Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa
File:                     323830333a383035303a3a2f33322d3438203d3e20323733303930.roa (raw, json)
Hash identifier:          F/EsDy/aFmtSuGCRRYkPcEyr9K1QhAUziQ5JSnNc8zc=
Subject key identifier:   F7:14:24:FF:B7:B5:A1:E3:EC:05:FA:DD:7A:24:9E:EF:15:FB:A3:81
Certificate issuer:       /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
Certificate serial:       1C61FD18E785DFDED0416137ABD494B34AB92FFA
Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa
Signing time:             Thu 26 Mar 2026 21:36:09 +0000
ROA not before:           Thu 26 Mar 2026 21:31:09 +0000
ROA not after:            Thu 25 Mar 2027 21:36:09 +0000
asID:                     273090
IP address blocks:        2803:8050::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:61:fd:18:e7:85:df:de:d0:41:61:37:ab:d4:94:b3:4a:b9:2f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
        Validity
            Not Before: Mar 26 21:31:09 2026 GMT
            Not After : Mar 25 21:36:09 2027 GMT
        Subject: CN=F71424FFB7B5A1E3EC05FADD7A249EEF15FBA381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:44:d2:16:3a:97:48:6e:55:da:29:17:fa:
                    f0:39:c4:45:0a:01:de:66:3d:1d:4c:ea:9a:fe:de:
                    71:ee:36:da:71:97:fa:13:68:30:b1:64:ed:62:2f:
                    46:ac:4d:20:16:c0:7d:06:24:22:c0:47:4a:ff:ce:
                    c9:29:c9:53:73:70:65:0e:e8:c7:f3:08:14:4c:57:
                    4a:bd:f9:d8:db:1f:23:62:3f:e2:a9:35:ed:4e:fa:
                    0c:45:f7:c3:2e:c9:f1:6a:97:f2:f1:27:cc:8f:0d:
                    72:3d:cc:f0:9c:65:18:95:93:f8:20:98:68:e9:91:
                    6a:a7:d8:bc:0e:3b:b6:d1:50:58:9a:bb:bd:db:4f:
                    6e:ba:e1:ce:f4:f2:2b:ba:18:bb:7f:d2:a8:ab:5e:
                    26:5b:0b:c8:81:c8:42:c8:19:75:49:7c:1e:b3:2d:
                    79:35:67:84:a3:8f:97:c2:6c:7e:1a:2f:ce:30:24:
                    e7:dd:ea:60:eb:4e:e8:d6:22:15:a5:aa:22:e2:06:
                    b8:e0:6e:57:b2:e3:d2:d7:d8:84:72:75:04:22:ea:
                    cb:c0:1a:e6:3e:ee:ca:51:47:9b:73:81:3e:ab:c6:
                    b3:ab:35:55:41:d5:b2:10:d9:4b:0b:3d:04:b4:13:
                    38:67:95:f7:48:37:fd:6d:7d:76:ec:2f:b9:66:cc:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:14:24:FF:B7:B5:A1:E3:EC:05:FA:DD:7A:24:9E:EF:15:FB:A3:81
            X509v3 Authority Key Identifier:
                keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8050::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:31:0a:07:d9:36:19:bb:26:88:c5:c8:fe:38:b2:6f:40:
         8d:87:1e:34:d2:32:a0:82:63:f2:8c:af:91:9a:0d:93:ff:3d:
