Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203133393939.roa
File:                     323830363a3230333a3a2f33322d3438203d3e203133393939.roa (raw, json)
Hash identifier:          zM0e/M1kQgcF83ugoduyq8nqEp1OTwqtGU885fK84fk=
Subject key identifier:   96:51:37:F6:A9:01:10:93:03:B2:48:19:EE:93:04:C5:77:26:43:DF
Certificate issuer:       /CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
Certificate serial:       3E8E06D451F02755DB638E23AEB134BEDD544CA0
Authority key identifier: C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203133393939.roa
Signing time:             Tue 29 Sep 2026 07:10:00 +0000
ROA not before:           Tue 29 Sep 2026 07:05:00 +0000
ROA not after:            Tue 28 Sep 2027 07:10:00 +0000
asID:                     13999
IP address blocks:        2806:203::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:06:d4:51:f0:27:55:db:63:8e:23:ae:b1:34:be:dd:54:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
        Validity
            Not Before: Sep 29 07:05:00 2026 GMT
            Not After : Sep 28 07:10:00 2027 GMT
        Subject: CN=965137F6A901109303B24819EE9304C5772643DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:67:7b:79:61:94:43:ba:ea:6d:70:6b:29:
                    20:92:6b:15:6a:6a:f9:16:19:40:17:75:9b:bb:8c:
                    81:92:db:67:d5:79:99:3d:04:9d:7c:17:26:39:93:
                    2d:2e:3f:6e:1b:f2:09:fc:2a:d0:ae:82:11:e5:16:
                    67:1d:05:d4:ab:24:00:ce:97:e4:fc:8d:21:44:50:
                    4d:93:e4:05:c9:36:39:b2:95:5c:20:d5:16:3b:d1:
                    46:70:ed:58:5e:b2:a7:a2:e6:e5:da:39:99:a1:8c:
                    73:d8:8e:55:b7:87:98:21:da:08:f6:0b:3d:e9:20:
                    8d:12:96:ac:92:59:53:d8:77:ef:ff:e8:64:63:09:
                    f3:02:57:25:0f:b4:f7:ab:34:c1:da:87:5a:37:54:
                    48:ce:c1:59:0d:22:78:43:88:d3:3d:3e:fc:19:b2:
                    db:47:9e:92:bc:5d:17:df:9d:0e:9b:57:7a:82:a6:
                    6b:cc:70:78:d8:32:41:3f:24:43:33:ba:3a:80:70:
                    61:85:52:24:19:4c:d7:42:b6:79:30:65:93:5d:1c:
                    ad:24:9f:db:c1:e0:5b:23:b4:dc:3f:a9:e9:91:e5:
                    29:b1:49:eb:b6:ab:5e:8b:fa:80:00:bd:09:7f:70:
                    ea:80:40:1c:06:dc:cd:34:57:50:b1:0d:63:4b:56:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:51:37:F6:A9:01:10:93:03:B2:48:19:EE:93:04:C5:77:26:43:DF
            X509v3 Authority Key Identifier:
                keyid:C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:203::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:d1:24:dd:ae:cf:d1:48:d2:16:70:1c:07:f0:34:f9:32:
         1d:6b:a8:89:cb:3a:9b:fd:1c:3c:80:03:57:4a:51:8c:78:f3:
         ac:c2:ef:70:ab:5d:a6:82:85:76:33:33:c2:fa:07:02:2f:29:
         ed:b9:a0:f9:e8:00:3d:40:4d:b9:6b:d7:5e:65:0b:ed:f3:07:
         f9:09:10:2d:a5:25:fd:6a:b2:b0:a0:0f:fd:4a:d4:5e:66:24:
         16:21:16:32:07:11:db:f2:87:35:77:ef:12:cb:df:70:13:f3:
         c1:f4:b5:43:8f:dd:c2:94:68:9e:dc:21:4c:e7:40:a7:f8:d1:
         a6:55:c6:f9:b0:83:27:f8:c5:e9:1e:45:70:47:a7:d6:9e:bb:
         9c:51:01:ba:b9:f4:c6:b9:c1:b3:d2:8a:d9:d9:00:e0:f9:fe:
         c2:1c:ba:af:b5:93:47:2b:af:12:c1:3c:3d:b6:f9:a5:d3:fd:
         fc:8f:7b:3f:7e:71:db:4e:d1:14:98:95:50:0c:4a:cd:ae:d3:
         dd:67:80:c4:12:ee:30:e0:a4:51:4f:e5:cd:1a:cb:48:0a:a3:
         7d:8e:5b:39:b0:4e:83:02:3a:b1:1e:73:cb:3f:da:60:0d:7c:
         6b:e1:05:84:04:b0:e2:90:33:a9:3d:d0:ca:07:75:aa:b4:a1:
         83:91:6b:14
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUPo4G1FHwJ1XbY44jrrE0vt1UTKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE4REExQzQxRTFGQzQyNEYwQjAyRUY2QThBRkE5NTMz
OTQyNjJEQzAeFw0yNjA5MjkwNzA1MDBaFw0yNzA5MjgwNzEwMDBaMDMxMTAvBgNV
BAMTKDk2NTEzN0Y2QTkwMTEwOTMwM0IyNDgxOUVFOTMwNEM1NzcyNjQzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+md7eWGUQ7rqbXBrKSCSaxVq
avkWGUAXdZu7jIGS22fVeZk9BJ18FyY5ky0uP24b8gn8KtCughHlFmcdBdSrJADO
l+T8jSFEUE2T5AXJNjmylVwg1RY70UZw7Vhesqei5uXaOZmhjHPYjlW3h5gh2gj2
Cz3pII0SlqySWVPYd+//6GRjCfMCVyUPtPerNMHah1o3VEjOwVkNInhDiNM9PvwZ
sttHnpK8XRffnQ6bV3qCpmvMcHjYMkE/JEMzujqAcGGFUiQZTNdCtnkwZZNdHK0k
n9vB4FsjtNw/qemR5SmxSeu2q16L+oAAvQl/cOqAQBwG3M00V1CxDWNLVrmHAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUllE39qkBEJMDskgZ7pMExXcmQ98wHwYDVR0j
BBgwFoAUwY2hxB4fxCTwsC72qK+pUzlCYtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDQxRTk3RkMyNTMyOEUzMDE0MzJEM0I4NkJBMTYxQjQ0
QUI5NERFMThDMzI4QjNEODFDN0NEMkIxOTQwNzQzLzAvQzE4REExQzQxRTFGQzQy
NEYwQjAyRUY2QThBRkE5NTMzOTQyNjJEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMThEQTFDNDFFMUZDNDI0RjBC
MDJFRjZBOEFGQTk1MzM5NDI2MkRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA0MUU5N0ZDMjUzMjhFMzAxNDMyRDNCODZCQTE2MUI0NEFCOTRERTE4
QzMyOEIzRDgxQzdDRDJCMTk0MDc0My8wLzMyMzgzMDM2M2EzMjMwMzMzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCAzANBgkq
hkiG9w0BAQsFAAOCAQEAbwbRJN2uz9FI0hZwHAfwNPkyHWuoics6m/0cPIADV0pR
jHjzrMLvcKtdpoKFdjMzwvoHAi8p7bmg+egAPUBNuWvXXmUL7fMH+QkQLaUl/Wqy
sKAP/UrUXmYkFiEWMgcR2/KHNXfvEsvfcBPzwfS1Q4/dwpRontwhTOdAp/jRplXG
+bCDJ/jF6R5FcEen1p67nFEBurn0xrnBs9KK2dkA4Pn+why6r7WTRyuvEsE8Pbb5
pdP9/I97P35x207RFJiVUAxKza7T3WeAxBLuMOCkUU/lzRrLSAqjfY5bObBOgwI6
sR5zyz/aYA18a+EFhASw4pAzqT3Qygd1qrShg5FrFA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:17 2026 by rpki-client