Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          ef2Lyd/R5dkF4nHO1zBXGhQn2dKjsq3tFuPN/d0cqyw=
Subject key identifier:   37:B9:6A:17:F7:13:D1:C8:90:B5:7D:9F:FC:1A:A0:EE:C4:CE:FD:59
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       7A4F617BF8D20A4B369FDF45E6253F9A33784C10
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 03 Mar 2026 05:32:31 +0000
ROA not before:           Tue 03 Mar 2026 05:27:31 +0000
ROA not after:            Tue 02 Mar 2027 05:32:31 +0000
asID:                     273192
IP address blocks:        2803:650:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 16:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4f:61:7b:f8:d2:0a:4b:36:9f:df:45:e6:25:3f:9a:33:78:4c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Mar  3 05:27:31 2026 GMT
            Not After : Mar  2 05:32:31 2027 GMT
        Subject: CN=37B96A17F713D1C890B57D9FFC1AA0EEC4CEFD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:b6:7c:fc:91:3f:ae:69:ca:d2:21:bd:50:
                    43:8e:de:65:1c:f1:fb:3f:4f:d0:10:2e:35:e3:71:
                    76:5a:7e:93:c4:5a:2a:1b:3f:99:d4:8c:85:2c:1a:
                    64:42:b0:48:79:23:cb:a2:8e:65:a4:c6:b5:24:4f:
                    be:47:be:11:88:5d:3d:93:de:69:e3:2a:f7:74:1f:
                    cf:50:75:af:50:05:d2:00:81:b4:d4:db:c3:94:40:
                    ce:39:9c:71:83:c8:9e:95:3e:dd:5d:ca:27:3d:02:
                    d3:5d:ec:ee:b6:c5:b0:7a:30:b9:35:d7:8f:5d:1d:
                    a4:3d:1c:ae:37:89:76:2e:76:82:0c:43:cf:9e:d3:
                    35:32:4d:3e:4b:f4:cb:6c:22:3f:1b:72:cf:ab:28:
                    58:ee:15:b1:bc:e7:4b:0f:4c:33:11:6d:4b:8d:54:
                    09:47:b7:36:f5:47:79:12:4a:4c:7d:9e:d1:5e:24:
                    9c:5f:cd:d4:d7:61:2d:e9:ed:79:01:69:85:3f:9b:
                    1d:70:02:c5:51:67:71:ed:ac:bd:87:38:d1:17:2d:
                    87:c0:b0:da:dc:f3:b4:34:a8:01:c3:ae:d3:ab:2e:
                    a2:48:56:de:df:8e:a4:62:5d:15:3d:07:43:ba:3c:
                    6d:36:37:92:a8:9d:f1:63:da:c9:da:81:06:55:23:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B9:6A:17:F7:13:D1:C8:90:B5:7D:9F:FC:1A:A0:EE:C4:CE:FD:59
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:91:d8:c5:0a:8c:68:28:91:c6:2d:23:ec:d4:c2:cf:ff:d5:
         85:7b:f3:a3:e2:dc:b6:98:6b:14:15:29:0f:2f:33:2c:c9:34:
         b4:77:0a:0f:7d:2e:ff:68:bf:f4:86:7d:28:ab:47:96:b2:c2:
         16:d2:1c:15:bd:8c:67:8a:c5:88:f8:33:97:c3:ff:8f:85:45:
         8f:bf:19:bb:e3:ca:7d:02:18:2f:18:81:05:86:f8:74:94:d9:
         6b:6e:85:0c:2d:01:2e:e4:21:10:b0:ac:33:7b:e9:55:f5:8e:
         ed:a1:26:73:9b:d2:46:65:b4:a2:a0:31:db:29:c9:d1:3d:38:
         09:75:59:cf:e6:63:ae:1a:95:83:b4:60:18:38:6d:f0:c1:77:
         0e:78:29:2a:57:00:91:3a:9c:c1:0b:fe:fe:61:ca:f2:8b:9e:
         02:18:29:25:2d:07:ce:37:1e:c6:f9:d2:ab:ec:08:77:5b:23:
         8c:08:aa:84:4f:e9:2f:90:74:a8:a9:fa:0e:cc:0b:60:2a:d6:
         d8:33:1a:07:b6:a7:24:91:fa:de:d6:05:74:00:03:7f:c7:26:
         f1:8c:91:bf:ae:95:ab:31:a0:07:78:78:2a:95:27:50:08:b9:
         28:2b:1e:ab:7b:a7:67:9e:d0:e2:eb:c3:f5:46:c1:0d:23:f1:
         05:00:b9:05
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUek9he/jSCks2n99F5iU/mjN4TBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNjAzMDMwNTI3MzFaFw0yNzAzMDIwNTMyMzFaMDMxMTAvBgNV
BAMTKDM3Qjk2QTE3RjcxM0QxQzg5MEI1N0Q5RkZDMUFBMEVFQzRDRUZENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidrZ8/JE/rmnK0iG9UEOO3mUc
8fs/T9AQLjXjcXZafpPEWiobP5nUjIUsGmRCsEh5I8uijmWkxrUkT75HvhGIXT2T
3mnjKvd0H89Qda9QBdIAgbTU28OUQM45nHGDyJ6VPt1dyic9AtNd7O62xbB6MLk1
149dHaQ9HK43iXYudoIMQ8+e0zUyTT5L9MtsIj8bcs+rKFjuFbG850sPTDMRbUuN
VAlHtzb1R3kSSkx9ntFeJJxfzdTXYS3p7XkBaYU/mx1wAsVRZ3HtrL2HONEXLYfA
sNrc87Q0qAHDrtOrLqJIVt7fjqRiXRU9B0O6PG02N5KonfFj2snagQZVI9VfAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUN7lqF/cT0ciQtX2f/Bqg7sTO/VkwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTM2MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlAGMA0GCSqGSIb3DQEBCwUAA4IBAQDSkdjFCoxoKJHGLSPs1MLP/9WFe/Oj
4ty2mGsUFSkPLzMsyTS0dwoPfS7/aL/0hn0oq0eWssIW0hwVvYxnisWI+DOXw/+P
hUWPvxm748p9AhgvGIEFhvh0lNlrboUMLQEu5CEQsKwze+lV9Y7toSZzm9JGZbSi
oDHbKcnRPTgJdVnP5mOuGpWDtGAYOG3wwXcOeCkqVwCROpzBC/7+Ycryi54CGCkl
LQfONx7G+dKr7Ah3WyOMCKqET+kvkHSoqfoOzAtgKtbYMxoHtqckkfre1gV0AAN/
xybxjJG/rpWrMaAHeHgqlSdQCLkoKx6re6dnntDi68P1RsENI/EFALkF
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:29 2026 by rpki-client