         7f:25:10:58:9e:a2:aa:fd:4d:6d:ae:80:12:e0:88:80:81:dc:
         14:c2:ff:fe:a3:ac:d9:f4:ac:0c:27:e0:e4:ca:ba:47:79:35:
         2b:6a:37:de:d9:8b:ef:8f:1d:c0:51:54:c4:ce:0a:52:80:12:
         21:75:7d:d8:d0:5c:18:8d:28:a5:d4:ba:b2:4c:bb:ef:d4:48:
         a1:43:66:61:5e:3c:c2:c6:ba:44:a2:c1:1b:bd:10:a5:7a:22:
         ca:9a:c7:49:9a:b2:18:a8:75:c4:bd:62:65:e4:5e:dd:58:33:
         fc:71:93:28:fc:53:88:49:fa:bf:ab:3f:3e:40:d0:f3:05:b4:
         c7:ea:cb:eb:f8:d3:cc:df:0f:5f:aa:80:46:cc:eb:88:f6:7c:
         cb:54:1b:a0:58:c9:28:6a:6a:be:fb:61:c7:8e:3b:54:6c:2f:
         83:7b:ab:20:70:6b:14:90:8e:84:66:2e:cf:35:b7:76:f7:1f:
         3a:2f:92:89:73:82:2a:5d:2a:11:1d:f5:33:68:ed:94:85:a8:
         da:a8:57:f2:af:bf:2b:59:df:39:4e:e0:c0:e4:d7:3e:c4:79:
         ce:20:90:fa
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHGH9GOeF397QQWE3q9SUs0q5L/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNGRjZCRjc4QTY2MTI2Mjc4OUFCQjZENTNCNTlFNEI1
NTNGNDVCQzAeFw0yNjAzMjYyMTMxMDlaFw0yNzAzMjUyMTM2MDlaMDMxMTAvBgNV
BAMTKEY3MTQyNEZGQjdCNUExRTNFQzA1RkFERDdBMjQ5RUVGMTVGQkEzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVkTSFjqXSG5V2ikX+vA5xEUK
Ad5mPR1M6pr+3nHuNtpxl/oTaDCxZO1iL0asTSAWwH0GJCLAR0r/zskpyVNzcGUO
6MfzCBRMV0q9+djbHyNiP+KpNe1O+gxF98MuyfFql/LxJ8yPDXI9zPCcZRiVk/gg
mGjpkWqn2LwOO7bRUFiau73bT2664c708iu6GLt/0qirXiZbC8iByELIGXVJfB6z
LXk1Z4Sjj5fCbH4aL84wJOfd6mDrTujWIhWlqiLiBrjgbley49LX2IRydQQi6svA
GuY+7spRR5tzgT6rxrOrNVVB1bIQ2UsLPQS0EzhnlfdIN/1tfXbsL7lmzBIPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9xQk/7e1oePsBfrdeiSe7xX7o4EwHwYDVR0j
BBgwFoAUg/9r94pmEmJ4mrttU7WeS1U/RbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQ0I2MEFDOUVGQTU4NEI3NDI4OTJFRjUzRUM0MTk1Rjg5
MUQxODlEQkZBRTI0N0YzNzRBNDNENjdFMzA2QjY1LzAvODNGRjZCRjc4QTY2MTI2
Mjc4OUFCQjZENTNCNTlFNEI1NTNGNDVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0ZGNkJGNzhBNjYxMjYyNzg5
QUJCNkQ1M0I1OUU0QjU1M0Y0NUJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkNCNjBBQzlFRkE1ODRCNzQyODkyRUY1M0VDNDE5NUY4OTFEMTg5REJG
QUUyNDdGMzc0QTQzRDY3RTMwNkI2NS8wLzMyMzgzMDMzM2EzODMwMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgFAw
DQYJKoZIhvcNAQELBQADggEBAFZcMQoH2TYZuyaIxcj+OLJvQI2HHjTSMqCCY/KM
r5GaDZP/PX8lEFieoqr9TW2ugBLgiICB3BTC//6jrNn0rAwn4OTKukd5NStqN97Z
i++PHcBRVMTOClKAEiF1fdjQXBiNKKXUurJMu+/USKFDZmFePMLGukSiwRu9EKV6
Isqax0mashiodcS9YmXkXt1YM/xxkyj8U4hJ+r+rPz5A0PMFtMfqy+v408zfD1+q
gEbM64j2fMtUG6BYyShqar77YceOO1RsL4N7qyBwaxSQjoRmLs81t3b3Hzovkolz
gipdKhEd9TNo7ZSFqNqoV/KvvytZ3zlO4MDk1z7Eec4gkPo=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:43:36 2026 by rpki-client