Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/323830333a386436303a3a2f33322d3332203d3e20323639373637.roa
File:                     323830333a386436303a3a2f33322d3332203d3e20323639373637.roa (raw, json)
Hash identifier:          4yaWwYBoVRpTixA12pc84oQUEcItTZyQY5jbzh3oXAc=
Subject key identifier:   3F:0B:F8:6E:1E:5F:D3:A4:29:8C:5B:A5:8E:D7:11:4B:CD:D4:C2:50
Certificate issuer:       /CN=E04E019E98A3A6845A74FD9DA4FB7D010F9E5956
Certificate serial:       73918F67927CC236D02C24E8206791704680F5B4
Authority key identifier: E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/323830333a386436303a3a2f33322d3332203d3e20323639373637.roa
Signing time:             Fri 20 Mar 2026 16:10:00 +0000
ROA not before:           Fri 20 Mar 2026 16:05:00 +0000
ROA not after:            Fri 19 Mar 2027 16:10:00 +0000
asID:                     269767
IP address blocks:        2803:8d60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:91:8f:67:92:7c:c2:36:d0:2c:24:e8:20:67:91:70:46:80:f5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E04E019E98A3A6845A74FD9DA4FB7D010F9E5956
        Validity
            Not Before: Mar 20 16:05:00 2026 GMT
            Not After : Mar 19 16:10:00 2027 GMT
        Subject: CN=3F0BF86E1E5FD3A4298C5BA58ED7114BCDD4C250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:78:b7:f1:6b:a5:3b:61:10:3c:0c:6b:4d:
                    9c:42:e7:c5:77:c5:07:ba:43:3e:00:3e:26:4f:4d:
                    e9:05:98:ee:83:76:80:cf:4a:17:46:20:ed:53:bc:
                    b7:a5:3f:95:68:fc:1f:f5:05:d3:7e:09:f5:45:38:
                    75:01:e6:28:8d:7d:33:53:76:2a:64:d1:11:e5:4f:
                    49:9b:24:75:d7:9f:5a:95:68:9d:3b:07:ad:7a:b4:
                    69:de:46:e9:ea:dc:e6:64:04:a1:24:68:ee:a8:4d:
                    16:73:c8:ec:24:32:e7:13:8d:f1:60:ed:63:9e:95:
                    86:d7:19:21:5c:d2:10:d0:f1:b7:a2:ca:16:b2:d0:
                    67:64:96:4a:d7:fc:34:8b:ff:24:5b:da:a8:a6:a2:
                    de:b5:69:b8:ef:bf:31:33:a5:2e:56:b1:cc:7f:30:
                    81:4d:33:af:a8:e5:5a:38:5f:7d:21:53:21:ac:c1:
                    97:8b:e2:5d:7a:a3:5f:ea:78:96:56:86:8b:91:7d:
                    32:b1:57:bf:2a:bf:78:1a:a6:04:9f:33:3e:d1:e1:
                    dd:1e:3b:30:90:ea:0a:3a:2f:7e:40:28:ff:93:14:
                    ac:f2:0f:44:a9:0b:3b:b5:a7:12:18:36:ac:9f:af:
                    22:bc:a3:66:bb:39:73:11:84:1b:5a:82:d2:1a:4d:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:F8:6E:1E:5F:D3:A4:29:8C:5B:A5:8E:D7:11:4B:CD:D4:C2:50
            X509v3 Authority Key Identifier:
                keyid:E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/323830333a386436303a3a2f33322d3332203d3e20323639373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:d1:24:3e:3c:a6:fd:44:d8:70:37:0c:cf:96:44:c8:50:
