Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733323131.roa
File:                     323830333a383335303a3a2f33322d3332203d3e20323733323131.roa (raw, json)
Hash identifier:          5pfikKv4gQuIhf4VlJOKOGCLXcaXyHnNusZu03XsvBQ=
Subject key identifier:   5D:F4:89:B2:39:88:57:B7:11:8D:CB:50:AA:86:B3:BB:65:44:16:FC
Certificate issuer:       /CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
Certificate serial:       0C828815A92E02B0C9993D678BF4A9B499040B1D
Authority key identifier: A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733323131.roa
Signing time:             Sat 11 Jul 2026 06:15:00 +0000
ROA not before:           Sat 11 Jul 2026 06:10:00 +0000
ROA not after:            Sat 10 Jul 2027 06:15:00 +0000
asID:                     273211
IP address blocks:        2803:8350::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:88:15:a9:2e:02:b0:c9:99:3d:67:8b:f4:a9:b4:99:04:0b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
        Validity
            Not Before: Jul 11 06:10:00 2026 GMT
            Not After : Jul 10 06:15:00 2027 GMT
        Subject: CN=5DF489B2398857B7118DCB50AA86B3BB654416FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:37:f2:79:1d:1d:21:17:11:8e:57:bd:b4:
                    7c:c7:ef:84:66:50:cf:82:fb:3f:b8:e9:c5:d7:b0:
                    f4:bd:a8:9b:02:ba:a7:c9:7a:b2:20:a7:d2:17:16:
                    73:18:ab:d2:67:08:9d:40:99:0e:d7:d0:89:6e:82:
                    50:44:4f:7e:bf:0e:a9:98:51:8b:93:be:fa:64:96:
                    e8:19:24:04:4e:e6:d9:7e:55:6c:e9:0f:12:e0:0f:
                    07:4f:c8:13:86:2f:78:22:d5:0c:25:26:05:16:8a:
                    78:65:3c:98:39:3d:d1:0d:3a:b3:f5:95:9f:95:70:
                    51:1f:d9:12:52:04:63:81:4f:38:8a:77:f6:5a:30:
                    62:e7:c6:14:e8:75:5f:aa:2d:9e:a0:a8:c0:98:4e:
                    ec:5f:ae:c3:f9:27:f6:31:80:d0:7a:bc:a3:3e:20:
                    5f:a8:4b:54:77:6d:d3:9b:b4:4a:bd:b1:c8:de:0b:
                    a1:71:09:45:c1:8a:69:c7:2e:dc:cf:ba:ef:21:51:
                    bf:bc:d6:b1:ad:ed:32:81:ef:e7:94:d9:7b:77:2c:
                    c9:02:8e:91:af:40:8b:1d:90:e2:f8:5e:a1:2e:0c:
                    ae:66:9e:d6:e6:bd:32:76:19:10:9e:fd:f4:1f:c2:
                    bc:9b:4c:9e:72:b6:28:e5:08:c8:74:4e:06:82:0e:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:89:B2:39:88:57:B7:11:8D:CB:50:AA:86:B3:BB:65:44:16:FC
            X509v3 Authority Key Identifier:
                keyid:A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8350::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:1b:9d:4e:bd:85:fa:01:f5:21:0a:b1:e7:36:2b:12:2f:
         71:cc:5a:96:9f:ad:d8:2a:b6:34:8f:44:42:00:14:47:8a:bb:
         60:f8:c2:35:5b:bd:ce:97:0b:2c:e6:ba:30:e0:f0:f9:66:35:
         81:77:8d:9c:08:da:4f:43:a2:ca:77:b7:f2:2f:35:0e:8f:f3:
         31:25:a2:35:d2:18:51:bf:c3:b8:84:7f:d9:b6:b7:7b:ad:57:
         4f:a3:63:17:be:da:fd:c0:ff:a0:29:89:17:bb:9d:f1:2d:64:
         f9:61:35:89:07:5e:8c:0b:dc:1e:08:ae:54:20:d1:dc:e7:e0:
         5a:dd:27:64:87:58:c2:0e:ba:ec:78:1a:5b:4a:9c:d9:ec:32:
         e6:58:94:7e:78:26:cc:30:d9:8f:e3:5f:91:88:1e:39:c2:b9:
         ca:fc:cb:7d:c5:9e:ea:93:7b:04:23:2a:1b:45:b5:72:e4:5a:
         69:b4:01:b0:29:c7:58:08:57:d7:84:b5:c6:be:75:3a:12:e6:
         ee:53:fb:c0:77:7b:2e:bb:91:00:1b:45:b2:33:c6:e1:29:df:
         0e:a3:27:48:74:51:f4:6f:be:6a:b2:3b:33:aa:2b:6f:ff:a5:
         99:39:8c:28:69:18:65:ac:5f:74:14:81:70:1a:f6:92:4b:b8:
         1e:ff:d4:d8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDIKIFakuArDJmT1ni/SptJkECx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk3RTlGOTRFQkY0NzlDNjhCM0E1NzgxNzNGRkM3QzQz
NkFEMUYxQjAeFw0yNjA3MTEwNjEwMDBaFw0yNzA3MTAwNjE1MDBaMDMxMTAvBgNV
BAMTKDVERjQ4OUIyMzk4ODU3QjcxMThEQ0I1MEFBODZCM0JCNjU0NDE2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntTfyeR0dIRcRjle9tHzH74Rm
UM+C+z+46cXXsPS9qJsCuqfJerIgp9IXFnMYq9JnCJ1AmQ7X0IluglBET36/DqmY
UYuTvvpklugZJARO5tl+VWzpDxLgDwdPyBOGL3gi1QwlJgUWinhlPJg5PdENOrP1
lZ+VcFEf2RJSBGOBTziKd/ZaMGLnxhTodV+qLZ6gqMCYTuxfrsP5J/YxgNB6vKM+
IF+oS1R3bdObtEq9scjeC6FxCUXBimnHLtzPuu8hUb+81rGt7TKB7+eU2Xt3LMkC
jpGvQIsdkOL4XqEuDK5mntbmvTJ2GRCe/fQfwrybTJ5ytijlCMh0TgaCDq9rAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUXfSJsjmIV7cRjctQqoazu2VEFvwwHwYDVR0j
BBgwFoAUqX6flOv0ecaLOleBc//HxDatHxswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81M0I5MTUzRkZDQUVCNENGMkE3OTY4RThENkY3RkI3Q0Ew
QjMwMzhFREIxMzFGNzQxRDY2ODZCNUUyQTM1REE4LzAvQTk3RTlGOTRFQkY0NzlD
NjhCM0E1NzgxNzNGRkM3QzQzNkFEMUYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTdFOUY5NEVCRjQ3OUM2OEIz
QTU3ODE3M0ZGQzdDNDM2QUQxRjFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTNCOTE1M0ZGQ0FFQjRDRjJBNzk2OEU4RDZGN0ZCN0NBMEIzMDM4RURC
MTMxRjc0MUQ2Njg2QjVFMkEzNURBOC8wLzMyMzgzMDMzM2EzODMzMzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMyMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDg1Aw
DQYJKoZIhvcNAQELBQADggEBAGHlG51OvYX6AfUhCrHnNisSL3HMWpafrdgqtjSP
REIAFEeKu2D4wjVbvc6XCyzmujDg8PlmNYF3jZwI2k9Dosp3t/IvNQ6P8zElojXS
GFG/w7iEf9m2t3utV0+jYxe+2v3A/6ApiRe7nfEtZPlhNYkHXowL3B4IrlQg0dzn
4FrdJ2SHWMIOuux4GltKnNnsMuZYlH54Jsww2Y/jX5GIHjnCucr8y33FnuqTewQj
KhtFtXLkWmm0AbApx1gIV9eEtca+dToS5u5T+8B3ey67kQAbRbIzxuEp3w6jJ0h0
UfRvvmqyOzOqK2//pZk5jChpGGWsX3QUgXAa9pJLuB7/1Ng=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:21:20 2026 by rpki-client