Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
File:                     323830333a613231303a3a2f33322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          G1kYh1CbBOM0AfSAJTekdJlfwWruf530rxr1aKWVehM=
Subject key identifier:   6B:7B:4E:03:03:EF:95:FE:BC:EE:69:6B:D7:46:1C:F0:85:83:C9:F7
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       5D0EC0EBCBF64DDF0BE33AAAD9FF192E0133D2A2
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
Signing time:             Sat 11 Jul 2026 06:50:00 +0000
ROA not before:           Sat 11 Jul 2026 06:45:00 +0000
ROA not after:            Sat 10 Jul 2027 06:50:00 +0000
asID:                     3356
IP address blocks:        2803:a210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0e:c0:eb:cb:f6:4d:df:0b:e3:3a:aa:d9:ff:19:2e:01:33:d2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Jul 11 06:45:00 2026 GMT
            Not After : Jul 10 06:50:00 2027 GMT
        Subject: CN=6B7B4E0303EF95FEBCEE696BD7461CF08583C9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:a7:c0:43:91:cd:f2:11:76:e5:33:dc:fd:
                    d1:1d:62:0b:5d:8c:6b:a3:a1:c2:09:3f:91:bb:d7:
                    b1:a1:d3:7b:4e:51:80:5f:58:72:5a:a7:b2:ea:d9:
                    f8:24:49:a2:06:b6:1f:85:30:81:b4:b3:96:0b:7c:
                    1e:5d:5b:7a:df:70:2b:57:b9:e2:94:de:41:ca:d7:
                    0f:84:82:f7:a5:50:99:cc:09:02:65:11:92:6d:72:
                    f2:cb:1a:57:a2:e7:a6:8f:96:c0:51:9d:22:29:e1:
                    69:af:6b:cb:21:1c:f4:6b:55:fd:70:04:69:33:64:
                    74:aa:35:27:53:48:ec:48:c7:2c:a9:c8:c5:02:a4:
                    f7:10:2d:5b:65:69:30:0c:e5:57:32:25:7d:a3:31:
                    74:ff:66:b8:ef:b7:6d:55:f7:83:9c:39:d7:ac:ea:
                    b7:28:7a:b6:64:68:cc:85:85:f0:fc:27:8b:0f:a2:
                    d4:3e:60:a8:fc:00:58:f7:a7:a8:2f:71:50:65:bb:
                    19:c3:b6:a5:ab:a6:00:cd:4f:05:1d:67:c6:64:08:
                    96:22:ab:0d:c7:43:9f:b5:c5:3d:cf:82:2e:eb:ba:
                    89:d4:58:a6:18:e5:3f:e4:a1:b2:60:17:e4:e7:35:
                    20:97:6b:6f:cd:1c:09:df:08:e0:48:17:4b:cf:4d:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7B:4E:03:03:EF:95:FE:BC:EE:69:6B:D7:46:1C:F0:85:83:C9:F7
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a210::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:69:78:49:6d:c8:76:4e:87:f6:b3:fa:97:7c:f1:ea:97:
         5c:93:52:78:8a:98:0b:fd:fb:11:75:00:d2:06:13:e6:11:25:
         42:4c:4e:45:66:b4:f6:fe:31:01:f7:bb:c6:ea:4b:b2:b3:d9:
