Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa
File:                     323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa (raw, json)
Hash identifier:          sj8AY77hrrbYzVdGiqZ18paCpZPpUy9Bgm84c5aNTgk=
Subject key identifier:   F1:FD:8B:74:FD:DE:B1:C7:08:5A:9B:6E:7F:5F:EF:8D:82:C9:D9:99
Certificate issuer:       /CN=2522843848570F9C59A0A97D0D85367C510D573A
Certificate serial:       509C992D74CD240A967C363BF5EAA37EC58768AD
Authority key identifier: 25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa
Signing time:             Sun 03 May 2026 22:40:49 +0000
ROA not before:           Sun 03 May 2026 22:35:49 +0000
ROA not after:            Sun 02 May 2027 22:40:49 +0000
asID:                     273869
IP address blocks:        2803:ed50:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:99:2d:74:cd:24:0a:96:7c:36:3b:f5:ea:a3:7e:c5:87:68:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2522843848570F9C59A0A97D0D85367C510D573A
        Validity
            Not Before: May  3 22:35:49 2026 GMT
            Not After : May  2 22:40:49 2027 GMT
        Subject: CN=F1FD8B74FDDEB1C7085A9B6E7F5FEF8D82C9D999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:31:ce:63:c3:1b:6b:71:7c:64:9f:96:88:
                    60:70:af:29:2a:04:a4:ef:3b:58:08:76:18:45:44:
                    fd:2e:40:6e:10:4b:33:0a:7c:cd:98:98:35:e4:30:
                    dc:ff:9e:0f:1e:75:96:a3:71:ae:6a:e4:92:5d:3d:
                    6f:81:9f:5f:b6:b5:b7:06:f5:ba:28:ad:92:a0:47:
                    14:a4:45:e2:5b:fd:8b:4f:a6:bf:10:c7:82:21:4b:
                    f1:e0:be:f1:5b:d3:82:aa:c5:f1:4a:9f:64:01:36:
                    e9:4c:13:06:b3:e4:c5:71:3d:38:a5:1c:05:43:5d:
                    b2:3b:e8:88:9e:89:e2:e7:c6:d3:2f:67:e0:7b:25:
                    2a:b9:23:fd:02:d8:23:4d:bc:9b:a7:11:f2:b1:01:
                    e0:8b:c1:89:e4:f4:74:04:8e:4a:da:a1:69:c4:b7:
                    c2:0f:28:18:02:44:4d:87:06:1f:98:04:7d:8d:4b:
                    9c:20:a5:2e:94:a2:cb:8f:73:f1:80:b8:da:a9:df:
                    52:6c:9b:3f:22:ce:bf:cf:10:fb:b9:18:e9:c1:a1:
                    9e:a5:c8:5a:37:1f:5d:de:ba:64:35:c1:69:64:62:
                    88:a7:6b:8f:1f:71:66:87:22:44:63:9f:9f:d7:99:
                    b0:a1:f7:86:81:21:d2:88:0a:a0:7e:05:43:a6:83:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:8B:74:FD:DE:B1:C7:08:5A:9B:6E:7F:5F:EF:8D:82:C9:D9:99
            X509v3 Authority Key Identifier:
                keyid:25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ed50:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:68:ac:b0:22:d5:86:73:13:98:79:65:13:77:fd:24:cf:
         45:fb:ab:59:40:d3:ef:de:26:04:2f:3e:04:6e:4b:11:23:b1:
