Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a323639303a3a2f34382d3438203d3e20323732383036.roa
File:                     323830333a623065303a323639303a3a2f34382d3438203d3e20323732383036.roa (raw, json)
Hash identifier:          KTRSDEJvt8OHUn/xwMTpe8up/TTil2Libim/FI+TZLk=
Subject key identifier:   B8:BA:81:D4:23:B5:E5:53:C5:0B:5C:18:DE:C0:24:4B:4E:55:9B:15
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       1B2A0D70176E240A99F7ACB7408E35920C1FFC89
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a323639303a3a2f34382d3438203d3e20323732383036.roa
Signing time:             Tue 21 Apr 2026 14:39:33 +0000
ROA not before:           Tue 21 Apr 2026 14:34:33 +0000
ROA not after:            Tue 20 Apr 2027 14:39:33 +0000
asID:                     272806
IP address blocks:        2803:b0e0:2690::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 21:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2a:0d:70:17:6e:24:0a:99:f7:ac:b7:40:8e:35:92:0c:1f:fc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr 21 14:34:33 2026 GMT
            Not After : Apr 20 14:39:33 2027 GMT
        Subject: CN=B8BA81D423B5E553C50B5C18DEC0244B4E559B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:a5:79:4d:47:1b:2e:fb:fa:d4:84:ac:f0:
                    d0:9a:0a:c9:80:e6:98:f8:65:21:e1:3f:c5:55:59:
                    1b:11:e7:b2:4b:8b:c5:d7:b3:28:42:ae:c5:99:70:
                    7a:c6:07:05:98:a1:cd:be:58:a4:ec:fe:8d:26:00:
                    85:42:b3:7b:46:c2:4a:72:23:62:37:24:c9:b2:32:
                    50:1d:4a:8c:40:84:06:19:78:88:5f:99:26:d0:f8:
                    1f:be:fe:0c:0f:8f:39:f9:c5:74:59:6c:d9:ae:ec:
                    36:2c:dd:f2:be:5c:de:53:53:e6:18:d4:49:35:96:
                    62:9e:59:c7:c7:61:61:30:a4:24:37:b5:b5:2e:72:
                    ae:a9:6d:af:67:b0:d4:4c:c2:32:0b:1d:e5:ff:d9:
                    0d:e7:29:c4:c0:e4:a7:d9:48:03:78:56:26:72:05:
                    8b:1e:c9:d4:86:06:49:f9:09:4e:9d:21:aa:d7:e3:
                    ff:ce:b9:dd:f1:d4:b0:07:9e:86:ce:9c:c2:f6:ca:
                    08:87:a1:b8:15:dd:9c:77:a3:f5:af:99:e4:55:06:
                    7b:43:28:91:46:49:6b:c2:0e:0f:5f:5a:62:8c:c2:
                    dd:f8:0b:de:e9:99:94:d7:01:d3:60:fb:ee:6d:9b:
                    12:0a:99:37:98:b6:12:3f:6e:d1:fc:8a:6e:91:c8:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BA:81:D4:23:B5:E5:53:C5:0B:5C:18:DE:C0:24:4B:4E:55:9B:15
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a323639303a3a2f34382d3438203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:2690::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:41:e2:80:d8:b0:59:1b:93:d5:20:d6:83:ab:d9:26:58:
         e4:b7:7a:9c:e0:23:3f:7c:42:26:0b:4b:4a:e9:34:93:34:b9:
         c3:7b:d2:5e:55:6c:0a:00:45:ba:67:ff:2b:05:70:01:63:3a:
         7f:fc:09:ef:f7:2c:63:2a:7e:45:e6:9f:f2:f9:18:6d:51:ed:
         77:88:af:6d:7a:5b:f7:8f:62:f5:9d:6a:f9:ac:1b:6d:92:10:
         6e:24:5f:77:b5:2e:e3:66:1f:15:f7:4f:6b:01:d4:82:f4:75:
         13:4a:45:76:4c:9c:41:47:8a:c1:bf:a3:ed:ca:55:00:28:33:
         49:29:06:e4:36:82:c1:ba:49:f8:59:fc:01:da:e0:f0:1a:fb:
         e8:bb:d9:3a:60:4b:b5:09:c0:af:09:24:73:3b:a5:16:0d:11:
         65:97:be:f3:05:1d:5d:c8:cb:39:35:98:77:ef:21:03:67:c9:
         69:1f:a3:f4:40:d8:d6:7f:3f:c4:b6:cd:7f:f1:a2:1d:ae:11:
         7e:d5:3b:f3:e0:74:62:f2:16:09:3e:c4:90:05:bc:9f:b4:6b:
         b0:2f:64:e6:6f:e1:35:c3:ef:c2:2b:13:b1:d7:73:98:d2:22:
         ad:76:77:db:a2:b5:a0:5b:ae:6d:a3:7b:d6:82:7f:37:43:b3:
         dd:0f:c6:b8
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUGyoNcBduJAqZ96y3QI41kgwf/IkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNjA0MjExNDM0MzNaFw0yNzA0MjAxNDM5MzNaMDMxMTAvBgNV
BAMTKEI4QkE4MUQ0MjNCNUU1NTNDNTBCNUMxOERFQzAyNDRCNEU1NTlCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P6V5TUcbLvv61ISs8NCaCsmA
5pj4ZSHhP8VVWRsR57JLi8XXsyhCrsWZcHrGBwWYoc2+WKTs/o0mAIVCs3tGwkpy
I2I3JMmyMlAdSoxAhAYZeIhfmSbQ+B++/gwPjzn5xXRZbNmu7DYs3fK+XN5TU+YY
1Ek1lmKeWcfHYWEwpCQ3tbUucq6pba9nsNRMwjILHeX/2Q3nKcTA5KfZSAN4ViZy
BYseydSGBkn5CU6dIarX4//Oud3x1LAHnobOnML2ygiHobgV3Zx3o/WvmeRVBntD
KJFGSWvCDg9fWmKMwt34C97pmZTXAdNg++5tmxIKmTeYthI/btH8im6RyEJpAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUuLqB1CO15VPFC1wY3sAkS05VmxUwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzIz
NjM5MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODMwMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7DgJpAwDQYJKoZIhvcNAQELBQADggEBACD3QeKA2LBZG5PVINaDq9km
WOS3epzgIz98QiYLS0rpNJM0ucN70l5VbAoARbpn/ysFcAFjOn/8Ce/3LGMqfkXm
n/L5GG1R7XeIr216W/ePYvWdavmsG22SEG4kX3e1LuNmHxX3T2sB1IL0dRNKRXZM
nEFHisG/o+3KVQAoM0kpBuQ2gsG6SfhZ/AHa4PAa++i72TpgS7UJwK8JJHM7pRYN
EWWXvvMFHV3Iyzk1mHfvIQNnyWkfo/RA2NZ/P8S2zX/xoh2uEX7VO/PgdGLyFgk+
xJAFvJ+0a7AvZOZv4TXD78IrE7HXc5jSIq12d9uitaBbrm2je9aCfzdDs90Pxrg=
-----END CERTIFICATE-----
Generated at Wed May 13 18:16:14 2026 by rpki-client