Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a313030303a3a2f33362d3336203d3e20323634373833.roa
File:                     323830333a346634303a313030303a3a2f33362d3336203d3e20323634373833.roa (raw, json)
Hash identifier:          UGfWT6AALxzegWC5zS2nCApq9b7lvRpFRki56A7fzDo=
Subject key identifier:   F5:33:76:E7:64:8A:9D:E0:52:41:F1:B3:A8:45:8C:5F:F3:DB:4E:9A
Certificate issuer:       /CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
Certificate serial:       07AB084B7804C2D2212CF251960B8DC61E68BBEE
Authority key identifier: 37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a313030303a3a2f33362d3336203d3e20323634373833.roa
Signing time:             Wed 25 Jun 2025 17:23:36 +0000
ROA not before:           Wed 25 Jun 2025 17:18:36 +0000
ROA not after:            Wed 24 Jun 2026 17:23:36 +0000
asID:                     264783
IP address blocks:        2803:4f40:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ab:08:4b:78:04:c2:d2:21:2c:f2:51:96:0b:8d:c6:1e:68:bb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
        Validity
            Not Before: Jun 25 17:18:36 2025 GMT
            Not After : Jun 24 17:23:36 2026 GMT
        Subject: CN=F53376E7648A9DE05241F1B3A8458C5FF3DB4E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:91:21:95:3e:3f:eb:76:80:22:cc:ad:51:
                    64:5e:6e:68:9d:38:1a:39:c1:97:8b:bc:7b:ed:36:
                    c4:57:e7:73:a4:da:d8:2f:d0:cd:53:e8:f0:23:7a:
                    3b:70:90:30:91:b9:b2:bf:ce:af:40:66:34:59:93:
                    47:5b:e1:b7:52:8b:5b:5f:1f:33:45:5e:28:35:ea:
                    d0:3c:eb:ed:5d:57:c5:20:f4:b7:96:06:da:43:42:
                    dc:8e:d3:ed:01:6d:ff:d5:de:f8:c8:ec:cc:ea:f8:
                    5f:c2:4b:65:a1:96:25:09:43:b3:92:03:f7:f6:99:
                    45:44:1f:0c:55:9b:0b:43:f1:fa:df:8c:2b:3f:f7:
                    16:77:fd:5e:d9:b7:23:6a:9c:d2:3d:f5:c2:ac:93:
                    90:29:1b:1e:cd:35:2d:76:bb:15:6b:b0:d5:61:16:
                    da:8b:0b:4c:bf:3b:9a:da:88:32:2a:f6:2a:d1:49:
                    e6:39:d3:fe:1a:a9:47:5d:62:3d:2a:83:ad:d2:ab:
                    00:f7:d3:45:f5:87:84:ea:b9:b3:f9:98:fb:33:8e:
                    4e:9f:95:f6:09:67:69:be:5f:d8:ee:60:1b:e9:d8:
                    ed:a5:59:b0:90:25:27:73:17:e6:60:30:9d:3d:d1:
                    1c:fe:15:4d:cc:dc:5f:dc:e0:b4:17:bb:9c:c7:87:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:76:E7:64:8A:9D:E0:52:41:F1:B3:A8:45:8C:5F:F3:DB:4E:9A
            X509v3 Authority Key Identifier:
                keyid:37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a313030303a3a2f33362d3336203d3e20323634373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f40:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:4f:46:50:6a:b8:97:93:6d:84:40:1e:dc:6e:a6:6c:8e:
         ff:6b:e2:82:17:67:5d:7d:a0:e6:26:80:26:9f:18:69:fd:32:
         d6:d8:87:f3:e3:6e:3b:bb:7e:7a:ea:92:a1:68:9e:a7:cf:27:
         3e:4c:3b:a3:93:69:0b:27:60:98:83:e1:7a:ed:57:9a:27:2a:
         de:c6:45:bd:00:82:16:99:18:5e:82:3e:8c:64:98:88:d9:7e:
         0c:8f:ff:a2:5c:f8:6b:5f:79:69:a7:20:43:cf:a8:2f:41:27:
         53:46:47:a2:44:e0:16:74:fa:fc:99:b4:ba:ab:b5:a7:1f:39:
         a1:d6:d6:74:be:37:dd:85:78:db:f7:31:76:60:62:98:52:d8:
         b3:78:a4:f1:82:3c:45:4c:73:32:cf:5d:e5:a2:1a:74:0b:46:
         da:ff:73:55:a2:7f:6b:b7:eb:df:a4:dc:37:81:07:92:57:94:
         83:37:74:9d:d5:e0:2b:1b:38:17:7f:e9:6a:c4:50:b0:ac:9f:
         11:75:7f:4a:b9:3e:6f:83:e1:24:b4:d6:0f:c5:61:14:62:99:
         c8:8c:29:c0:01:b8:9b:08:2b:96:e5:08:95:57:30:9b:20:0c:
         01:6b:12:8d:da:9d:c2:e3:d0:82:b5:2f:32:5b:0e:6e:d5:d0:
         66:27:4d:31
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUB6sIS3gEwtIhLPJRlguNxh5ou+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0ODI2QTU2QTg5MDNDQkM3QUM3RDY3RjgzQkE5MjBE
NDc5NkE4RjAeFw0yNTA2MjUxNzE4MzZaFw0yNjA2MjQxNzIzMzZaMDMxMTAvBgNV
BAMTKEY1MzM3NkU3NjQ4QTlERTA1MjQxRjFCM0E4NDU4QzVGRjNEQjRFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConZEhlT4/63aAIsytUWRebmid
OBo5wZeLvHvtNsRX53Ok2tgv0M1T6PAjejtwkDCRubK/zq9AZjRZk0db4bdSi1tf
HzNFXig16tA86+1dV8Ug9LeWBtpDQtyO0+0Bbf/V3vjI7Mzq+F/CS2WhliUJQ7OS
A/f2mUVEHwxVmwtD8frfjCs/9xZ3/V7ZtyNqnNI99cKsk5ApGx7NNS12uxVrsNVh
FtqLC0y/O5raiDIq9irRSeY50/4aqUddYj0qg63SqwD300X1h4TqubP5mPszjk6f
lfYJZ2m+X9juYBvp2O2lWbCQJSdzF+ZgMJ090Rz+FU3M3F/c4LQXu5zHh4a5AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU9TN252SKneBSQfGzqEWMX/PbTpowHwYDVR0j
BBgwFoAUN0gmpWqJA8vHrH1n+DupINR5ao8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FN0U0OEU2MDM0Mzk2MjI4OUFGRjQwODFBMDRBMEU3QTFC
ODBCRTM5MDVBQTNERTI0MjJFMTQzNUM5RjAxN0NDLzAvMzc0ODI2QTU2QTg5MDND
QkM3QUM3RDY3RjgzQkE5MjBENDc5NkE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzQ4MjZBNTZBODkwM0NCQzdB
QzdENjdGODNCQTkyMEQ0Nzk2QThGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTdFNDhFNjAzNDM5NjIyODlBRkY0MDgxQTA0QTBFN0ExQjgwQkUzOTA1
QUEzREUyNDIyRTE0MzVDOUYwMTdDQy8wLzMyMzgzMDMzM2EzNDY2MzQzMDNhMzEz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzNzM4MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA09AEDANBgkqhkiG9w0BAQsFAAOCAQEAlBpPRlBquJeTbYRAHtxupmyO
/2vighdnXX2g5iaAJp8Yaf0y1tiH8+NuO7t+euqSoWiep88nPkw7o5NpCydgmIPh
eu1Xmicq3sZFvQCCFpkYXoI+jGSYiNl+DI//olz4a195aacgQ8+oL0EnU0ZHokTg
FnT6/Jm0uqu1px85odbWdL433YV42/cxdmBimFLYs3ik8YI8RUxzMs9d5aIadAtG
2v9zVaJ/a7fr36TcN4EHkleUgzd0ndXgKxs4F3/pasRQsKyfEXV/Srk+b4PhJLTW
D8VhFGKZyIwpwAG4mwgrluUIlVcwmyAMAWsSjdqdwuPQgrUvMlsObtXQZidNMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:34:17 2025 by rpki-client