Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/323830333a333033303a3a2f33322d3332203d3e20323734323830.roa
File:                     323830333a333033303a3a2f33322d3332203d3e20323734323830.roa (raw, json)
Hash identifier:          OAp0l9B/DCDzcYIoMKMYXROM2TRFfV7lzfRIhvUUuKA=
Subject key identifier:   60:99:60:52:F2:48:5A:A0:0A:18:49:C1:68:FF:6B:6A:C8:DF:A2:BF
Certificate issuer:       /CN=DB7484B576B99F869B8F536CE489DCAB68F8A2B1
Certificate serial:       7C6A52F5F795189EF3C6643C955AC6A5711BA9C1
Authority key identifier: DB:74:84:B5:76:B9:9F:86:9B:8F:53:6C:E4:89:DC:AB:68:F8:A2:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/323830333a333033303a3a2f33322d3332203d3e20323734323830.roa
Signing time:             Wed 25 Mar 2026 01:10:00 +0000
ROA not before:           Wed 25 Mar 2026 01:05:00 +0000
ROA not after:            Wed 24 Mar 2027 01:10:00 +0000
asID:                     274280
IP address blocks:        2803:3030::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:52:f5:f7:95:18:9e:f3:c6:64:3c:95:5a:c6:a5:71:1b:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7484B576B99F869B8F536CE489DCAB68F8A2B1
        Validity
            Not Before: Mar 25 01:05:00 2026 GMT
            Not After : Mar 24 01:10:00 2027 GMT
        Subject: CN=60996052F2485AA00A1849C168FF6B6AC8DFA2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:96:6b:41:a8:93:d5:9c:54:eb:b8:36:d5:
                    33:38:81:ce:fa:4b:2d:70:4b:ac:4a:37:41:53:27:
                    0e:00:37:81:a8:85:35:22:12:aa:85:6b:76:6b:fe:
                    81:ec:ff:d1:af:b5:a4:4d:09:2b:6f:62:44:f4:a7:
                    5a:fe:b4:2a:39:cf:36:2f:90:6a:b4:0d:49:f4:b1:
                    c4:18:7c:b1:56:b6:cd:4f:58:ff:d0:8c:39:30:16:
                    7f:41:68:47:2f:06:c7:ef:d7:0c:54:f9:39:16:0f:
                    b9:dc:1b:8b:6f:59:fd:84:06:df:a5:41:cf:1b:35:
                    9e:38:52:9b:09:2b:32:af:78:ff:1e:fe:33:e5:d5:
                    7c:57:ed:18:af:d5:8a:fa:f2:cc:9b:e4:48:72:71:
                    7e:5f:89:d9:e3:41:57:a7:a9:67:d8:80:c2:ce:df:
                    0d:6f:a1:13:d3:de:25:3c:4c:13:89:4b:e6:4b:7e:
                    cc:27:b3:98:cb:a2:35:dd:2a:09:5b:5e:64:68:24:
                    15:a6:a9:e1:8e:06:0b:e2:97:93:9a:ef:8f:ce:96:
                    d3:3f:dc:52:29:34:16:57:4e:30:77:54:98:b7:c5:
                    a3:f1:d1:17:0b:9c:23:06:19:b8:1f:b1:49:b9:3e:
                    e2:f7:c9:b4:5f:0d:94:4f:38:44:87:e7:35:af:4b:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:60:52:F2:48:5A:A0:0A:18:49:C1:68:FF:6B:6A:C8:DF:A2:BF
            X509v3 Authority Key Identifier:
                keyid:DB:74:84:B5:76:B9:9F:86:9B:8F:53:6C:E4:89:DC:AB:68:F8:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB7484B576B99F869B8F536CE489DCAB68F8A2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B565C8E709EECE7EFB25D39344A6CF2EBC46B098CFF4C68B07333E6991552FCD/0/323830333a333033303a3a2f33322d3332203d3e20323734323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3030::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:83:c9:64:a1:4c:0c:84:6f:09:ee:3c:3f:7b:80:ce:9d:
