Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa
File:                     323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa (raw, json)
Hash identifier:          nHziA4YDRfwjP+kdShpiyF5SbgWFYsNjwIWEQukjMSU=
Subject key identifier:   B7:EB:36:BB:94:8B:04:3F:3B:4A:0B:FD:42:7B:34:62:C3:90:4C:BD
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0BDCC7BE3D3B579A042A79037D1A6D9DFA1258C1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa
Signing time:             Wed 18 Feb 2026 06:31:03 +0000
ROA not before:           Wed 18 Feb 2026 06:26:03 +0000
ROA not after:            Wed 17 Feb 2027 06:31:03 +0000
asID:                     6535
IP address blocks:        2800:3b0:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 09:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dc:c7:be:3d:3b:57:9a:04:2a:79:03:7d:1a:6d:9d:fa:12:58:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb 18 06:26:03 2026 GMT
            Not After : Feb 17 06:31:03 2027 GMT
        Subject: CN=B7EB36BB948B043F3B4A0BFD427B3462C3904CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:ac:f4:40:62:63:3f:1e:3a:a4:fe:0a:d6:
                    b3:e9:b1:f8:5a:04:b8:6d:b6:c7:a7:5b:ec:20:cf:
                    02:04:38:bd:9b:3a:c2:e4:fc:be:69:e0:2d:aa:b9:
                    39:06:25:a3:ce:21:08:89:62:ca:c8:d4:8a:3a:22:
                    2e:77:10:e1:b9:bc:bd:51:d8:af:63:0f:9f:5b:a8:
                    97:a7:d6:c7:f6:3f:31:a3:e6:8b:1d:4b:6c:cf:cf:
                    c6:af:0b:ec:13:e4:b6:63:7e:17:ae:7c:53:83:6d:
                    73:1b:dd:08:43:b6:7c:48:1a:73:9b:bd:64:bd:c2:
                    30:9b:e8:8c:66:6d:28:56:fd:90:95:38:41:85:80:
                    be:b7:88:7f:fd:1a:ca:77:34:9b:42:b5:81:89:33:
                    9b:2c:02:e9:27:66:a9:ab:e0:76:55:63:17:9f:5e:
                    17:1f:24:96:9f:d1:41:43:85:20:dc:ea:a6:fc:94:
                    d5:0d:0b:96:d1:92:86:97:ae:69:e4:d9:4d:23:f2:
                    0e:d4:23:70:5a:d6:12:d6:68:c1:a4:d1:a6:e0:ce:
                    17:0d:a5:19:0d:ab:e4:a6:c3:95:83:b1:01:a4:2e:
                    4e:76:1a:03:d4:9f:c3:a3:3a:03:5e:23:6b:9f:41:
                    9d:02:12:e4:23:db:41:d7:44:d3:5c:96:8d:2d:fb:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:36:BB:94:8B:04:3F:3B:4A:0B:FD:42:7B:34:62:C3:90:4C:BD
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3438203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3b0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:c1:b6:24:2f:2d:92:b7:c0:a6:8e:76:1f:4c:9a:81:b0:
         8d:45:53:40:78:91:03:f3:ed:47:42:19:ec:23:63:8b:1b:a5:
         45:74:c1:2c:80:90:2d:0b:ae:89:d2:19:45:a8:bd:7e:50:a1:
         77:8c:5a:59:7e:12:29:65:6d:cc:8f:f8:1a:de:d9:35:7c:93:
         16:3a:dc:1b:1c:36:62:02:fc:05:98:1c:37:ee:e9:04:7b:23:
         ca:82:90:4a:9f:87:d6:74:47:65:8d:93:e5:5c:20:a1:1e:3b:
         25:29:72:26:09:91:c0:3b:34:8b:63:0e:37:d1:1e:bf:a0:31:
         2e:9c:5e:ea:74:38:8d:db:a4:d5:1f:35:3d:99:5f:2e:9b:f8:
         9e:a0:35:34:ff:96:63:1b:b8:81:ff:6a:09:a9:40:db:20:40:
         63:0e:47:ff:6f:56:27:a9:4b:c7:b9:a9:38:20:a7:1a:5c:da:
         e9:54:0b:ec:60:7f:9e:6a:b1:f0:17:3f:a7:8a:f8:af:66:f3:
         d0:0a:e8:7e:0a:7c:16:8d:11:3a:bc:19:55:0e:27:ab:66:66:
         57:6a:50:1e:92:92:99:c2:82:b9:a1:01:81:bc:8b:83:69:c6:
         46:5b:0d:65:7b:5d:7e:fa:84:0c:9a:39:8d:a9:95:b3:c2:b8:
         a1:7f:ee:cd
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUC9zHvj07V5oEKnkDfRptnfoSWMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNjAyMTgwNjI2MDNaFw0yNzAyMTcwNjMxMDNaMDMxMTAvBgNV
BAMTKEI3RUIzNkJCOTQ4QjA0M0YzQjRBMEJGRDQyN0IzNDYyQzM5MDRDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqaz0QGJjPx46pP4K1rPpsfha
BLhttsenW+wgzwIEOL2bOsLk/L5p4C2quTkGJaPOIQiJYsrI1Io6Ii53EOG5vL1R
2K9jD59bqJen1sf2PzGj5osdS2zPz8avC+wT5LZjfheufFODbXMb3QhDtnxIGnOb
vWS9wjCb6IxmbShW/ZCVOEGFgL63iH/9Gsp3NJtCtYGJM5ssAuknZqmr4HZVYxef
XhcfJJaf0UFDhSDc6qb8lNUNC5bRkoaXrmnk2U0j8g7UI3Ba1hLWaMGk0abgzhcN
pRkNq+Smw5WDsQGkLk52GgPUn8OjOgNeI2ufQZ0CEuQj20HXRNNclo0t+9LbAgMB
AAGjggLOMIICyjAdBgNVHQ4EFgQUt+s2u5SLBD87Sgv9Qns0YsOQTL0wHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzgzMDMwM2EzMzYyMzAzYTMzMzAz
MDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQo
AAOwMDANBgkqhkiG9w0BAQsFAAOCAQEAFV7BtiQvLZK3wKaOdh9MmoGwjUVTQHiR
A/PtR0IZ7CNjixulRXTBLICQLQuuidIZRai9flChd4xaWX4SKWVtzI/4Gt7ZNXyT
FjrcGxw2YgL8BZgcN+7pBHsjyoKQSp+H1nRHZY2T5VwgoR47JSlyJgmRwDs0i2MO
N9Eev6AxLpxe6nQ4jduk1R81PZlfLpv4nqA1NP+WYxu4gf9qCalA2yBAYw5H/29W
J6lLx7mpOCCnGlza6VQL7GB/nmqx8Bc/p4r4r2bz0Arofgp8Fo0ROrwZVQ4nq2Zm
V2pQHpKSmcKCuaEBgbyLg2nGRlsNZXtdfvqEDJo5jamVs8K4oX/uzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:58:04 2026 by rpki-client