8biWEUN1a8N
9FiUB5Wn4b31zg/AG5N3uDFc219M1cc+joDEBUUWzvMo1RJ+t2IxctnSa9xuFp9N
UIUpdGpdz3+01pfb0dqEh+OINcDoDN0T6psOe7c79VQ97lg6UhlU/yZanX50m+7U
aTzCdQeq6Sgq7wuXGcV9zG80QnG3Bxv2IDq0g+hbMgfEb1DoTeZs4fYnXDV6C/3d
kOTQ/5EnaFQ8r40gPDPICbS9V2HV0+mSYyZkkgbskHo4QYdamSmPo/KlRzTjeRGG
x6Uri6bCVSn1FjLjn5gyRh3DwpDurnoWXFpcIaykqQOuxbp9ostC5IGRm0hzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUvVHXZ3TJxA9Yq5QAbKVtnu3CqY0wHwYDVR0j
BBgwFoAU6RmAFyl+JmKVe28nYW/3pEqBKYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjJBNDFGOEUyOUIzNzVFNDVFOTBFMDFBQjI3QTc0QTY1
NTdCRTcwQjgxRkZEQjVGNTYzQTlFQ0MzNTVFMEIxLzAvRTkxOTgwMTcyOTdFMjY2
Mjk1N0I2RjI3NjE2RkY3QTQ0QTgxMjk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTE5ODAxNzI5N0UyNjYyOTU3
QjZGMjc2MTZGRjdBNDRBODEyOThBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUIyQTQxRjhFMjlCMzc1RTQ1RTkwRTAxQUIyN0E3NEE2NTU3QkU3MEI4
MUZGREI1RjU2M0E5RUNDMzU1RTBCMS8wLzMyMzgzMDMzM2EzODM5MzUzMDNhMzIz
MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzgzMzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAOJUAIAMA0GCSqGSIb3DQEBCwUAA4IBAQA6oEizDgtCXGhBoTnBr2viMpva
j6hi9m/GRJ1E0Zt7XAvgUJduV5f5eOhx2JsISMFyIQaYaefNMoC7uHhqT97GigVC
es1qoitcxPG6xBgBUrhAtJkwHSVcYX+wIkN8+qvkLFt+uo+ZL+PcarKbmyMuZ7NA
F1oYF49wZwsXpi2yHFX+5OKRAd22ZqfiktKgG/QUrCULxhDRJ6QRAhM39MF9wKkF
WmssN0f6k6CB//r6DwFjskq6v5Fxo8YUbJX+B8e8oW8r1XruY3lBE5G/bzHOPEOc
LxqPO0HmuEH/mcZUI3W2PCTnl/YYk9/VhQWh6fhgjd0nlYS5X9kNDcjmfJR2
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:57:07 2026 by rpki-client