Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f35322d3532203d3e20323730303735.roa
File:                     323830333a633365303a313030303a3a2f35322d3532203d3e20323730303735.roa (raw, json)
Hash identifier:          YPp1x7cU1Ce9M/pqV/Ful59iGB5txQ0b320hISAPzGU=
Subject key identifier:   9B:B7:8B:43:A8:CD:BE:B9:5B:E6:38:77:19:62:CB:BE:CD:D4:CE:AF
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       38F9A7FDC77FF77E19E9B7C17E21E47C9C39DA32
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f35322d3532203d3e20323730303735.roa
Signing time:             Thu 07 May 2026 17:00:00 +0000
ROA not before:           Thu 07 May 2026 16:55:00 +0000
ROA not after:            Thu 06 May 2027 17:00:00 +0000
asID:                     270075
IP address blocks:        2803:c3e0:1000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f9:a7:fd:c7:7f:f7:7e:19:e9:b7:c1:7e:21:e4:7c:9c:39:da:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: May  7 16:55:00 2026 GMT
            Not After : May  6 17:00:00 2027 GMT
        Subject: CN=9BB78B43A8CDBEB95BE638771962CBBECDD4CEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:45:98:3a:d9:cc:4b:33:c9:f9:b3:c9:ba:
                    8f:ac:b2:9d:13:8a:82:d8:54:69:fb:fd:48:d7:9f:
                    a9:fc:98:98:ec:8f:89:23:6d:29:09:13:dd:2d:a4:
                    c8:6d:3d:c2:e2:88:49:93:6e:e7:bb:1c:e4:6b:b6:
                    84:f1:86:6a:d3:fc:3d:22:2f:e9:66:f2:e0:e3:11:
                    1f:f1:11:d3:6a:de:94:8e:33:1e:f7:a6:f1:85:f7:
                    e4:e5:5e:b2:73:84:3e:40:7e:91:d9:58:39:95:ac:
                    ea:0a:ab:87:0a:13:13:d5:65:55:de:f4:04:07:b2:
                    78:51:1b:4b:69:0d:3c:cc:04:34:15:39:1d:46:c5:
                    af:62:04:b0:cf:17:86:f0:fa:e7:d8:86:2f:23:76:
                    86:01:b3:a8:d4:27:52:58:a3:e5:a8:43:dc:34:5f:
                    4c:cc:44:49:b1:a0:cf:d0:a0:d4:fb:a1:1d:b9:b0:
                    91:fc:83:eb:60:ae:6a:74:58:94:66:cd:38:b7:09:
                    7b:d4:ac:b2:e0:b6:41:4f:20:95:48:1b:b1:98:cf:
                    5f:58:95:d9:08:6c:f1:05:85:ca:06:df:16:ce:fe:
                    4b:76:ad:07:a5:61:84:c1:d4:9f:0a:7a:44:e2:72:
                    db:02:26:3e:08:ef:fa:d6:a3:54:82:6d:a5:d6:54:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B7:8B:43:A8:CD:BE:B9:5B:E6:38:77:19:62:CB:BE:CD:D4:CE:AF
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f35322d3532203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:1000::/52

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:a1:45:c6:db:cb:0d:90:5b:ba:9e:ad:50:7c:25:95:3b:
         77:f5:3d:6b:4f:4f:23:9e:86:88:26:d5:b7:f1:d3:49:41:16:
