Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          Xdjmji4hmkshLoAlOcMJ4MoUXxckGd8as8dc9wqo9CQ=
Subject key identifier:   F4:A5:2C:5A:6A:0E:CF:91:FF:B3:13:54:67:0D:0D:BD:63:CD:60:31
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       37BE2DDBA28A4EC2F2E1BACF1989C2617C35F745
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:04 +0000
ROA not before:           Fri 30 Jan 2026 06:36:04 +0000
ROA not after:            Fri 29 Jan 2027 06:41:04 +0000
asID:                     262191
IP address blocks:        2800:b70:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:2d:db:a2:8a:4e:c2:f2:e1:ba:cf:19:89:c2:61:7c:35:f7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:04 2026 GMT
            Not After : Jan 29 06:41:04 2027 GMT
        Subject: CN=F4A52C5A6A0ECF91FFB31354670D0DBD63CD6031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:18:4e:53:c7:78:4d:85:11:13:84:7c:01:
                    f1:14:3e:69:a0:3f:f4:73:6c:2b:63:69:cc:b3:94:
                    bf:c0:75:68:b2:98:45:a9:16:c6:13:4a:cb:01:7e:
                    6a:60:57:31:ab:c0:4d:dc:d6:0e:0a:7a:71:c8:da:
                    64:6a:96:b3:6b:6a:22:ff:1b:70:eb:b7:81:5d:09:
                    57:bf:32:a2:37:c8:69:d0:ea:4f:62:df:4f:11:20:
                    da:65:cc:39:83:42:17:95:16:1e:0d:f9:31:76:ac:
                    59:f8:4b:5b:5c:81:55:89:92:72:9e:81:b8:3f:b6:
                    6b:a4:ce:1e:f1:59:62:84:18:01:b4:56:90:82:3b:
                    3d:24:fd:17:9b:cb:c8:16:e1:e5:e8:85:81:1e:58:
                    81:d4:a7:95:fd:58:c4:7b:c0:a8:81:5c:ae:30:28:
                    10:f8:79:2b:0e:15:9e:5e:cd:ea:55:77:a0:32:1e:
                    96:e8:43:29:4d:34:6e:2e:5c:5d:8f:57:80:b5:b7:
                    47:5e:df:08:04:b7:c3:2d:19:e2:c9:51:34:f9:7a:
                    6f:f5:0d:19:4e:02:e2:97:9b:72:f3:10:1b:42:53:
                    6f:8e:f7:f1:81:0a:00:65:8a:eb:30:16:96:c5:7c:
                    92:b9:db:e2:84:e7:b3:95:7f:32:a9:79:a7:ca:77:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:2C:5A:6A:0E:CF:91:FF:B3:13:54:67:0D:0D:BD:63:CD:60:31
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:cc:14:54:22:f5:c9:49:29:8a:fc:a5:0b:0c:b6:fb:4a:
         1b:05:43:af:cc:40:f3:02:9a:ca:81:07:ca:9d:5a:7f:25:09:
         18:cc:c9:1a:62:f5:0d:9c:91:2f:9f:fe:b1:fc:1e:2b:6d:46:
         11:73:4f:22:83:9f:37:6a:55:8d:33:23:44:4e:de:62:72:a2:
         cd:c6:93:b2:48:49:e5:10:ca:fd:b7:7a:3f:70:e0:3a:9b:e4:
         4a:f3:16:16:44:9e:7f:c6:05:36:d6:68:8e:b1:6a:e6:5e:22:
         be:8b:3b:6e:c8:1e:0b:5f:df:9e:e2:13:ec:42:44:13:a9:cd:
         a2:e3:ff:7f:b7:90:5f:bb:2d:62:3f:ba:ec:0d:8c:c6:82:24:
         12:ad:99:f6:ba:2a:43:3a:72:fd:98:11:0d:6d:dc:d6:7f:9f:
         f1:61:85:43:c6:69:3f:0a:45:99:d7:86:10:51:63:af:f5:bc:
         51:97:3e:b5:5b:94:78:b3:6c:12:c6:00:b7:85:de:8f:98:aa:
         21:5e:db:fd:e0:a3:a9:33:58:2c:62:c4:ac:0b:27:cb:b0:cc:
         0b:c6:1b:2f:f9:69:5b:3e:00:33:8e:09:fc:39:03:af:89:ac:
         b9:cf:d4:4f:cd:b9:3f:5f:88:4e:75:05:87:36:50:64:58:93:
         8d:7c:ea:ad
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUN74t26KKTsLy4brPGYnCYXw190UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgzODQxNTJERUUzOEQ2MkI5ODcwMEE1OTYzNEE1QjlG
QUY0MDZCMzAeFw0yNjAxMzAwNjM2MDRaFw0yNzAxMjkwNjQxMDRaMDMxMTAvBgNV
BAMTKEY0QTUyQzVBNkEwRUNGOTFGRkIzMTM1NDY3MEQwREJENjNDRDYwMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY1xhOU8d4TYURE4R8AfEUPmmg
P/RzbCtjacyzlL/AdWiymEWpFsYTSssBfmpgVzGrwE3c1g4KenHI2mRqlrNraiL/
G3Drt4FdCVe/MqI3yGnQ6k9i308RINplzDmDQheVFh4N+TF2rFn4S1tcgVWJknKe
gbg/tmukzh7xWWKEGAG0VpCCOz0k/Reby8gW4eXohYEeWIHUp5X9WMR7wKiBXK4w
KBD4eSsOFZ5ezepVd6AyHpboQylNNG4uXF2PV4C1t0de3wgEt8MtGeLJUTT5em/1
DRlOAuKXm3LzEBtCU2+O9/GBCgBliuswFpbFfJK52+KE57OVfzKpeafKd97TAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU9KUsWmoOz5H/sxNUZw0NvWPNYDEwHwYDVR0j
BBgwFoAU+DhBUt7jjWK5hwClljSlufr0BrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvRjgzODQxNTJERUUzOEQ2
MkI5ODcwMEE1OTYzNEE1QjlGQUY0MDZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODM4NDE1MkRFRTM4RDYyQjk4
NzAwQTU5NjM0QTVCOUZBRjQwNkIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwABUwDQYJKoZIhvcNAQELBQADggEBAHzpzBRUIvXJSSmK/KULDLb7ShsFQ6/M
QPMCmsqBB8qdWn8lCRjMyRpi9Q2ckS+f/rH8HittRhFzTyKDnzdqVY0zI0RO3mJy
os3Gk7JISeUQyv23ej9w4Dqb5ErzFhZEnn/GBTbWaI6xauZeIr6LO27IHgtf357i
E+xCRBOpzaLj/3+3kF+7LWI/uuwNjMaCJBKtmfa6KkM6cv2YEQ1t3NZ/n/FhhUPG
aT8KRZnXhhBRY6/1vFGXPrVblHizbBLGALeF3o+YqiFe2/3go6kzWCxixKwLJ8uw
zAvGGy/5aVs+ADOOCfw5A6+JrLnP1E/NuT9fiE51BYc2UGRYk4186q0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:54 2026 by rpki-client