Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa
File:                     323830333a6464303a3a2f33322d3438203d3e20323734313833.roa (raw, json)
Hash identifier:          uSjfLA86nM97b3NCCpCOUfH5CRpvMD9/AiiSg1WHTpU=
Subject key identifier:   2B:28:EA:06:94:51:9E:94:33:CE:BF:9C:42:9A:81:2C:04:47:A3:36
Certificate issuer:       /CN=1C16C74806E76A43254B7956DCD705E7D260C85E
Certificate serial:       3A17CF38D744ADF2EDB40A2C0B1CB1F3BFBC1B91
Authority key identifier: 1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa
Signing time:             Mon 07 Sep 2026 21:34:11 +0000
ROA not before:           Mon 07 Sep 2026 21:29:11 +0000
ROA not after:            Mon 06 Sep 2027 21:34:11 +0000
asID:                     274183
IP address blocks:        2803:dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 04:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:17:cf:38:d7:44:ad:f2:ed:b4:0a:2c:0b:1c:b1:f3:bf:bc:1b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C16C74806E76A43254B7956DCD705E7D260C85E
        Validity
            Not Before: Sep  7 21:29:11 2026 GMT
            Not After : Sep  6 21:34:11 2027 GMT
        Subject: CN=2B28EA0694519E9433CEBF9C429A812C0447A336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:db:32:33:d9:b1:ab:14:0d:7e:39:c9:05:
                    98:31:83:b8:2b:3f:31:67:d6:e6:83:86:82:08:e4:
                    f5:0c:81:f0:db:35:67:d2:28:da:8d:26:dc:a5:b0:
                    e8:8f:93:c6:c2:7d:67:4c:b1:6a:14:aa:60:4a:7f:
                    3e:8f:af:32:23:26:e0:81:cb:c3:80:ce:83:bd:5c:
                    ad:b2:28:10:ff:f1:e4:49:26:c5:8d:b5:87:53:a3:
                    87:21:b9:76:e3:c6:e1:bb:52:77:c0:fb:19:4e:b6:
                    d0:0e:fa:d2:a2:0f:2f:c4:59:92:81:f5:70:9a:de:
                    b5:2f:0e:2f:fd:16:ab:52:41:56:82:8a:4c:81:bc:
                    9c:d3:54:eb:e5:b2:bb:23:d2:a0:14:7d:2d:60:dc:
                    97:9c:f1:8f:5a:26:45:94:a1:a8:c5:f3:fb:ea:f9:
                    e1:1a:f3:56:2e:3c:d6:42:31:20:76:a3:38:7c:12:
                    49:39:60:3f:89:1d:1f:2b:81:d3:48:18:51:bb:36:
                    03:f1:67:ff:63:34:81:50:31:91:d0:a6:32:ef:b2:
                    c3:5f:6d:25:46:69:f5:06:5c:60:26:1e:4e:6f:e8:
                    b3:58:4d:33:e0:55:7a:c5:29:a4:d5:0d:9b:1e:2c:
                    a8:11:94:e7:70:f1:cd:51:3e:44:1c:42:a7:ed:ab:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:28:EA:06:94:51:9E:94:33:CE:BF:9C:42:9A:81:2C:04:47:A3:36
            X509v3 Authority Key Identifier:
                keyid:1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323734313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:da:d1:fe:c2:70:53:83:4e:a5:7a:66:5e:f9:e4:15:98:4c:
         ee:a6:79:df:c2:62:dd:50:9d:15:bb:97:ef:ab:a6:0f:d5:a2:
         c0:f1:8d:70:11:ac:67:e6:a6:10:7a:34:a8:e1:21:35:e5:31:
         a2:3b:d4:b0:6e:9d:55:23:86:6c:b8:de:00:e6:af:dd:76:23:
         d1:92:b4:09:17:9f:2e:92:8e:8e:68:7f:3a:91:d3:34:c7:6c:
         e0:86:fb:a1:0f:d3:1c:ef:7d:01:14:37:56:e7:1d:ac:6d:83:
         26:b8:09:23:31:d5:a8:ce:14:54:d0:a0:42:30:35:fa:df:f5:
         11:e8:c5:3c:d1:74:7b:01:c0:e1:6b:2e:ed:16:7e:66:36:f2:
         1b:5c:a2:e4:6a:26:f2:93:5e:7c:1e:5d:5a:d1:df:30:e7:9b:
         13:aa:88:b4:0d:82:57:90:bd:0f:ae:8a:e4:f5:24:15:fe:d5:
         ee:22:b4:d8:6b:87:61:da:52:4c:b8:84:a4:e2:ff:04:0c:95:
         39:f3:2c:88:5c:af:42:77:1d:0e:bd:f0:74:d5:07:98:26:67:
         1c:51:0a:ca:01:61:37:12:7c:88:71:90:8f:a4:7a:7f:c9:d0:
         31:09:15:dd:bc:2b:b7:ac:3c:62:4b:87:6a:b8:5b:ff:80:6a:
         78:06:75:6f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOhfPONdErfLttAosCxyx87+8G5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMxNkM3NDgwNkU3NkE0MzI1NEI3OTU2RENENzA1RTdE
MjYwQzg1RTAeFw0yNjA5MDcyMTI5MTFaFw0yNzA5MDYyMTM0MTFaMDMxMTAvBgNV
BAMTKDJCMjhFQTA2OTQ1MTlFOTQzM0NFQkY5QzQyOUE4MTJDMDQ0N0EzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0tsyM9mxqxQNfjnJBZgxg7gr
PzFn1uaDhoII5PUMgfDbNWfSKNqNJtylsOiPk8bCfWdMsWoUqmBKfz6PrzIjJuCB
y8OAzoO9XK2yKBD/8eRJJsWNtYdTo4chuXbjxuG7UnfA+xlOttAO+tKiDy/EWZKB
9XCa3rUvDi/9FqtSQVaCikyBvJzTVOvlsrsj0qAUfS1g3Jec8Y9aJkWUoajF8/vq
+eEa81YuPNZCMSB2ozh8Ekk5YD+JHR8rgdNIGFG7NgPxZ/9jNIFQMZHQpjLvssNf
bSVGafUGXGAmHk5v6LNYTTPgVXrFKaTVDZseLKgRlOdw8c1RPkQcQqftqxlLAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUKyjqBpRRnpQzzr+cQpqBLARHozYwHwYDVR0j
BBgwFoAUHBbHSAbnakMlS3lW3NcF59JgyF4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjgyQzM2N0VGRUZBODFDOEM1NTU2MkRFNUM5ODBGQzBF
Q0RERDQzMTZDODM3RDYzQUE1QkE3NDk4QTVCOUY1LzAvMUMxNkM3NDgwNkU3NkE0
MzI1NEI3OTU2RENENzA1RTdEMjYwQzg1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQzE2Qzc0ODA2RTc2QTQzMjU0
Qjc5NTZEQ0Q3MDVFN0QyNjBDODVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4MkMzNjdFRkVGQTgxQzhDNTU1NjJERTVDOTgwRkMwRUNEREQ0MzE2
QzgzN0Q2M0FBNUJBNzQ5OEE1QjlGNS8wLzMyMzgzMDMzM2E2NDY0MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzQzMTM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw3QMA0G
CSqGSIb3DQEBCwUAA4IBAQBP2tH+wnBTg06lemZe+eQVmEzupnnfwmLdUJ0Vu5fv
q6YP1aLA8Y1wEaxn5qYQejSo4SE15TGiO9Swbp1VI4ZsuN4A5q/ddiPRkrQJF58u
ko6OaH86kdM0x2zghvuhD9Mc730BFDdW5x2sbYMmuAkjMdWozhRU0KBCMDX63/UR
6MU80XR7AcDhay7tFn5mNvIbXKLkaibyk158Hl1a0d8w55sTqoi0DYJXkL0Prork
9SQV/tXuIrTYa4dh2lJMuISk4v8EDJU58yyIXK9Cdx0OvfB01QeYJmccUQrKAWE3
EnyIcZCPpHp/ydAxCRXdvCu3rDxiS4dquFv/gGp4BnVv
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:27:41 2026 by rpki-client