Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/323830333a316635303a3a2f33322d3438203d3e20323733393531.roa
File:                     323830333a316635303a3a2f33322d3438203d3e20323733393531.roa (raw, json)
Hash identifier:          SqO0qmgye6lV23qlpdDZmtpHc4Rpv/nZ7dZv6FiMS98=
Subject key identifier:   99:7F:15:48:CA:45:B7:46:9C:DB:79:DF:99:BA:45:BF:28:95:DA:6B
Certificate issuer:       /CN=50786C1E2E6A647AB445B573BBCD69A9CBDB23F6
Certificate serial:       7134F920B0891C171A3B27CD9498CB8CD59ABA61
Authority key identifier: 50:78:6C:1E:2E:6A:64:7A:B4:45:B5:73:BB:CD:69:A9:CB:DB:23:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/323830333a316635303a3a2f33322d3438203d3e20323733393531.roa
Signing time:             Tue 21 Jul 2026 15:05:01 +0000
ROA not before:           Tue 21 Jul 2026 15:00:01 +0000
ROA not after:            Tue 20 Jul 2027 15:05:01 +0000
asID:                     273951
IP address blocks:        2803:1f50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:34:f9:20:b0:89:1c:17:1a:3b:27:cd:94:98:cb:8c:d5:9a:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50786C1E2E6A647AB445B573BBCD69A9CBDB23F6
        Validity
            Not Before: Jul 21 15:00:01 2026 GMT
            Not After : Jul 20 15:05:01 2027 GMT
        Subject: CN=997F1548CA45B7469CDB79DF99BA45BF2895DA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:cb:7b:23:a6:57:ff:1e:44:16:71:f8:30:
                    21:9c:17:04:2e:78:7e:ed:fb:62:51:d2:9a:83:db:
                    6a:37:59:ac:69:be:c1:c2:80:4e:33:c7:de:27:8a:
                    9b:00:c4:fe:c8:fb:bc:95:04:25:02:fa:4f:e5:54:
                    bd:a3:62:8a:6e:3d:19:16:a6:b7:56:9c:04:9a:0a:
                    96:c0:2c:03:c1:f1:cf:46:76:30:8e:6f:bd:55:6e:
                    26:8f:b5:53:12:55:00:8f:63:9b:8e:4c:e2:a3:02:
                    78:de:c0:7f:73:1c:6e:27:4b:7c:76:bc:2f:32:8d:
                    bf:f7:b8:6b:cb:2f:cd:5b:8d:98:c6:c6:77:77:8f:
                    93:2e:17:83:36:9c:88:cb:50:de:9a:8a:a1:e0:ca:
                    b6:0b:2e:64:6c:db:76:88:4a:b6:40:1e:83:1f:3b:
                    07:b4:5a:5a:7c:6b:76:4a:a0:d5:ed:dc:f4:c6:84:
                    ad:22:0d:9a:10:b1:73:75:b3:3c:b2:17:f8:77:b4:
                    39:6a:00:56:79:19:38:30:e6:ca:cc:c0:d7:33:db:
                    8b:ef:48:d1:59:e3:98:e3:3e:2b:c5:f4:6d:e4:15:
                    35:22:50:54:b6:3b:b4:25:a7:6f:01:de:63:68:d5:
                    5f:38:39:dd:5a:0c:18:59:9c:eb:17:3f:b5:56:9d:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7F:15:48:CA:45:B7:46:9C:DB:79:DF:99:BA:45:BF:28:95:DA:6B
            X509v3 Authority Key Identifier:
                keyid:50:78:6C:1E:2E:6A:64:7A:B4:45:B5:73:BB:CD:69:A9:CB:DB:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50786C1E2E6A647AB445B573BBCD69A9CBDB23F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA20993CA4FF3C964519974D70437D0531DB8343F2C212169F05172FAA513B5D/0/323830333a316635303a3a2f33322d3438203d3e20323733393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:aa:37:5c:d4:5f:01:b8:33:e7:f8:66:2e:8c:67:20:4f:
         c7:66:40:33:bf:b5:a3:e7:a4:fe:e9:b3:10:10:8c:83:02:00:
         ab:b1:4d:97:ca:c1:b3:2a:2e:23:3b:33:41:53:d4:b0:51:e8:
         d1:44:46:82:d7:62:65:b7:36:9a:b5:92:57:06:be:58:29:67:
         99:18:ec:c7:61:38:63:e6:ae:5a:c2:96:75:49:ed:db:8c:0e:
         31:89:d9:81:c1:cc:9a:96:3f:55:d1:80:f6:1f:de:bd:20:12:
         be:f8:6e:52:01:f0:d3:3c:01:c2:91:f6:bb:af:47:ae:f5:32:
         0a:0f:64:1f:09:7c:b8:ed:9f:94:14:e0:e7:d9:3e:a6:a5:bd:
         58:b3:a7:6f:bf:4b:25:13:c5:11:35:10:71:d1:e2:ed:ce:e9:
         05:56:7b:10:f0:73:5d:3f:a1:00:ab:b9:7e:83:e6:b9:3b:6a:
         87:a9:30:15:3f:fa:31:80:bb:0d:fd:d4:62:df:85:0b:08:12:
         65:82:b1:b5:56:41:25:84:26:3a:50:63:69:92:97:ba:55:b4:
         a1:1d:3d:03:d3:21:4b:b4:e9:da:8e:96:37:7b:36:81:6e:27:
         04:94:14:a0:13:b0:84:51:6f:6e:9c:47:63:47:bd:63:dd:0a:
         88:c3:1d:5e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcTT5ILCJHBcaOyfNlJjLjNWaumEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA3ODZDMUUyRTZBNjQ3QUI0NDVCNTczQkJDRDY5QTlD
QkRCMjNGNjAeFw0yNjA3MjExNTAwMDFaFw0yNzA3MjAxNTA1MDFaMDMxMTAvBgNV
BAMTKDk5N0YxNTQ4Q0E0NUI3NDY5Q0RCNzlERjk5QkE0NUJGMjg5NURBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOMt7I6ZX/x5EFnH4MCGcFwQu
eH7t+2JR0pqD22o3WaxpvsHCgE4zx94nipsAxP7I+7yVBCUC+k/lVL2jYopuPRkW
prdWnASaCpbALAPB8c9GdjCOb71VbiaPtVMSVQCPY5uOTOKjAnjewH9zHG4nS3x2
vC8yjb/3uGvLL81bjZjGxnd3j5MuF4M2nIjLUN6aiqHgyrYLLmRs23aISrZAHoMf
Owe0Wlp8a3ZKoNXt3PTGhK0iDZoQsXN1szyyF/h3tDlqAFZ5GTgw5srMwNcz24vv
SNFZ45jjPivF9G3kFTUiUFS2O7Qlp28B3mNo1V84Od1aDBhZnOsXP7VWnYF9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmX8VSMpFt0ac23nfmbpFvyiV2mswHwYDVR0j
BBgwFoAUUHhsHi5qZHq0RbVzu81pqcvbI/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQTIwOTkzQ0E0RkYzQzk2NDUxOTk3NEQ3MDQzN0QwNTMx
REI4MzQzRjJDMjEyMTY5RjA1MTcyRkFBNTEzQjVELzAvNTA3ODZDMUUyRTZBNjQ3
QUI0NDVCNTczQkJDRDY5QTlDQkRCMjNGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDc4NkMxRTJFNkE2NDdBQjQ0
NUI1NzNCQkNENjlBOUNCREIyM0Y2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0EyMDk5M0NBNEZGM0M5NjQ1MTk5NzRENzA0MzdEMDUzMURCODM0M0Yy
QzIxMjE2OUYwNTE3MkZBQTUxM0I1RC8wLzMyMzgzMDMzM2EzMTY2MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDH1Aw
DQYJKoZIhvcNAQELBQADggEBAHkOqjdc1F8BuDPn+GYujGcgT8dmQDO/taPnpP7p
sxAQjIMCAKuxTZfKwbMqLiM7M0FT1LBR6NFERoLXYmW3Npq1klcGvlgpZ5kY7Mdh
OGPmrlrClnVJ7duMDjGJ2YHBzJqWP1XRgPYf3r0gEr74blIB8NM8AcKR9ruvR671
MgoPZB8JfLjtn5QU4OfZPqalvVizp2+/SyUTxRE1EHHR4u3O6QVWexDwc10/oQCr
uX6D5rk7aoepMBU/+jGAuw391GLfhQsIEmWCsbVWQSWEJjpQY2mSl7pVtKEdPQPT
IUu06dqOljd7NoFuJwSUFKATsIRRb26cR2NHvWPdCojDHV4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:59 2026 by rpki-client