         a2:96:ea:35:32:ec:70:d5:4d:31:40:b1:69:c5:5b:95:fe:0d:
         8c:1b:ea:c1:a9:96:44:b2:74:3a:bd:71:5c:7b:de:88:8e:2b:
         11:ba:3c:90:7c:21:c9:9f:a8:87:0f:08:82:8f:85:1f:ef:19:
         08:e7:d3:51:1c:32:1f:20:52:a3:95:16:2a:f1:d9:3f:06:73:
         51:6e:f8:f8:1a:49:ca:be:9e:60:f9:4f:f3:a0:9e:71:ea:fd:
         73:eb:7e:1a:41:67:39:71:39:43:11:12:41:d9:b4:10:0a:9c:
         c1:13:c9:fc:b9:5f:39:71:bd:df:2b:2b:a4:ba:eb:b6:f5:fd:
         46:ad:fe:a2:d7:0b:81:7a:c6:2d:e8:5f:82:a7:1c:d5:d0:a7:
         b9:b6:48:97:f5:14:4e:06:6d:8a:84:ae:48:4e:70:f0:e3:04:
         24:5d:26:2c:ca:de:92:ae:90:eb:33:6c:04:e6:cc:09:62:ca:
         c8:4e:12:4c:9d:42:87:64:0d:77:97:de:41:b4:56:0f:ed:64:
         d8:bc:5b:9d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXQ7A68v2Td8L4zqq2f8ZLgEz0qIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjQ0REY1M0NEQjYwODlCNzg1N0NERTUyMDFCMDZE
M0Y2QjFEQjAeFw0yNjA3MTEwNjQ1MDBaFw0yNzA3MTAwNjUwMDBaMDMxMTAvBgNV
BAMTKDZCN0I0RTAzMDNFRjk1RkVCQ0VFNjk2QkQ3NDYxQ0YwODU4M0M5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHKfAQ5HN8hF25TPc/dEdYgtd
jGujocIJP5G717Gh03tOUYBfWHJap7Lq2fgkSaIGth+FMIG0s5YLfB5dW3rfcCtX
ueKU3kHK1w+EgvelUJnMCQJlEZJtcvLLGlei56aPlsBRnSIp4Wmva8shHPRrVf1w
BGkzZHSqNSdTSOxIxyypyMUCpPcQLVtlaTAM5VcyJX2jMXT/Zrjvt21V94OcOdes
6rcoerZkaMyFhfD8J4sPotQ+YKj8AFj3p6gvcVBluxnDtqWrpgDNTwUdZ8ZkCJYi
qw3HQ5+1xT3Pgi7ruonUWKYY5T/kobJgF+TnNSCXa2/NHAnfCOBIF0vPTch5AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUa3tOAwPvlf687mlr10Yc8IWDyfcwHwYDVR0j
BBgwFoAUL1ZE31PNtgibeFfN5SAbBtP2sdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81N0EwNDM4REQwRUE1RjUzMzc3N0E5RDgzMTY5NEQ3M0I4
NjgzN0YwRjVDODUyNzcwMDAyMjUwQjAzOENEREVELzAvMkY1NjQ0REY1M0NEQjYw
ODlCNzg1N0NERTUyMDFCMDZEM0Y2QjFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjU2NDRERjUzQ0RCNjA4OUI3
ODU3Q0RFNTIwMUIwNkQzRjZCMURCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTdBMDQzOEREMEVBNUY1MzM3NzdBOUQ4MzE2OTRENzNCODY4MzdGMEY1
Qzg1Mjc3MDAwMjI1MEIwMzhDRERFRC8wLzMyMzgzMDMzM2E2MTMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOiEDANBgkq
hkiG9w0BAQsFAAOCAQEAdI1peEltyHZOh/az+pd88eqXXJNSeIqYC/37EXUA0gYT
5hElQkxORWa09v4xAfe7xupLsrPZopbqNTLscNVNMUCxacVblf4NjBvqwamWRLJ0
Or1xXHveiI4rEbo8kHwhyZ+ohw8Igo+FH+8ZCOfTURwyHyBSo5UWKvHZPwZzUW74
+BpJyr6eYPlP86Cecer9c+t+GkFnOXE5QxESQdm0EAqcwRPJ/LlfOXG93ysrpLrr
tvX9Rq3+otcLgXrGLehfgqcc1dCnubZIl/UUTgZtioSuSE5w8OMEJF0mLMrekq6Q
6zNsBObMCWLKyE4STJ1Ch2QNd5feQbRWD+1k2LxbnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:47:53 2026 by rpki-client