         e1:dd:86:67:24:ca:f8:0a:0f:16:8a:99:54:1d:90:0d:af:10:
         93:ed:71:97:73:18:e6:6d:a7:12:05:00:3b:e8:d0:f1:82:81:
         42:28:59:e7:cd:aa:aa:7c:aa:8b:b8:0a:6f:e4:a7:91:67:45:
         65:ce:2b:a4:99:43:4a:ba:ef:89:1f:59:52:9b:b2:ac:9c:aa:
         0c:ca:0f:aa:6c:78:5a:92:89:81:8d:ff:e5:78:60:7c:34:82:
         d0:34:05:c9:a8:e9:4b:bf:b6:91:da:6b:4a:3c:b4:09:88:37:
         a3:fd:7c:17:ca:71:2b:7f:9d:97:b9:29:9f:8c:01:55:8b:93:
         e0:50:fd:68:09:76:5a:f8:32:cd:f1:31:e4:ed:a1:94:69:4c:
         4b:8a:27:f7:41:a8:36:78:5d:6b:11:08:a3:3c:40:59:fe:d0:
         96:5f:e2:f7:be:af:33:bb:94:74:f7:c2:1a:78:a3:e9:20:ac:
         e6:87:13:78:ff:e0:db:84:82:4a:73:5e:94:19:8e:05:02:c7:
         67:a7:39:34:97:fe:cc:da:c0:92:1f:c0:4b:9c:1e:18:e4:6b:
         62:32:7d:ae:59:a2:a5:86:c3:eb:4b:a5:20:2e:a1:95:ba:92:
         8c:c2:84:1c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfGpS9feVGJ7zxmQ8lVrGpXEbqcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI3NDg0QjU3NkI5OUY4NjlCOEY1MzZDRTQ4OURDQUI2
OEY4QTJCMTAeFw0yNjAzMjUwMTA1MDBaFw0yNzAzMjQwMTEwMDBaMDMxMTAvBgNV
BAMTKDYwOTk2MDUyRjI0ODVBQTAwQTE4NDlDMTY4RkY2QjZBQzhERkEyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq5ZrQaiT1ZxU67g21TM4gc76
Sy1wS6xKN0FTJw4AN4GohTUiEqqFa3Zr/oHs/9GvtaRNCStvYkT0p1r+tCo5zzYv
kGq0DUn0scQYfLFWts1PWP/QjDkwFn9BaEcvBsfv1wxU+TkWD7ncG4tvWf2EBt+l
Qc8bNZ44UpsJKzKveP8e/jPl1XxX7Riv1Yr68syb5EhycX5fidnjQVenqWfYgMLO
3w1voRPT3iU8TBOJS+ZLfswns5jLojXdKglbXmRoJBWmqeGOBgvil5Oa74/OltM/
3FIpNBZXTjB3VJi3xaPx0RcLnCMGGbgfsUm5PuL3ybRfDZRPOESH5zWvS1LVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYJlgUvJIWqAKGEnBaP9rasjfor8wHwYDVR0j
BBgwFoAU23SEtXa5n4abj1Ns5Incq2j4orEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNTY1QzhFNzA5RUVDRTdFRkIyNUQzOTM0NEE2Q0YyRUJD
NDZCMDk4Q0ZGNEM2OEIwNzMzM0U2OTkxNTUyRkNELzAvREI3NDg0QjU3NkI5OUY4
NjlCOEY1MzZDRTQ4OURDQUI2OEY4QTJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjc0ODRCNTc2Qjk5Rjg2OUI4
RjUzNkNFNDg5RENBQjY4RjhBMkIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjU2NUM4RTcwOUVFQ0U3RUZCMjVEMzkzNDRBNkNGMkVCQzQ2QjA5OENG
RjRDNjhCMDczMzNFNjk5MTU1MkZDRC8wLzMyMzgzMDMzM2EzMzMwMzMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDMyMzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDMDAw
DQYJKoZIhvcNAQELBQADggEBAE1Vg8lkoUwMhG8J7jw/e4DOneHdhmckyvgKDxaK
mVQdkA2vEJPtcZdzGOZtpxIFADvo0PGCgUIoWefNqqp8qou4Cm/kp5FnRWXOK6SZ
Q0q674kfWVKbsqycqgzKD6pseFqSiYGN/+V4YHw0gtA0Bcmo6Uu/tpHaa0o8tAmI
N6P9fBfKcSt/nZe5KZ+MAVWLk+BQ/WgJdlr4Ms3xMeTtoZRpTEuKJ/dBqDZ4XWsR
CKM8QFn+0JZf4ve+rzO7lHT3whp4o+kgrOaHE3j/4NuEgkpzXpQZjgUCx2enOTSX
/szawJIfwEucHhjka2Iyfa5ZoqWGw+tLpSAuoZW6kozChBw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:23 2026 by rpki-client