Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
File:                     323830333a313734303a3a2f33322d3332203d3e203336353131.roa (raw, json)
Hash identifier:          V9v0EjwxrG2Q7N543Ac9vikQuLNMJ9KikKm2Y0ekt1k=
Subject key identifier:   E3:AE:CB:4A:BA:91:4F:30:14:22:CD:85:21:D1:17:B4:16:56:EA:EE
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       561D0CD4846AFB2DFD4EE944904CC1DCB0E91C57
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
Signing time:             Tue 03 Mar 2026 20:32:41 +0000
ROA not before:           Tue 03 Mar 2026 20:27:41 +0000
ROA not after:            Tue 02 Mar 2027 20:32:41 +0000
asID:                     36511
IP address blocks:        2803:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 02:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:0c:d4:84:6a:fb:2d:fd:4e:e9:44:90:4c:c1:dc:b0:e9:1c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Mar  3 20:27:41 2026 GMT
            Not After : Mar  2 20:32:41 2027 GMT
        Subject: CN=E3AECB4ABA914F301422CD8521D117B41656EAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:00:24:2d:d4:26:6e:b2:2a:a0:3e:8c:fa:
                    ca:e7:59:2c:c5:54:4a:06:9c:db:8c:c0:82:d7:e1:
                    ec:ee:68:0d:f1:86:1c:07:46:7d:cd:0c:e6:88:a7:
                    4f:15:dd:89:28:af:f8:35:04:66:9c:89:32:30:3e:
                    8a:39:a5:38:a9:26:a3:5a:1e:1d:66:9f:df:f2:79:
                    4d:36:50:1b:ec:fc:a3:ca:d4:80:5f:79:41:6d:bd:
                    4a:70:78:a7:f1:bf:38:32:0f:f0:bb:27:77:22:eb:
                    98:03:93:2d:23:de:d3:e9:f6:ef:eb:a0:e3:6f:6c:
                    31:ef:94:85:e1:f9:33:86:c9:2d:5f:fc:55:41:1c:
                    65:11:ff:32:27:af:a4:73:cc:5c:9c:da:c9:a0:e1:
                    ee:a7:68:26:90:28:2a:83:9b:d2:e6:5d:d2:69:ea:
                    a2:62:3c:51:e3:91:48:e2:ee:f1:2f:ee:0b:b9:c6:
                    e2:96:12:df:0c:b5:0b:c1:45:53:b7:b2:4b:bd:1e:
                    a5:c2:d9:78:b8:bf:d5:fa:b4:d2:5d:e7:79:b9:b9:
                    02:37:67:35:3e:44:b8:14:0a:2c:8d:87:10:b3:25:
                    81:56:7f:d0:d2:02:38:9d:55:cf:dd:80:5f:5f:43:
                    b8:c8:74:4a:b1:b8:93:d4:74:11:ac:c0:05:ce:8f:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AE:CB:4A:BA:91:4F:30:14:22:CD:85:21:D1:17:B4:16:56:EA:EE
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:57:5a:cc:15:22:a7:38:d0:3c:4c:f6:ec:f2:c4:1e:d0:
         66:cb:97:b7:f7:00:5a:67:ca:a3:aa:10:3d:87:04:30:07:6d:
         4d:fe:73:6b:a6:96:d6:13:49:91:01:37:5d:d9:ce:fc:17:a7:
         fc:8b:60:1a:6d:51:fc:c6:4a:db:36:02:93:83:51:42:21:92:
         cb:a1:4a:79:8a:cb:f3:5d:d5:5d:84:a4:74:b1:b2:b2:17:31:
         75:f6:fb:7f:03:37:6b:0f:e5:c6:d1:27:7c:cd:79:26:f5:ae:
         35:26:43:34:5a:72:ae:5d:94:a3:37:75:4c:e9:ce:95:7a:e4:
         29:a5:dc:19:2b:2c:cc:aa:35:d4:83:84:d7:c2:92:9e:15:bb:
         14:af:2e:be:c4:31:66:bb:37:c5:01:47:a4:02:59:4f:81:55:
         10:f5:fb:96:6e:55:e6:69:8d:d1:58:2a:ef:5c:33:0f:76:6c:
         6b:63:2a:b0:e8:b3:7c:1b:75:c6:e8:ec:b2:7d:5f:d0:24:d7:
         fa:f7:8e:0d:3e:e8:b7:df:5a:85:4e:21:04:f0:0a:14:31:75:
         93:d1:83:5c:9f:77:de:46:68:92:10:08:3c:9b:fe:d9:cb:4c:
         6f:1e:07:07:df:5c:24:16:21:4b:12:d2:30:2d:7f:28:38:d9:
         03:ff:8e:8b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUVh0M1IRq+y39TulEkEzB3LDpHFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNjAzMDMyMDI3NDFaFw0yNzAzMDIyMDMyNDFaMDMxMTAvBgNV
BAMTKEUzQUVDQjRBQkE5MTRGMzAxNDIyQ0Q4NTIxRDExN0I0MTY1NkVBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTgAkLdQmbrIqoD6M+srnWSzF
VEoGnNuMwILX4ezuaA3xhhwHRn3NDOaIp08V3Ykor/g1BGaciTIwPoo5pTipJqNa
Hh1mn9/yeU02UBvs/KPK1IBfeUFtvUpweKfxvzgyD/C7J3ci65gDky0j3tPp9u/r
oONvbDHvlIXh+TOGyS1f/FVBHGUR/zInr6RzzFyc2smg4e6naCaQKCqDm9LmXdJp
6qJiPFHjkUji7vEv7gu5xuKWEt8MtQvBRVO3sku9HqXC2Xi4v9X6tNJd53m5uQI3
ZzU+RLgUCiyNhxCzJYFWf9DSAjidVc/dgF9fQ7jIdEqxuJPUdBGswAXOjyVjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU467LSrqRTzAUIs2FIdEXtBZW6u4wHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMyMzgzMDMzM2EzMTM3MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzYzNTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxdAMA0G
CSqGSIb3DQEBCwUAA4IBAQCPUldazBUipzjQPEz27PLEHtBmy5e39wBaZ8qjqhA9
hwQwB21N/nNrppbWE0mRATdd2c78F6f8i2AabVH8xkrbNgKTg1FCIZLLoUp5isvz
XdVdhKR0sbKyFzF19vt/AzdrD+XG0Sd8zXkm9a41JkM0WnKuXZSjN3VM6c6VeuQp
pdwZKyzMqjXUg4TXwpKeFbsUry6+xDFmuzfFAUekAllPgVUQ9fuWblXmaY3RWCrv
XDMPdmxrYyqw6LN8G3XG6OyyfV/QJNf6944NPui331qFTiEE8AoUMXWT0YNcn3fe
RmiSEAg8m/7Zy0xvHgcH31wkFiFLEtIwLX8oONkD/46L
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:25 2026 by rpki-client