Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa
File:                     323830333a316435303a3a2f33322d3332203d3e20323733383730.roa (raw, json)
Hash identifier:          IbAe43Z09gfhWwwKLvkks3vDS5bOKwtX3ZrM2nIopJw=
Subject key identifier:   A2:4E:B5:52:EF:E9:DA:E6:A2:AA:24:24:13:91:0C:FD:2C:3F:9B:6F
Certificate issuer:       /CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
Certificate serial:       2A50AD7D0FAA052093A2E6FC0C3FCD681ED1B3E5
Authority key identifier: 08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa
Signing time:             Sat 11 Jul 2026 00:51:58 +0000
ROA not before:           Sat 11 Jul 2026 00:46:58 +0000
ROA not after:            Sat 10 Jul 2027 00:51:58 +0000
asID:                     273870
IP address blocks:        2803:1d50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 18:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:50:ad:7d:0f:aa:05:20:93:a2:e6:fc:0c:3f:cd:68:1e:d1:b3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
        Validity
            Not Before: Jul 11 00:46:58 2026 GMT
            Not After : Jul 10 00:51:58 2027 GMT
        Subject: CN=A24EB552EFE9DAE6A2AA242413910CFD2C3F9B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:0f:96:8a:63:73:1a:c3:1c:35:4f:a3:4c:
                    bf:a9:ba:5c:d2:16:b5:98:af:c8:6d:61:1a:05:fc:
                    2f:94:54:9d:cb:df:f3:7b:ac:cd:c2:2d:be:3d:fa:
                    f6:aa:47:56:e6:aa:b2:a4:c5:4b:c2:87:22:3b:e7:
                    6b:21:a7:98:ba:f5:b7:f0:d0:c4:b1:1c:49:75:a6:
                    a3:72:fd:40:f0:1d:ce:f6:d1:ed:04:d3:36:c6:64:
                    b5:28:e2:d8:a4:7c:83:cb:db:f4:32:cc:bf:7f:7a:
                    e4:f8:09:45:9d:43:04:f3:da:7b:b9:aa:1c:73:82:
                    8c:9a:c2:0d:77:15:11:cc:20:2e:72:9c:bc:b5:9f:
                    33:9b:ac:4f:d7:9d:bb:f0:15:ad:4d:10:e5:cc:a8:
                    ee:52:ef:65:f1:5c:8e:51:45:fd:7b:fc:a8:e7:f1:
                    51:a4:1f:83:25:0a:9a:1a:20:67:9a:e9:e5:85:40:
                    52:5f:12:99:93:84:ff:ea:1f:f4:40:6e:49:27:87:
                    23:b3:48:c8:c8:26:d4:5f:3e:a5:9c:8d:61:45:1d:
                    63:98:eb:3f:82:0f:d8:65:f4:f4:ee:4b:c2:43:86:
                    8e:ea:5c:c6:50:1c:18:5d:c0:e7:a1:3d:00:c1:01:
                    10:92:59:74:de:ee:0b:c8:77:f1:d3:52:31:b6:db:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4E:B5:52:EF:E9:DA:E6:A2:AA:24:24:13:91:0C:FD:2C:3F:9B:6F
            X509v3 Authority Key Identifier:
                keyid:08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:06:9c:91:c6:8d:af:fc:38:78:3c:b4:91:59:1c:9e:71:
         68:46:68:99:9c:51:30:61:da:a6:b6:24:ec:27:26:28:7b:4e:
