Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/323830333a623161303a3a2f33322d3438203d3e20323637373034.roa
File:                     323830333a623161303a3a2f33322d3438203d3e20323637373034.roa (raw, json)
Hash identifier:          huNGqLsbuNj24yimsLvfuJ1EkFVf/zFLjGN/SvKbLh8=
Subject key identifier:   D4:5E:4D:0A:9F:53:A1:00:81:08:1F:4E:4A:8B:6C:69:13:29:D0:6F
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       173B98875689C6A80F283CAAA31BFA73FB922DF6
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/323830333a623161303a3a2f33322d3438203d3e20323637373034.roa
Signing time:             Thu 30 Apr 2026 19:40:30 +0000
ROA not before:           Thu 30 Apr 2026 19:35:30 +0000
ROA not after:            Thu 29 Apr 2027 19:40:30 +0000
asID:                     267704
IP address blocks:        2803:b1a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3b:98:87:56:89:c6:a8:0f:28:3c:aa:a3:1b:fa:73:fb:92:2d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: Apr 30 19:35:30 2026 GMT
            Not After : Apr 29 19:40:30 2027 GMT
        Subject: CN=D45E4D0A9F53A10081081F4E4A8B6C691329D06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:3c:43:ea:b4:94:5b:53:89:81:16:26:0d:
                    f4:40:0d:d4:c9:67:41:65:b5:60:0b:66:eb:09:3e:
                    2d:48:e3:e4:34:3c:b8:2b:5e:dd:2b:d7:00:17:d6:
                    69:73:e2:db:af:29:a4:da:ed:82:15:cc:2c:03:80:
                    e2:5c:22:c9:d9:9a:ee:5c:4e:94:6d:4c:8e:fb:33:
                    4f:29:a5:56:1d:4a:ab:cb:09:47:b6:a6:28:00:be:
                    66:ed:4c:67:3f:3d:a5:c3:79:20:2e:30:b2:3b:13:
                    ad:7a:7b:fa:ee:e0:ec:6f:88:32:d0:a2:fe:55:f7:
                    9b:a7:07:99:c5:38:d6:fd:f4:bf:a4:ae:82:65:80:
                    2f:61:47:ea:14:a2:46:ca:57:43:e4:72:df:99:e0:
                    44:4a:5f:5d:d9:74:a5:f3:e5:cf:49:69:05:1c:1d:
                    b6:0f:24:2f:06:66:7f:db:8e:cc:ba:69:f2:c7:de:
                    aa:da:59:b4:d8:36:d4:92:cb:c4:5e:d6:34:0b:e2:
                    be:bf:7a:e8:cb:d9:76:c1:25:6c:b4:10:26:d5:ef:
                    a3:75:e0:f5:4e:4d:4c:3f:00:98:7a:41:45:8a:ba:
                    f3:ed:b9:7c:6f:20:a1:e5:b0:7e:21:af:3e:d3:95:
                    e2:7f:6e:ab:21:64:ab:9e:ef:23:db:3e:64:e5:40:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:4D:0A:9F:53:A1:00:81:08:1F:4E:4A:8B:6C:69:13:29:D0:6F
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/323830333a623161303a3a2f33322d3438203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:67:36:c4:a3:2a:1a:51:2f:e4:f0:7e:80:47:b0:73:80:4f:
         eb:d5:46:a9:9d:1d:3a:4f:9f:2b:09:5e:51:15:47:65:e6:c4:
         ec:52:ab:65:98:ad:ee:5c:df:fd:50:d6:79:0c:de:96:3d:c6:
         70:08:b7:1f:9c:c1:a0:9f:5b:be:ac:c2:90:a1:13:71:8a:9a:
         93:87:5b:35:b2:61:ae:31:0b:40:60:ef:1d:d2:56:de:23:e3:
         06:87:0d:ac:ff:3c:e5:af:ed:ac:2a:45:4e:68:e6:56:be:ee:
         b9:cb:04:e2:15:05:ab:92:af:54:1a:61:c0:64:82:85:d2:ab:
         d9:05:e2:c3:6e:de:40:cf:ba:a0:2d:e9:84:ce:15:0b:a9:3f:
         be:4c:52:41:3b:c6:59:06:c7:73:cf:5e:d5:a7:6f:b7:08:3d:
         2c:8c:70:92:6c:3e:f3:ed:fd:cb:9c:09:4c:a1:da:b0:ac:e6:
         4b:9a:9f:75:05:e0:2d:08:6b:00:ac:44:97:04:26:ee:ae:08:
         8e:cc:ed:f6:6d:8f:b0:93:cf:6a:f6:5e:d3:8a:f0:a8:2c:67:
         91:cc:3f:9b:ab:19:49:c0:ca:c6:f9:51:5f:90:ca:1f:e0:74:
         ba:cb:0b:40:9e:1d:ad:a3:84:43:11:ab:9d:45:51:7e:9e:0c:
         1a:3e:c2:94
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFzuYh1aJxqgPKDyqoxv6c/uSLfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5MDM3OTY4NDA5Mzg3NjE1QTI4NjdDODFCREY0RUU4
ODAwOTIwMzAeFw0yNjA0MzAxOTM1MzBaFw0yNzA0MjkxOTQwMzBaMDMxMTAvBgNV
BAMTKEQ0NUU0RDBBOUY1M0ExMDA4MTA4MUY0RTRBOEI2QzY5MTMyOUQwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdDzxD6rSUW1OJgRYmDfRADdTJ
Z0FltWALZusJPi1I4+Q0PLgrXt0r1wAX1mlz4tuvKaTa7YIVzCwDgOJcIsnZmu5c
TpRtTI77M08ppVYdSqvLCUe2pigAvmbtTGc/PaXDeSAuMLI7E616e/ru4OxviDLQ
ov5V95unB5nFONb99L+kroJlgC9hR+oUokbKV0Pkct+Z4ERKX13ZdKXz5c9JaQUc
HbYPJC8GZn/bjsy6afLH3qraWbTYNtSSy8Re1jQL4r6/eujL2XbBJWy0ECbV76N1
4PVOTUw/AJh6QUWKuvPtuXxvIKHlsH4hrz7TleJ/bqshZKue7yPbPmTlQM8fAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU1F5NCp9ToQCBCB9OSotsaRMp0G8wHwYDVR0j
BBgwFoAUvZA3loQJOHYVooZ8gb307ogAkgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QjJENkE1NTIzMjEyNDc3QkM4NDM3QzQ3RDQ5MURFN0Qx
NDM0RDQwM0NCQkNDNTcyNUJEMkIwQzJFNTA3MjcxLzAvQkQ5MDM3OTY4NDA5Mzg3
NjE1QTI4NjdDODFCREY0RUU4ODAwOTIwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDkwMzc5Njg0MDkzODc2MTVB
Mjg2N0M4MUJERjRFRTg4MDA5MjAzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUIyRDZBNTUyMzIxMjQ3N0JDODQzN0M0N0Q0OTFERTdEMTQzNEQ0MDND
QkJDQzU3MjVCRDJCMEMyRTUwNzI3MS8wLzMyMzgzMDMzM2E2MjMxNjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDsaAw
DQYJKoZIhvcNAQELBQADggEBAHNnNsSjKhpRL+TwfoBHsHOAT+vVRqmdHTpPnysJ
XlEVR2XmxOxSq2WYre5c3/1Q1nkM3pY9xnAItx+cwaCfW76swpChE3GKmpOHWzWy
Ya4xC0Bg7x3SVt4j4waHDaz/POWv7awqRU5o5la+7rnLBOIVBauSr1QaYcBkgoXS
q9kF4sNu3kDPuqAt6YTOFQupP75MUkE7xlkGx3PPXtWnb7cIPSyMcJJsPvPt/cuc
CUyh2rCs5kuan3UF4C0IawCsRJcEJu6uCI7M7fZtj7CTz2r2XtOK8KgsZ5HMP5ur
GUnAysb5UV+Qyh/gdLrLC0CeHa2jhEMRq51FUX6eDBo+wpQ=
-----END CERTIFICATE-----
Generated at Wed May 13 17:55:48 2026 by rpki-client