Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3730303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3730303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          79Jw/YH193tDuaANUEqHbhGjUmRlza5xUenQ6lm80ZY=
Subject key identifier:   B7:E9:82:56:99:07:A2:76:1F:4A:13:0D:27:77:43:A9:FB:2A:7E:C5
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       2D4585A01598D70F574556965C411D72D8ECC45C
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3730303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 07 May 2026 20:41:39 +0000
ROA not before:           Thu 07 May 2026 20:36:39 +0000
ROA not after:            Thu 06 May 2027 20:41:39 +0000
asID:                     273068
IP address blocks:        2803:b790:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:45:85:a0:15:98:d7:0f:57:45:56:96:5c:41:1d:72:d8:ec:c4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: May  7 20:36:39 2026 GMT
            Not After : May  6 20:41:39 2027 GMT
        Subject: CN=B7E982569907A2761F4A130D277743A9FB2A7EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:eb:db:10:60:41:9b:85:2c:46:66:c9:f0:
                    ec:5e:7c:dc:d2:6b:a6:1a:b4:55:62:05:03:e8:14:
                    69:6a:52:5b:b0:9f:5b:47:47:5e:08:8e:b2:41:6d:
                    d7:90:d1:02:9b:5c:ed:be:09:bc:8c:79:ae:dc:81:
                    b3:77:56:64:6f:a4:70:d0:da:87:c9:3b:a5:08:60:
                    97:4b:da:65:01:94:31:e9:50:96:33:60:71:26:99:
                    ac:97:8c:1c:cb:6e:cb:29:b3:af:56:03:dc:e1:52:
                    40:de:5a:bc:df:9e:9f:17:4f:19:a8:b9:a5:d2:31:
                    71:50:a1:a5:9b:fa:18:f2:02:db:b7:fe:bd:19:26:
                    8a:32:12:4e:ac:a4:d1:0f:eb:04:fe:4d:7e:a1:2b:
                    09:a9:e9:99:43:c9:e4:31:96:60:d3:dd:5c:8c:f5:
                    98:ed:b9:f8:88:19:90:0f:eb:1b:7d:ef:74:8f:9e:
                    58:f9:78:40:9e:da:01:61:73:f5:7b:e7:76:88:da:
                    82:04:66:73:90:0e:87:a4:3c:8d:e4:62:76:2f:41:
                    27:fc:fa:b9:e9:f2:48:0e:ec:7a:a2:90:4d:15:27:
                    cb:59:a3:88:05:23:a2:2b:ee:77:2c:25:be:40:f6:
                    97:5f:73:77:3c:84:38:04:e8:bc:9a:16:26:a4:90:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:82:56:99:07:A2:76:1F:4A:13:0D:27:77:43:A9:FB:2A:7E:C5
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3730303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:b4:87:f4:38:46:1f:96:2c:97:9e:a6:01:8a:48:3c:12:ce:
         ab:6c:f2:d0:a0:07:41:20:60:f9:7d:77:34:c7:b6:3f:bb:3a:
         e0:80:cc:8c:4e:fb:7c:f5:d2:4b:97:0c:77:57:aa:c3:aa:cf:
