Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          Zi8MlAFqyNMh3MY3++FDM5IB3HvJ4W/gV/yyw3JdWHY=
Subject key identifier:   01:76:27:F8:39:90:32:DE:2B:6B:B4:35:32:F1:59:82:AD:04:AC:A7
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       150BE6CB853C35BB99F08F968A52A0BFF39CEF3D
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:47 +0000
ROA not before:           Fri 13 Mar 2026 16:28:47 +0000
ROA not after:            Fri 12 Mar 2027 16:33:47 +0000
asID:                     263242
IP address blocks:        2803:1180:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0b:e6:cb:85:3c:35:bb:99:f0:8f:96:8a:52:a0:bf:f3:9c:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:47 2026 GMT
            Not After : Mar 12 16:33:47 2027 GMT
        Subject: CN=017627F8399032DE2B6BB43532F15982AD04ACA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:91:73:eb:51:24:f7:b9:81:e3:f6:ce:4e:
                    09:59:0c:02:b2:a2:4b:21:c5:f1:e0:5f:fa:44:cc:
                    e8:79:80:76:ab:66:09:ab:f4:c6:5d:f0:67:8b:00:
                    28:03:08:05:34:dd:f3:47:4b:05:eb:b1:7f:a7:9b:
                    4e:ca:ca:b6:fe:68:d4:a2:8d:a4:9d:40:35:ef:e1:
                    9e:16:e2:a7:20:6f:6d:e2:f4:37:3a:a1:40:8a:69:
                    22:0b:2e:fc:1a:c9:18:e1:52:aa:cc:80:75:43:63:
                    22:a6:ce:65:b6:45:d3:86:9d:61:03:c9:f9:63:99:
                    5a:b5:47:83:ca:2f:62:b3:0e:54:f8:3a:61:76:74:
                    a4:6f:9c:59:f1:37:2c:4c:76:08:88:0f:20:8e:6a:
                    6f:31:0c:1e:0b:2c:54:fe:22:e0:a3:a3:52:66:8b:
                    ff:3f:62:39:fa:17:b4:88:59:4a:e6:46:0e:62:05:
                    a4:48:05:f5:45:63:70:21:e9:8a:c2:f3:fa:42:dd:
                    fa:3f:04:d4:09:56:a9:c8:25:2b:f0:4a:6a:12:4b:
                    7f:0c:07:92:93:4b:c4:ac:7e:4d:22:89:f5:07:0e:
                    84:27:be:96:a2:70:1c:1d:f0:f5:62:10:98:19:81:
                    aa:28:0e:a3:60:bd:ce:2e:f7:ed:9b:da:ef:65:15:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:27:F8:39:90:32:DE:2B:6B:B4:35:32:F1:59:82:AD:04:AC:A7
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:3e:bf:d9:e0:6b:29:bf:02:67:30:e2:6a:56:a5:7c:ec:
         d5:73:16:c9:00:bc:d1:7a:10:b3:ad:2d:83:6a:c1:02:5f:3a:
         83:12:aa:52:13:0f:9b:ee:f4:af:af:fb:44:42:a6:ce:6e:14:
         74:c0:d7:05:a5:4f:28:7f:06:29:52:cb:bb:28:ec:f0:22:fe:
         0b:ad:53:ba:64:2b:f3:1a:e5:cd:db:f4:31:a4:46:58:80:48:
         4c:c2:32:1b:6c:82:37:0a:34:d0:6e:0e:ee:e8:12:53:28:3c:
         5c:bd:14:1a:fd:f0:62:1b:e4:7d:ff:d0:23:19:cf:60:ee:1a:
         b2:27:bf:e3:3a:1f:a5:cf:08:29:38:b6:85:43:5a:7b:3b:24:
         6d:5f:24:ec:2e:04:4a:1d:80:1a:6f:54:b0:c8:45:b3:57:24:
         f4:ad:a6:a9:f6:da:d9:02:3d:38:45:3a:81:91:72:64:a3:8d:
         58:f3:7c:03:67:a3:30:20:fc:c4:6c:f9:5f:a9:a9:b7:61:78:
         b4:a2:ca:65:30:c5:eb:04:8a:2b:34:46:72:a6:75:26:e2:67:
         8e:dd:f4:69:96:3f:26:7a:f8:1e:42:c7:51:78:9c:05:5f:c3:
         0c:11:42:dd:55:9f:06:e9:d1:47:f1:42:11:ab:3b:98:0f:70:
         5c:09:b7:45
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFQvmy4U8NbuZ8I+WilKgv/Oc7z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0QzY0NzY1OTM0Q0M5QTJDRTk3QTExNTBFMDU4NDg5
RjE5RDUzNTAeFw0yNjAzMTMxNjI4NDdaFw0yNzAzMTIxNjMzNDdaMDMxMTAvBgNV
BAMTKDAxNzYyN0Y4Mzk5MDMyREUyQjZCQjQzNTMyRjE1OTgyQUQwNEFDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz5Fz61Ek97mB4/bOTglZDAKy
okshxfHgX/pEzOh5gHarZgmr9MZd8GeLACgDCAU03fNHSwXrsX+nm07Kyrb+aNSi
jaSdQDXv4Z4W4qcgb23i9Dc6oUCKaSILLvwayRjhUqrMgHVDYyKmzmW2RdOGnWED
yfljmVq1R4PKL2KzDlT4OmF2dKRvnFnxNyxMdgiIDyCOam8xDB4LLFT+IuCjo1Jm
i/8/Yjn6F7SIWUrmRg5iBaRIBfVFY3Ah6YrC8/pC3fo/BNQJVqnIJSvwSmoSS38M
B5KTS8Ssfk0iifUHDoQnvpaicBwd8PViEJgZgaooDqNgvc4u9+2b2u9lFX6vAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUAXYn+DmQMt4ra7Q1MvFZgq0ErKcwHwYDVR0j
BBgwFoAU+Exkdlk0zJos6XoRUOBYSJ8Z1TUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjMzQjgwNzcxMDc1OEI1OTJERTE1M0E5OENDM0IzQ0Uw
MzFCRTI4NzVDOTk2Q0Q4RjdFNDZFMzUyNkFBRjIwLzAvRjg0QzY0NzY1OTM0Q0M5
QTJDRTk3QTExNTBFMDU4NDg5RjE5RDUzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODRDNjQ3NjU5MzRDQzlBMkNF
OTdBMTE1MEUwNTg0ODlGMTlENTM1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIzM0I4MDc3MTA3NThCNTkyREUxNTNBOThDQzNCM0NFMDMxQkUyODc1
Qzk5NkNEOEY3RTQ2RTM1MjZBQUYyMC8wLzMyMzgzMDMzM2EzMTMxMzgzMDNhMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzMzMjM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AxGAAAMwDQYJKoZIhvcNAQELBQADggEBABqAPr/Z4GspvwJnMOJqVqV87NVzFskA
vNF6ELOtLYNqwQJfOoMSqlITD5vu9K+v+0RCps5uFHTA1wWlTyh/BilSy7so7PAi
/gutU7pkK/Ma5c3b9DGkRliASEzCMhtsgjcKNNBuDu7oElMoPFy9FBr98GIb5H3/
0CMZz2DuGrInv+M6H6XPCCk4toVDWns7JG1fJOwuBEodgBpvVLDIRbNXJPStpqn2
2tkCPThFOoGRcmSjjVjzfANnozAg/MRs+V+pqbdheLSiymUwxesEiis0RnKmdSbi
Z47d9GmWPyZ6+B5Cx1F4nAVfwwwRQt1Vnwbp0UfxQhGrO5gPcFwJt0U=
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:30 2026 by rpki-client