         85:25:68:10:25:47:47:c9:9c:60:76:ec:91:6c:03:09:75:99:
         f6:f5:32:d2:b5:4c:d9:d4:80:3d:32:e5:27:f1:cd:a4:40:30:
         c1:c8:ee:1c:39:ae:3d:64:68:36:bd:38:64:5b:27:48:86:5d:
         f6:f8:1b:7b:0d:72:07:f5:fb:0d:29:cc:11:47:51:fc:fb:e7:
         d4:d1:68:59:11:56:1a:37:9b:88:74:b0:a3:39:09:bd:ec:92:
         10:48:69:d7:47:20:75:5e:ed:07:c0:4f:28:1e:a5:02:f2:d6:
         74:3a:2d:6e:b8:44:d3:ce:ee:9c:d5:ea:db:51:56:19:af:30:
         10:5f:48:74:cd:57:c3:5b:54:eb:5b:74:8e:a0:bb:6f:17:b3:
         0a:f6:08:e6:15:94:cd:99:0d:f4:17:6e:8e:d0:f6:a9:0b:6e:
         49:65:f9:7d:bc:21:6d:f8:fd:b6:05:2c:ce:8d:ea:45:cc:2b:
         98:ed:0e:32:8a:27:64:1e:21:f9:5e:f2:c8:f9:e7:09:db:de:
         aa:97:5c:52:61:28:7e:d7:5a:22:27:51:a9:20:4b:23:93:db:
         f5:00:28:7a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUUJyZLXTNJAqWfDY79eqjfsWHaK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyMjg0Mzg0ODU3MEY5QzU5QTBBOTdEMEQ4NTM2N0M1
MTBENTczQTAeFw0yNjA1MDMyMjM1NDlaFw0yNzA1MDIyMjQwNDlaMDMxMTAvBgNV
BAMTKEYxRkQ4Qjc0RkRERUIxQzcwODVBOUI2RTdGNUZFRjhEODJDOUQ5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqODHOY8Mba3F8ZJ+WiGBwrykq
BKTvO1gIdhhFRP0uQG4QSzMKfM2YmDXkMNz/ng8edZajca5q5JJdPW+Bn1+2tbcG
9boorZKgRxSkReJb/YtPpr8Qx4IhS/HgvvFb04KqxfFKn2QBNulMEwaz5MVxPTil
HAVDXbI76IieieLnxtMvZ+B7JSq5I/0C2CNNvJunEfKxAeCLwYnk9HQEjkraoWnE
t8IPKBgCRE2HBh+YBH2NS5wgpS6UosuPc/GAuNqp31Jsmz8izr/PEPu5GOnBoZ6l
yFo3H13eumQ1wWlkYoina48fcWaHIkRjn5/XmbCh94aBIdKICqB+BUOmg0xdAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU8f2LdP3esccIWptuf1/vjYLJ2ZkwHwYDVR0j
BBgwFoAUJSKEOEhXD5xZoKl9DYU2fFENVzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODkxNjk4MzE2Rjc2QTg1OUIxRDgzRkYzMTFERUZGMEZG
NDdEOERGRUExOEEyQkIyMjRDN0Y0MDUyQjEzNjZCLzAvMjUyMjg0Mzg0ODU3MEY5
QzU5QTBBOTdEMEQ4NTM2N0M1MTBENTczQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNTIyODQzODQ4NTcwRjlDNTlB
MEE5N0QwRDg1MzY3QzUxMEQ1NzNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg5MTY5ODMxNkY3NkE4NTlCMUQ4M0ZGMzExREVGRjBGRjQ3RDhERkVB
MThBMkJCMjI0QzdGNDA1MkIxMzY2Qi8wLzMyMzgzMDMzM2E2NTY0MzUzMDNhMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzODM2Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A+1QAAEwDQYJKoZIhvcNAQELBQADggEBAINPaKywItWGcxOYeWUTd/0kz0X7q1lA
0+/eJgQvPgRuSxEjsYUlaBAlR0fJnGB27JFsAwl1mfb1MtK1TNnUgD0y5SfxzaRA
MMHI7hw5rj1kaDa9OGRbJ0iGXfb4G3sNcgf1+w0pzBFHUfz759TRaFkRVho3m4h0
sKM5Cb3skhBIaddHIHVe7QfATygepQLy1nQ6LW64RNPO7pzV6ttRVhmvMBBfSHTN
V8NbVOtbdI6gu28Xswr2COYVlM2ZDfQXbo7Q9qkLbkll+X28IW34/bYFLM6N6kXM
K5jtDjKKJ2QeIfle8sj55wnb3qqXXFJhKH7XWiInUakgSyOT2/UAKHo=
-----END CERTIFICATE-----
Generated at Wed May 13 18:17:01 2026 by rpki-client