         b9:a2:82:5a:56:5e:29:51:e3:81:37:ae:ee:b2:f1:0c:d7:b0:
         80:c6:99:25:f2:e1:e0:62:5e:2f:bb:d2:d0:47:5c:7f:2a:40:
         e9:0b:8c:4f:62:14:e8:50:af:6f:48:19:88:fc:51:18:20:67:
         07:a8:ab:c7:ae:9d:8a:d9:bf:81:c1:90:6f:86:3e:23:08:77:
         13:8b:58:9d:0e:ec:9a:46:34:92:41:2b:0f:86:8e:c0:fa:3a:
         81:86:10:ce:0e:70:3a:47:62:17:01:db:5c:d4:8d:17:80:ef:
         48:2a:7a:a1:6f:dc:93:e8:92:38:72:13:2a:30:11:b9:79:07:
         a4:73:f1:bf:83:d1:2f:65:7e:0d:36:af:26:7e:4f:df:7f:15:
         99:cc:a6:73:d1:3c:77:a5:00:9f:60:df:59:c5:fb:16:cb:95:
         ad:57:f2:84:06:2e:fd:75:4b:b2:16:20:1d:8f:6e:42:b8:89:
         d4:75:74:ce:e7:76:e0:6b:1a:74:6f:19:5f:ab:96:dc:cd:67:
         6f:cf:35:77
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIULUWFoBWY1w9XRVaWXEEdctjsxFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERGRjJEQzc5RUU1MzgzOTM0NjBCQTUzRDAxREM3MTkx
NjE1MEQ0MTAeFw0yNjA1MDcyMDM2MzlaFw0yNzA1MDYyMDQxMzlaMDMxMTAvBgNV
BAMTKEI3RTk4MjU2OTkwN0EyNzYxRjRBMTMwRDI3Nzc0M0E5RkIyQTdFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/uvbEGBBm4UsRmbJ8OxefNzS
a6YatFViBQPoFGlqUluwn1tHR14IjrJBbdeQ0QKbXO2+CbyMea7cgbN3VmRvpHDQ
2ofJO6UIYJdL2mUBlDHpUJYzYHEmmayXjBzLbssps69WA9zhUkDeWrzfnp8XTxmo
uaXSMXFQoaWb+hjyAtu3/r0ZJooyEk6spNEP6wT+TX6hKwmp6ZlDyeQxlmDT3VyM
9ZjtufiIGZAP6xt973SPnlj5eECe2gFhc/V753aI2oIEZnOQDoekPI3kYnYvQSf8
+rnp8kgO7HqikE0VJ8tZo4gFI6Ir7ncsJb5A9pdfc3c8hDgE6LyaFiakkFJ/AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUt+mCVpkHonYfShMNJ3dDqfsqfsUwHwYDVR0j
BBgwFoAUDf8tx57lODk0YLpT0B3HGRYVDUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzk5Q0M5RTM1ODNENEU4RTc5NEEwQUJFRUM1OUY5QjE3
MkU2NDg5Q0JDQkZBMkU2NjQ5MTM2MkMzQzU5NjRGLzAvMERGRjJEQzc5RUU1Mzgz
OTM0NjBCQTUzRDAxREM3MTkxNjE1MEQ0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREZGMkRDNzlFRTUzODM5MzQ2
MEJBNTNEMDFEQzcxOTE2MTUwRDQxLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc5OUNDOUUzNTgzRDRFOEU3OTRBMEFCRUVDNTlGOUIxNzJFNjQ4OUNC
Q0JGQTJFNjY0OTEzNjJDM0M1OTY0Ri8wLzMyMzgzMDMzM2E2MjM3MzkzMDNhMzcz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzAzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAO3kAcwDQYJKoZIhvcNAQELBQADggEBALi0h/Q4Rh+WLJeepgGKSDwSzqts
8tCgB0EgYPl9dzTHtj+7OuCAzIxO+3z10kuXDHdXqsOqz7miglpWXilR44E3ru6y
8QzXsIDGmSXy4eBiXi+70tBHXH8qQOkLjE9iFOhQr29IGYj8URggZweoq8eunYrZ
v4HBkG+GPiMIdxOLWJ0O7JpGNJJBKw+GjsD6OoGGEM4OcDpHYhcB21zUjReA70gq
eqFv3JPokjhyEyowEbl5B6Rz8b+D0S9lfg02ryZ+T99/FZnMpnPRPHelAJ9g31nF
+xbLla1X8oQGLv11S7IWIB2PbkK4idR1dM7nduBrGnRvGV+rltzNZ2/PNXc=
-----END CERTIFICATE-----
Generated at Wed May 13 17:00:40 2026 by rpki-client