Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          JsdOhEA6v6rXdfCVcR9ndhKgFUuwRIoi6T36mtj6/KY=
Subject key identifier:   B1:3E:D5:56:94:C7:4B:2F:BD:61:F1:33:2B:B2:EE:BE:AB:70:20:D5
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       54C78B2248C52808270118FFE467537566214591
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:49 +0000
ROA not before:           Fri 13 Mar 2026 16:28:49 +0000
ROA not after:            Fri 12 Mar 2027 16:33:49 +0000
asID:                     263242
IP address blocks:        2803:1180:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:8b:22:48:c5:28:08:27:01:18:ff:e4:67:53:75:66:21:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:49 2026 GMT
            Not After : Mar 12 16:33:49 2027 GMT
        Subject: CN=B13ED55694C74B2FBD61F1332BB2EEBEAB7020D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:8c:f0:ed:30:a5:50:ca:de:89:24:4d:cf:
                    6d:f1:40:b9:cc:c6:06:c2:db:35:3b:27:03:af:3b:
                    db:e7:84:80:ef:14:86:11:32:a7:24:36:75:6e:4f:
                    2a:b9:c7:92:85:da:56:75:5b:7e:42:c6:5a:ee:d3:
                    82:ad:8c:52:fb:c6:69:a4:2e:47:4e:0a:0f:ea:c2:
                    ed:d5:35:47:3b:3a:36:8f:6a:b7:48:82:7e:55:86:
                    6c:24:ae:b2:64:e2:bd:10:53:d2:c3:57:82:81:b8:
                    f0:a9:81:24:14:66:5a:83:fc:72:39:90:92:2b:07:
                    46:8c:31:fa:72:1a:8a:ed:1b:eb:d4:42:c7:ae:67:
                    b3:6b:d2:04:21:f6:bf:6f:53:e2:5f:fa:67:6b:be:
                    21:df:0e:64:6c:ee:b3:8b:e6:54:03:27:78:1f:06:
                    06:bf:9b:86:86:95:20:a0:a2:a4:19:d9:f4:91:a6:
                    5e:67:9d:f7:f4:66:dc:e3:89:cd:5c:ed:af:5e:eb:
                    7d:07:80:99:66:da:b0:2b:99:6f:78:ae:47:5b:1f:
                    33:5d:fd:a5:f9:be:ee:3f:bf:82:7f:36:98:d1:a4:
                    e9:c0:26:69:78:e7:f7:e1:6c:98:50:99:68:ff:39:
                    e6:c7:09:cc:a8:6a:d5:d3:58:66:43:aa:52:17:66:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:D5:56:94:C7:4B:2F:BD:61:F1:33:2B:B2:EE:BE:AB:70:20:D5
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:77:08:7b:b0:6f:c3:d1:3a:ff:6c:3b:22:bf:28:00:be:11:
         d7:e8:a5:0c:8c:98:d7:99:82:89:a4:08:bb:bc:a2:bf:9c:d0:
         7f:a0:cf:eb:f7:56:ac:a8:1a:26:bc:51:ee:43:42:85:32:01:
         8c:3d:c3:d4:9d:d1:9e:9e:93:bf:62:c1:d5:41:23:12:fb:22:
         07:f5:d1:ce:d1:b4:12:6a:95:e5:69:39:f9:03:35:34:94:fa:
         5a:7c:f5:15:24:92:ae:e1:55:d0:b1:30:37:81:d3:23:5b:e8:
         3b:c0:1b:9d:ae:1b:ea:b8:89:96:68:bf:24:9b:87:fc:fa:99:
         6c:4a:da:81:09:e7:f1:37:54:54:1d:ae:af:cf:4f:92:50:b8:
         af:07:2e:74:77:ed:eb:87:db:66:50:0b:a9:22:12:42:b6:e9:
         8d:31:e6:5c:95:e0:c4:ca:e3:cd:02:bf:48:0b:1c:6e:27:dd:
         1b:a7:da:96:db:a6:c8:7f:12:1b:0f:2b:d4:d5:58:a0:14:fd:
         0c:41:84:4b:a9:f4:b1:d0:b9:51:ff:f7:89:41:61:c3:17:51:
         ee:76:c7:62:0e:54:8f:2d:be:22:e7:15:58:dd:67:11:d3:76:
         c0:d7:10:ec:91:67:68:3d:6e:4e:0f:34:4a:f6:8a:70:c9:42:
         30:fb:9c:a5
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUVMeLIkjFKAgnARj/5GdTdWYhRZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0QzY0NzY1OTM0Q0M5QTJDRTk3QTExNTBFMDU4NDg5
RjE5RDUzNTAeFw0yNjAzMTMxNjI4NDlaFw0yNzAzMTIxNjMzNDlaMDMxMTAvBgNV
BAMTKEIxM0VENTU2OTRDNzRCMkZCRDYxRjEzMzJCQjJFRUJFQUI3MDIwRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliozw7TClUMreiSRNz23xQLnM
xgbC2zU7JwOvO9vnhIDvFIYRMqckNnVuTyq5x5KF2lZ1W35Cxlru04KtjFL7xmmk
LkdOCg/qwu3VNUc7OjaPardIgn5VhmwkrrJk4r0QU9LDV4KBuPCpgSQUZlqD/HI5
kJIrB0aMMfpyGortG+vUQseuZ7Nr0gQh9r9vU+Jf+mdrviHfDmRs7rOL5lQDJ3gf
Bga/m4aGlSCgoqQZ2fSRpl5nnff0Ztzjic1c7a9e630HgJlm2rArmW94rkdbHzNd
/aX5vu4/v4J/NpjRpOnAJml45/fhbJhQmWj/OebHCcyoatXTWGZDqlIXZkejAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUsT7VVpTHSy+9YfEzK7LuvqtwINUwHwYDVR0j
BBgwFoAU+Exkdlk0zJos6XoRUOBYSJ8Z1TUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjMzQjgwNzcxMDc1OEI1OTJERTE1M0E5OENDM0IzQ0Uw
MzFCRTI4NzVDOTk2Q0Q4RjdFNDZFMzUyNkFBRjIwLzAvRjg0QzY0NzY1OTM0Q0M5
QTJDRTk3QTExNTBFMDU4NDg5RjE5RDUzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODRDNjQ3NjU5MzRDQzlBMkNF
OTdBMTE1MEUwNTg0ODlGMTlENTM1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIzM0I4MDc3MTA3NThCNTkyREUxNTNBOThDQzNCM0NFMDMxQkUyODc1
Qzk5NkNEOEY3RTQ2RTM1MjZBQUYyMC8wLzMyMzgzMDMzM2EzMTMxMzgzMDNhMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzMzMjM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AxGAAAYwDQYJKoZIhvcNAQELBQADggEBAKZ3CHuwb8PROv9sOyK/KAC+EdfopQyM
mNeZgomkCLu8or+c0H+gz+v3VqyoGia8Ue5DQoUyAYw9w9Sd0Z6ek79iwdVBIxL7
Igf10c7RtBJqleVpOfkDNTSU+lp89RUkkq7hVdCxMDeB0yNb6DvAG52uG+q4iZZo
vySbh/z6mWxK2oEJ5/E3VFQdrq/PT5JQuK8HLnR37euH22ZQC6kiEkK26Y0x5lyV
4MTK480Cv0gLHG4n3Run2pbbpsh/EhsPK9TVWKAU/QxBhEup9LHQuVH/94lBYcMX
Ue52x2IOVI8tviLnFVjdZxHTdsDXEOyRZ2g9bk4PNEr2inDJQjD7nKU=
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:31 2026 by rpki-client