         96:26:96:7a:36:54:d1:4f:f3:98:52:8b:2e:f6:05:47:79:ad:
         63:e0:f0:fa:d9:60:45:70:f0:1a:98:b1:2a:6e:42:d8:6a:e1:
         42:15:db:a4:e0:b5:8e:78:1d:4d:18:8a:5b:0d:b0:7c:88:0a:
         3d:fc:12:4d:00:15:e3:dd:fc:bd:57:25:09:5f:fb:e9:55:90:
         b8:1e:33:b7:86:44:2d:22:62:d7:0e:3e:7e:8a:60:6d:f2:ea:
         ec:8a:20:d6:d5:20:2a:53:97:c9:8e:c4:22:ca:a4:0f:db:54:
         7a:cb:6f:48:e0:42:00:a5:2c:03:87:47:33:4b:35:93:04:19:
         a8:ad:90:9c:2b:c3:10:fa:9e:c3:7b:67:ab:86:27:c3:1b:7e:
         21:18:27:fa:bf:b5:62:b8:cd:0a:00:76:01:5d:3f:bd:45:66:
         d2:ff:22:fc:09:71:8a:2c:ef:b7:17:6f:7a:8f:6a:52:d9:1d:
         fc:f9:3c:99:58:12:cc:f7:76:17:2d:4b:28:9d:02:0b:c2:b3:
         07:67:e3:ba:05:5d:79:48:f6:48:5a:4c:85:c6:4a:6d:d2:0e:
         85:0d:24:d4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKlCtfQ+qBSCToub8DD/NaB7Rs+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4Mzk2NkJFNUI2ODU2QTU2NENBQzczMDkzNkIwQ0M1
MTQzRUU2QTAeFw0yNjA3MTEwMDQ2NThaFw0yNzA3MTAwMDUxNThaMDMxMTAvBgNV
BAMTKEEyNEVCNTUyRUZFOURBRTZBMkFBMjQyNDEzOTEwQ0ZEMkMzRjlCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cQ+WimNzGsMcNU+jTL+pulzS
FrWYr8htYRoF/C+UVJ3L3/N7rM3CLb49+vaqR1bmqrKkxUvChyI752shp5i69bfw
0MSxHEl1pqNy/UDwHc720e0E0zbGZLUo4tikfIPL2/QyzL9/euT4CUWdQwTz2nu5
qhxzgoyawg13FRHMIC5ynLy1nzObrE/XnbvwFa1NEOXMqO5S72XxXI5RRf17/Kjn
8VGkH4MlCpoaIGea6eWFQFJfEpmThP/qH/RAbkknhyOzSMjIJtRfPqWcjWFFHWOY
6z+CD9hl9PTuS8JDho7qXMZQHBhdwOehPQDBARCSWXTe7gvId/HTUjG2206vAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUok61Uu/p2uaiqiQkE5EM/Sw/m28wHwYDVR0j
BBgwFoAUCIOWa+W2hWpWTKxzCTawzFFD7mowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzQzMDNENjYzMzhDMjBCOUVEM0RFN0ZFNEU3REFEMDhG
NDc2QTFENUM1MDM1OTVFRDg0NjVFRUJFNEVGNzZFLzAvMDg4Mzk2NkJFNUI2ODU2
QTU2NENBQzczMDkzNkIwQ0M1MTQzRUU2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODgzOTY2QkU1QjY4NTZBNTY0
Q0FDNzMwOTM2QjBDQzUxNDNFRTZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM0MzAzRDY2MzM4QzIwQjlFRDNERTdGRTRFN0RBRDA4RjQ3NkExRDVD
NTAzNTk1RUQ4NDY1RUVCRTRFRjc2RS8wLzMyMzgzMDMzM2EzMTY0MzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM4MzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHVAw
DQYJKoZIhvcNAQELBQADggEBAEIPBpyRxo2v/Dh4PLSRWRyecWhGaJmcUTBh2qa2
JOwnJih7TpYmlno2VNFP85hSiy72BUd5rWPg8PrZYEVw8BqYsSpuQthq4UIV26Tg
tY54HU0YilsNsHyICj38Ek0AFePd/L1XJQlf++lVkLgeM7eGRC0iYtcOPn6KYG3y
6uyKINbVICpTl8mOxCLKpA/bVHrLb0jgQgClLAOHRzNLNZMEGaitkJwrwxD6nsN7
Z6uGJ8MbfiEYJ/q/tWK4zQoAdgFdP71FZtL/IvwJcYos77cXb3qPalLZHfz5PJlY
Esz3dhctSyidAgvCswdn47oFXXlI9khaTIXGSm3SDoUNJNQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:47:49 2026 by rpki-client