Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/323830333a396533303a383030303a3a2f33332d3333203d3e20323734393039.roa
File:                     323830333a396533303a383030303a3a2f33332d3333203d3e20323734393039.roa (raw, json)
Hash identifier:          rAKdO8+16Q1P6QcUOcS8dsQ9fmHQdIQqarfeln+ueR8=
Subject key identifier:   C1:9D:1F:70:D1:2B:9B:0A:57:A6:A3:07:84:3F:91:3F:EB:04:44:9C
Certificate issuer:       /CN=38172E208090DA1CCDCCB92ECB746ADEB1E10A48
Certificate serial:       3B77838C8ED5ACF1EA1FF6BC8EE2CB3EC0F80872
Authority key identifier: 38:17:2E:20:80:90:DA:1C:CD:CC:B9:2E:CB:74:6A:DE:B1:E1:0A:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/323830333a396533303a383030303a3a2f33332d3333203d3e20323734393039.roa
Signing time:             Sat 23 May 2026 11:20:00 +0000
ROA not before:           Sat 23 May 2026 11:15:00 +0000
ROA not after:            Sat 22 May 2027 11:20:00 +0000
asID:                     274909
IP address blocks:        2803:9e30:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:83:8c:8e:d5:ac:f1:ea:1f:f6:bc:8e:e2:cb:3e:c0:f8:08:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38172E208090DA1CCDCCB92ECB746ADEB1E10A48
        Validity
            Not Before: May 23 11:15:00 2026 GMT
            Not After : May 22 11:20:00 2027 GMT
        Subject: CN=C19D1F70D12B9B0A57A6A307843F913FEB04449C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:4f:63:4c:c4:05:44:65:16:ed:ac:b9:9b:
                    42:3b:b7:d1:be:f3:87:5e:6d:0e:22:b8:b8:5c:b3:
                    70:77:e7:36:3b:fd:15:69:a6:11:8f:bd:f0:f4:d3:
                    f7:07:33:39:79:0d:36:7f:4d:44:16:d1:e5:44:48:
                    6b:d2:92:0c:a8:74:90:88:52:20:e0:28:96:79:4d:
                    56:c1:76:56:19:16:5b:dd:15:43:79:07:ff:cb:26:
                    00:b4:3d:d3:45:0a:0a:a8:4b:44:e7:d7:57:01:b3:
                    05:9e:76:b6:e2:fc:ad:a3:d6:e7:b3:db:68:b8:44:
                    4c:80:76:4c:5f:a3:7a:3c:8a:37:b9:0a:83:4b:fe:
                    74:45:8f:d2:4c:bc:d5:c1:ed:5f:d2:08:1c:7b:94:
                    7e:eb:ab:31:19:aa:ad:25:5c:8b:be:22:71:c8:70:
                    f6:ad:f3:ab:62:a1:0f:fa:4e:69:7c:7d:87:3a:a5:
                    c8:fd:24:bd:1b:33:01:c9:e3:87:1c:25:4c:45:4a:
                    33:b0:ce:58:3a:9e:d1:cd:16:85:41:f0:47:8f:29:
                    b9:0d:01:f5:02:fc:a4:3b:10:29:92:fc:0a:ab:2c:
                    3a:5f:3e:07:48:31:ab:f9:3f:bf:50:1b:29:78:74:
                    53:b2:4f:9e:c4:6b:98:e3:03:18:c7:e1:b6:41:86:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:1F:70:D1:2B:9B:0A:57:A6:A3:07:84:3F:91:3F:EB:04:44:9C
            X509v3 Authority Key Identifier:
                keyid:38:17:2E:20:80:90:DA:1C:CD:CC:B9:2E:CB:74:6A:DE:B1:E1:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/323830333a396533303a383030303a3a2f33332d3333203d3e20323734393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:2e:2c:70:cc:30:73:ac:f8:a0:1d:31:b4:64:fe:fc:86:
         35:30:64:cc:64:e1:03:0e:37:08:59:c5:c8:8a:68:a3:95:72:
         64:09:41:57:a2:94:7b:b9:a2:e5:d8:9b:19:05:08:9d:3f:b8:
         7e:c7:49:c5:b2:55:0a:cd:a9:3f:36:c3:0f:9c:ce:56:e6:80:
         a1:2d:f7:fd:2e:b6:d1:a4:cd:2c:d2:37:3f:f3:d6:97:10:ac:
         00:23:1e:d8:e9:f1:7c:21:52:8e:e4:b4:9c:44:35:17:73:74:
         7d:7e:44:72:e3:db:d8:23:58:1c:54:c5:09:0c:7e:3b:44:52:
         2f:28:63:b2:97:8c:00:40:3f:00:0b:e9:ef:70:bf:36:22:41:
         81:e3:3e:f6:79:32:5b:1b:65:a7:9b:d1:20:13:bb:db:de:33:
         00:67:c8:bd:99:21:fb:f5:22:01:26:dd:fa:a5:27:01:c3:ca:
         a3:5e:2a:71:37:dc:78:18:a2:df:57:d0:23:71:5b:77:4c:d5:
         d7:aa:3c:d8:f2:60:f8:8e:d0:cd:c0:68:09:0c:32:86:91:dc:
         4f:fd:20:a5:59:bd:d4:07:1e:05:24:c1:7f:a2:d4:41:95:16:
         e9:f7:54:bd:d1:db:6b:ea:c3:b7:59:71:df:8b:f0:f2:7c:04:
         f5:b1:5a:46
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUO3eDjI7VrPHqH/a8juLLPsD4CHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgxNzJFMjA4MDkwREExQ0NEQ0NCOTJFQ0I3NDZBREVC
MUUxMEE0ODAeFw0yNjA1MjMxMTE1MDBaFw0yNzA1MjIxMTIwMDBaMDMxMTAvBgNV
BAMTKEMxOUQxRjcwRDEyQjlCMEE1N0E2QTMwNzg0M0Y5MTNGRUIwNDQ0OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbH09jTMQFRGUW7ay5m0I7t9G+
84debQ4iuLhcs3B35zY7/RVpphGPvfD00/cHMzl5DTZ/TUQW0eVESGvSkgyodJCI
UiDgKJZ5TVbBdlYZFlvdFUN5B//LJgC0PdNFCgqoS0Tn11cBswWedrbi/K2j1uez
22i4REyAdkxfo3o8ije5CoNL/nRFj9JMvNXB7V/SCBx7lH7rqzEZqq0lXIu+InHI
cPat86tioQ/6Tml8fYc6pcj9JL0bMwHJ44ccJUxFSjOwzlg6ntHNFoVB8EePKbkN
AfUC/KQ7ECmS/AqrLDpfPgdIMav5P79QGyl4dFOyT57Ea5jjAxjH4bZBhuM9AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUwZ0fcNErmwpXpqMHhD+RP+sERJwwHwYDVR0j
BBgwFoAUOBcuIICQ2hzNzLkuy3Rq3rHhCkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUVGRkREOTc3NzEwRkIzNTkxQkUwMUFGMTM2RUU5RTlG
Njc4NTkxOEE1NTc2MTVGNDk5QzQ4MDE5QjQ0MTVGLzAvMzgxNzJFMjA4MDkwREEx
Q0NEQ0NCOTJFQ0I3NDZBREVCMUUxMEE0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODE3MkUyMDgwOTBEQTFDQ0RD
Q0I5MkVDQjc0NkFERUIxRTEwQTQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVFRkZERDk3NzcxMEZCMzU5MUJFMDFBRjEzNkVFOUU5RjY3ODU5MThB
NTU3NjE1RjQ5OUM0ODAxOUI0NDE1Ri8wLzMyMzgzMDMzM2EzOTY1MzMzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzQzOTMwMzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgcoA54wgDANBgkqhkiG9w0BAQsFAAOCAQEADhkuLHDMMHOs+KAdMbRk/vyG
NTBkzGThAw43CFnFyIpoo5VyZAlBV6KUe7mi5dibGQUInT+4fsdJxbJVCs2pPzbD
D5zOVuaAoS33/S620aTNLNI3P/PWlxCsACMe2OnxfCFSjuS0nEQ1F3N0fX5EcuPb
2CNYHFTFCQx+O0RSLyhjspeMAEA/AAvp73C/NiJBgeM+9nkyWxtlp5vRIBO7294z
AGfIvZkh+/UiASbd+qUnAcPKo14qcTfceBii31fQI3Fbd0zV16o82PJg+I7QzcBo
CQwyhpHcT/0gpVm91AceBSTBf6LUQZUW6fdUvdHba+rDt1lx34vw8nwE9bFaRg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:02:47 2026 by rpki-client