         6e:f0:fe:53:ce:22:a9:79:1f:1c:fc:ed:54:6a:0e:22:30:2b:
         79:28:29:7a:69:97:96:b3:b2:60:50:67:a8:1e:84:30:f8:4c:
         0e:d5:d3:62:ac:35:5a:3f:46:76:af:b7:1a:52:ff:5c:5a:87:
         31:2e:a7:c6:ae:8e:52:41:a6:2c:7e:f6:87:73:25:2f:2f:c8:
         da:b1:c0:da:bf:53:39:02:b1:64:ea:ff:6c:ba:6b:45:8a:46:
         db:b1:9f:4b:61:00:68:31:5b:62:bd:8f:59:3b:5d:95:49:4e:
         c1:ad:1e:07:ee:0a:ae:56:5b:c4:ea:ba:b9:d9:bf:cf:79:ed:
         fc:01:54:f9:dc:7e:aa:95:43:be:2e:a9:3d:63:d9:df:20:99:
         bb:f0:22:16:9e:26:76:c3:72:95:f8:ac:92:24:92:c5:22:15:
         0f:c8:70:1b:b1:7c:9d:88:1d:2c:b5:86:e3:57:75:e8:e9:de:
         51:ce:a6:2e:a0:15:01:3a:e3:08:c5:0f:19:33:35:e3:73:2d:
         46:cc:a9:0c:24:7a:c2:02:f5:7c:28:84:fb:ec:c2:e7:bd:10:
         ae:b2:9e:a1:64:b9:ff:52:d9:1a:01:14:3f:a1:f1:bb:36:98:
         fe:66:12:ae
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUc5GPZ5J8wjbQLCToIGeRcEaA9bQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA0RTAxOUU5OEEzQTY4NDVBNzRGRDlEQTRGQjdEMDEw
RjlFNTk1NjAeFw0yNjAzMjAxNjA1MDBaFw0yNzAzMTkxNjEwMDBaMDMxMTAvBgNV
BAMTKDNGMEJGODZFMUU1RkQzQTQyOThDNUJBNThFRDcxMTRCQ0RENEMyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S3i38WulO2EQPAxrTZxC58V3
xQe6Qz4APiZPTekFmO6DdoDPShdGIO1TvLelP5Vo/B/1BdN+CfVFOHUB5iiNfTNT
dipk0RHlT0mbJHXXn1qVaJ07B616tGneRunq3OZkBKEkaO6oTRZzyOwkMucTjfFg
7WOelYbXGSFc0hDQ8beiyhay0GdklkrX/DSL/yRb2qimot61abjvvzEzpS5Wscx/
MIFNM6+o5Vo4X30hUyGswZeL4l16o1/qeJZWhouRfTKxV78qv3gapgSfMz7R4d0e
OzCQ6go6L35AKP+TFKzyD0SpCzu1pxIYNqyfryK8o2a7OXMRhBtagtIaTQqhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPwv4bh5f06QpjFuljtcRS83UwlAwHwYDVR0j
BBgwFoAU4E4BnpijpoRadP2dpPt9AQ+eWVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzJCREFFQTQ3QzY2NTUyQjQ2OUMxNDYyMTVFQUFEMDhC
QzI3QjNDQjI4RDNENkY0MDI0MjlEM0Q2QjdGRTc5LzAvRTA0RTAxOUU5OEEzQTY4
NDVBNzRGRDlEQTRGQjdEMDEwRjlFNTk1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDRFMDE5RTk4QTNBNjg0NUE3
NEZEOURBNEZCN0QwMTBGOUU1OTU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyQkRBRUE0N0M2NjU1MkI0NjlDMTQ2MjE1RUFBRDA4QkMyN0IzQ0Iy
OEQzRDZGNDAyNDI5RDNENkI3RkU3OS8wLzMyMzgzMDMzM2EzODY0MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM3MzYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDjWAw
DQYJKoZIhvcNAQELBQADggEBAB8k0SQ+PKb9RNhwNwzPlkTIUG7w/lPOIql5Hxz8
7VRqDiIwK3koKXppl5azsmBQZ6gehDD4TA7V02KsNVo/RnavtxpS/1xahzEup8au
jlJBpix+9odzJS8vyNqxwNq/UzkCsWTq/2y6a0WKRtuxn0thAGgxW2K9j1k7XZVJ
TsGtHgfuCq5WW8TqurnZv8957fwBVPncfqqVQ74uqT1j2d8gmbvwIhaeJnbDcpX4
rJIkksUiFQ/IcBuxfJ2IHSy1huNXdejp3lHOpi6gFQE64wjFDxkzNeNzLUbMqQwk
esIC9XwohPvswue9EK6ynqFkuf9S2RoBFD+h8bs2mP5mEq4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:42 2026 by rpki-client