         19:51:ef:9c:e9:57:d3:68:10:b3:27:83:e4:5f:ca:65:2b:d3:
         1d:91:14:ce:f1:0b:71:c0:05:14:c9:52:89:17:30:e7:28:e6:
         5b:74:cc:20:60:7c:fa:43:58:0e:11:8e:7a:c1:59:e6:f5:70:
         a7:ca:72:ff:a6:b7:87:44:0d:e5:53:b3:de:ad:b1:09:a7:4f:
         8f:60:0b:18:96:c2:b7:fa:38:ff:50:02:7b:02:59:e7:ea:cc:
         66:9f:b1:ed:90:77:2d:b7:48:22:b4:27:a0:c6:f2:f4:f8:60:
         1a:70:7a:a4:9a:70:e7:19:06:4d:69:ae:37:9b:d4:23:c7:3c:
         e3:a9:11:72:04:bd:74:08:e6:e6:8d:c4:37:90:6e:1d:1d:9f:
         d6:e1:ff:eb:b0:22:40:5e:ef:86:8b:a7:e2:23:a8:c0:af:1d:
         ff:f2:a1:a3:62:05:25:5a:f0:c7:1b:5c:2c:5e:ef:8a:4d:46:
         db:8c:db:03:e6:ab:44:0e:16:b6:1d:3b:bc:c8:74:8b:5b:6d:
         ec:77:fa:9b:a7:6c:9e:c4:9f:c0:d0:56:a0:12:de:44:1a:6a:
         80:8e:de:a2
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIUOPmn/cd/934Z6bfBfiHkfJw52jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA0RDhBQzkwNkZDNEE4N0ExNjIyNDA4MTVDOEMyRDQy
MjQxMzBDQjAeFw0yNjA1MDcxNjU1MDBaFw0yNzA1MDYxNzAwMDBaMDMxMTAvBgNV
BAMTKDlCQjc4QjQzQThDREJFQjk1QkU2Mzg3NzE5NjJDQkJFQ0RENENFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+UWYOtnMSzPJ+bPJuo+ssp0T
ioLYVGn7/UjXn6n8mJjsj4kjbSkJE90tpMhtPcLiiEmTbue7HORrtoTxhmrT/D0i
L+lm8uDjER/xEdNq3pSOMx73pvGF9+TlXrJzhD5AfpHZWDmVrOoKq4cKExPVZVXe
9AQHsnhRG0tpDTzMBDQVOR1Gxa9iBLDPF4bw+ufYhi8jdoYBs6jUJ1JYo+WoQ9w0
X0zMREmxoM/QoNT7oR25sJH8g+tgrmp0WJRmzTi3CXvUrLLgtkFPIJVIG7GYz19Y
ldkIbPEFhcoG3xbO/kt2rQelYYTB1J8KekTictsCJj4I7/rWo1SCbaXWVHFZAgMB
AAGjggLWMIIC0jAdBgNVHQ4EFgQUm7eLQ6jNvrlb5jh3GWLLvs3Uzq8wHwYDVR0j
BBgwFoAUME2KyQb8SoehYiQIFcjC1CJBMMswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REFEMzMxOEE1MzREOEFCQjgwMTk1RkYzNjY5Q0UxNkEw
NEEwN0Y0QjhGMjU2MzZCRDJBQkYzNkM4MzdBRDdELzAvMzA0RDhBQzkwNkZDNEE4
N0ExNjIyNDA4MTVDOEMyRDQyMjQxMzBDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDREOEFDOTA2RkM0QTg3QTE2
MjI0MDgxNUM4QzJENDIyNDEzMENCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERBRDMzMThBNTM0RDhBQkI4MDE5NUZGMzY2OUNFMTZBMDRBMDdGNEI4
RjI1NjM2QkQyQUJGMzZDODM3QUQ3RC8wLzMyMzgzMDMzM2E2MzMzNjUzMDNhMzEz
MDMwMzAzYTNhMmYzNTMyMmQzNTMyMjAzZDNlMjAzMjM3MzAzMDM3MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgAC
MAoDCAQoA8PgEAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBPVKFFxtvLDZBbup6tUHwl
lTt39T1rT08jnoaIJtW38dNJQRYZUe+c6VfTaBCzJ4PkX8plK9MdkRTO8QtxwAUU
yVKJFzDnKOZbdMwgYHz6Q1gOEY56wVnm9XCnynL/preHRA3lU7PerbEJp0+PYAsY
lsK3+jj/UAJ7Alnn6sxmn7HtkHctt0gitCegxvL0+GAacHqkmnDnGQZNaa43m9Qj
xzzjqRFyBL10CObmjcQ3kG4dHZ/W4f/rsCJAXu+Gi6fiI6jArx3/8qGjYgUlWvDH
G1wsXu+KTUbbjNsD5qtEDha2HTu8yHSLW23sd/qbp2yexJ/A0FagEt5EGmqAjt6i
-----END CERTIFICATE-----
Generated at Wed May 13 16:43:08 2026 by rpki-client