Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31653a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31653a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          qBYLn+agCnDKBgMywPpyb5R0N8ACnC2YJQCbl9cAHKA=
Subject key identifier:   27:00:0B:22:E0:BA:4E:60:2B:2E:D4:02:C6:56:EE:07:1C:61:22:5F
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       71227914406AFFCE793BD26841D5F62A4A79287D
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31653a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:04 +0000
ROA not before:           Fri 30 Jan 2026 06:36:04 +0000
ROA not after:            Fri 29 Jan 2027 06:41:04 +0000
asID:                     262191
IP address blocks:        2800:b70:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:22:79:14:40:6a:ff:ce:79:3b:d2:68:41:d5:f6:2a:4a:79:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:04 2026 GMT
            Not After : Jan 29 06:41:04 2027 GMT
        Subject: CN=27000B22E0BA4E602B2ED402C656EE071C61225F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:16:81:1a:51:38:77:ab:a4:92:a6:68:fb:
                    2f:f8:4f:7c:fc:a6:87:09:51:39:d2:ae:4e:09:61:
                    45:be:92:ce:e7:57:1b:8d:a0:5d:5c:2f:64:d6:72:
                    5a:d4:09:25:e6:ad:b2:75:25:99:b9:61:a2:e0:fd:
                    e3:ad:4b:83:c2:35:83:ff:59:90:2f:aa:16:04:26:
                    c2:e5:4d:b4:60:8e:87:e3:86:f3:8b:a2:11:55:4d:
                    80:7c:a5:83:82:b9:b9:99:6a:d1:3c:c1:1a:f9:1e:
                    8d:7a:8f:ab:35:a4:be:09:df:61:03:6f:5d:de:09:
                    2c:61:da:cf:88:37:7b:e0:30:cc:04:60:71:6c:bb:
                    85:1c:81:c0:fb:9d:6b:f4:97:74:d2:c3:d6:32:10:
                    00:c7:0b:01:d0:67:c7:01:66:11:5f:ef:95:31:d9:
                    34:c2:95:40:02:64:cc:06:4c:9b:c5:aa:de:b7:5a:
                    64:9a:e2:5b:4a:68:ac:8b:99:32:79:84:04:02:06:
                    fe:fe:6f:ff:39:54:3e:22:d8:88:ca:81:60:5e:c8:
                    99:f0:ba:ae:b0:fb:f8:22:d8:4d:42:16:1f:b8:6a:
                    7d:f6:fe:22:75:93:d3:3c:8c:cb:09:e4:f9:46:1f:
                    15:dc:fc:20:14:b1:70:be:a5:aa:be:a2:fe:60:03:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:00:0B:22:E0:BA:4E:60:2B:2E:D4:02:C6:56:EE:07:1C:61:22:5F
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31653a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:c6:ce:16:74:e3:9f:81:71:3a:99:8f:77:22:c6:65:4e:
         e6:23:3e:c2:9e:2f:7d:3d:23:42:66:08:cf:6f:59:dd:0d:0a:
         da:5f:5e:f5:22:a1:2b:b4:74:ff:43:dd:7f:73:50:ed:01:a2:
         ef:1b:3d:2e:17:72:1b:56:11:9c:bb:77:ba:9c:b1:32:1e:d7:
         a1:76:bf:7e:47:39:02:c1:8f:fb:bc:96:eb:cd:1c:d8:11:d4:
         90:73:c8:63:8a:b0:d4:e9:60:eb:31:a8:3d:1c:e7:7f:f2:33:
         83:c0:50:18:8e:9c:aa:99:f6:3d:c7:09:5e:d0:53:77:12:ad:
         72:8f:a7:b8:bb:3e:9a:04:9f:00:e3:01:f1:be:64:76:63:f7:
         f5:2d:31:d3:58:00:1d:2c:2d:09:ae:58:6d:8f:bd:a2:d1:ca:
         81:65:71:31:a1:7f:5f:68:94:64:13:dd:02:8c:ff:bd:60:05:
         37:4f:30:70:f3:4c:48:ee:83:4d:20:01:94:21:f7:93:4c:e1:
         eb:3f:b7:32:ad:b9:e7:ae:f4:19:55:33:55:83:4f:82:a9:b2:
         b2:5b:49:0f:f8:36:71:68:a8:8d:f4:8c:1b:2a:53:58:d6:68:
         72:56:4f:87:68:0f:cb:bd:58:a4:43:f8:5c:72:36:99:2b:12:
         a4:4b:f6:28
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcSJ5FEBq/855O9JoQdX2Kkp5KH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgzODQxNTJERUUzOEQ2MkI5ODcwMEE1OTYzNEE1QjlG
QUY0MDZCMzAeFw0yNjAxMzAwNjM2MDRaFw0yNzAxMjkwNjQxMDRaMDMxMTAvBgNV
BAMTKDI3MDAwQjIyRTBCQTRFNjAyQjJFRDQwMkM2NTZFRTA3MUM2MTIyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7RaBGlE4d6ukkqZo+y/4T3z8
pocJUTnSrk4JYUW+ks7nVxuNoF1cL2TWclrUCSXmrbJ1JZm5YaLg/eOtS4PCNYP/
WZAvqhYEJsLlTbRgjofjhvOLohFVTYB8pYOCubmZatE8wRr5Ho16j6s1pL4J32ED
b13eCSxh2s+IN3vgMMwEYHFsu4UcgcD7nWv0l3TSw9YyEADHCwHQZ8cBZhFf75Ux
2TTClUACZMwGTJvFqt63WmSa4ltKaKyLmTJ5hAQCBv7+b/85VD4i2IjKgWBeyJnw
uq6w+/gi2E1CFh+4an32/iJ1k9M8jMsJ5PlGHxXc/CAUsXC+paq+ov5gA9F5AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUJwALIuC6TmArLtQCxlbuBxxhIl8wHwYDVR0j
BBgwFoAU+DhBUt7jjWK5hwClljSlufr0BrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvRjgzODQxNTJERUUzOEQ2
MkI5ODcwMEE1OTYzNEE1QjlGQUY0MDZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODM4NDE1MkRFRTM4RDYyQjk4
NzAwQTU5NjM0QTVCOUZBRjQwNkIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxNjUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwAB4wDQYJKoZIhvcNAQELBQADggEBAFeoxs4WdOOfgXE6mY93IsZlTuYjPsKe
L309I0JmCM9vWd0NCtpfXvUioSu0dP9D3X9zUO0Bou8bPS4XchtWEZy7d7qcsTIe
16F2v35HOQLBj/u8luvNHNgR1JBzyGOKsNTpYOsxqD0c53/yM4PAUBiOnKqZ9j3H
CV7QU3cSrXKPp7i7PpoEnwDjAfG+ZHZj9/UtMdNYAB0sLQmuWG2PvaLRyoFlcTGh
f19olGQT3QKM/71gBTdPMHDzTEjug00gAZQh95NM4es/tzKtueeu9BlVM1WDT4Kp
srJbSQ/4NnFoqI30jBsqU1jWaHJWT4doD8u9WKRD+FxyNpkrEqRL9ig=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:46:23 2026 by rpki-client