Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          B8U39+3FrcUigfgVnNyyxu/CbCFxkgsEtYJnz373qIM=
Subject key identifier:   CF:E8:92:05:87:10:6E:22:7F:2D:B2:DB:01:D5:75:5D:CC:A4:61:3D
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       066C0BB99C42361F9BFBBC1A78E012CAD3F31AA0
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 24 Oct 2026 01:43:09 +0000
ROA not before:           Sat 24 Oct 2026 01:38:09 +0000
ROA not after:            Sat 23 Oct 2027 01:43:09 +0000
asID:                     273123
IP address blocks:        2803:450:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6c:0b:b9:9c:42:36:1f:9b:fb:bc:1a:78:e0:12:ca:d3:f3:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Oct 24 01:38:09 2026 GMT
            Not After : Oct 23 01:43:09 2027 GMT
        Subject: CN=CFE8920587106E227F2DB2DB01D5755DCCA4613D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:e4:8d:b0:65:86:9d:f3:0a:9a:6c:e6:c0:
                    e7:66:58:62:f3:a1:70:cb:5e:50:e4:5b:85:6a:81:
                    bc:71:75:95:f1:95:df:10:a5:eb:ea:b7:1f:db:ad:
                    2c:05:d3:97:7c:df:b4:f0:81:1e:86:4c:77:f6:3a:
                    87:fa:8b:e7:cf:a0:a8:1d:b5:33:d2:6a:05:c8:bd:
                    bf:95:bd:df:b2:5e:e0:66:b8:cc:d4:51:67:0d:a3:
                    02:df:5b:6e:ef:f2:51:c3:72:79:30:31:9c:98:4e:
                    9b:23:24:fb:50:1a:69:f3:ac:53:70:ae:c5:69:28:
                    b8:d7:37:8b:90:e4:09:f7:33:e7:71:ee:c3:fc:12:
                    d3:d0:5f:a0:51:00:70:34:92:4c:a3:91:b5:47:59:
                    ac:81:ca:86:35:cd:52:05:f7:a0:33:87:50:14:5c:
                    ba:a7:66:13:e3:ee:f4:64:f0:6f:93:f2:da:00:e8:
                    61:b3:6c:02:a6:a1:d9:50:52:ee:69:dd:1e:3f:41:
                    0d:f7:3b:47:24:bc:3a:ba:6e:98:cc:f4:f9:9a:86:
                    9b:af:04:6c:ba:af:16:c2:2c:75:91:ac:b8:fc:6b:
                    bc:a2:2a:ab:12:2f:b2:da:61:c3:4c:ac:1b:d7:39:
                    51:57:e0:71:a3:a9:8a:b6:a0:f2:a9:78:4c:a7:58:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:92:05:87:10:6E:22:7F:2D:B2:DB:01:D5:75:5D:CC:A4:61:3D
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:38:cb:29:2d:4e:b9:48:f9:4c:09:5f:99:52:f7:65:96:
         a8:f0:df:9c:ef:d4:4e:cf:a2:c8:03:25:49:19:26:4e:99:cc:
         0d:93:6d:de:08:dd:3a:c6:1b:bf:3d:78:dc:4b:6c:f2:84:bf:
         af:4a:d4:8d:12:54:c9:99:8d:84:33:ab:37:80:75:53:81:dd:
         cf:9c:e2:ca:7c:bf:da:7a:13:74:fb:5d:b7:04:06:c0:8f:91:
         45:de:1f:92:b9:57:d6:dd:64:78:8d:60:35:0a:a2:0b:41:30:
         4c:29:8c:5f:d7:84:68:74:84:56:c4:41:39:3f:6f:c7:49:16:
         c3:d5:dc:4b:30:98:6f:71:8d:09:cf:9e:be:9a:51:94:98:61:
         15:41:a2:c5:50:46:9f:e9:0b:3e:df:29:20:98:fc:fd:5d:78:
         99:7e:45:90:d0:a1:18:4b:e9:8b:5f:c9:99:d9:25:46:12:78:
         9e:dd:69:f2:0c:34:ab:90:4c:2f:8f:90:93:7c:af:66:79:1c:
         83:64:89:20:38:94:bb:7e:ca:85:e2:cd:04:d5:09:b6:3f:90:
         92:da:81:9c:b2:09:60:9d:84:66:f3:29:97:56:4f:c7:03:73:
         86:30:41:af:0e:05:43:8c:2a:6e:e8:1b:bc:99:a8:6f:04:7e:
         97:b2:b1:b1
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUBmwLuZxCNh+b+7waeOASytPzGqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNjEwMjQwMTM4MDlaFw0yNzEwMjMwMTQzMDlaMDMxMTAvBgNV
BAMTKENGRTg5MjA1ODcxMDZFMjI3RjJEQjJEQjAxRDU3NTVEQ0NBNDYxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSeSNsGWGnfMKmmzmwOdmWGLz
oXDLXlDkW4VqgbxxdZXxld8Qpevqtx/brSwF05d837TwgR6GTHf2Oof6i+fPoKgd
tTPSagXIvb+Vvd+yXuBmuMzUUWcNowLfW27v8lHDcnkwMZyYTpsjJPtQGmnzrFNw
rsVpKLjXN4uQ5An3M+dx7sP8EtPQX6BRAHA0kkyjkbVHWayByoY1zVIF96Azh1AU
XLqnZhPj7vRk8G+T8toA6GGzbAKmodlQUu5p3R4/QQ33O0ckvDq6bpjM9Pmahpuv
BGy6rxbCLHWRrLj8a7yiKqsSL7LaYcNMrBvXOVFX4HGjqYq2oPKpeEynWJO3AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUz+iSBYcQbiJ/LbLbAdV1XcykYT0wHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxNjMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBwwDQYJKoZIhvcNAQELBQADggEBAE+2OMspLU65SPlMCV+ZUvdllqjw
35zv1E7PosgDJUkZJk6ZzA2Tbd4I3TrGG789eNxLbPKEv69K1I0SVMmZjYQzqzeA
dVOB3c+c4sp8v9p6E3T7XbcEBsCPkUXeH5K5V9bdZHiNYDUKogtBMEwpjF/XhGh0
hFbEQTk/b8dJFsPV3EswmG9xjQnPnr6aUZSYYRVBosVQRp/pCz7fKSCY/P1deJl+
RZDQoRhL6YtfyZnZJUYSeJ7dafIMNKuQTC+PkJN8r2Z5HINkiSA4lLt+yoXizQTV
CbY/kJLagZyyCWCdhGbzKZdWT8cDc4YwQa8OBUOMKm7oG7yZqG8EfpeysbE=
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:04:21 2026 by rpki-client