Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          i5mwhsE0AT/Ofn9cblrZXOlihcyvl9xNXzXrO4nYAmY=
Subject key identifier:   F0:9A:35:E6:C9:D9:DC:3E:07:C1:67:8A:16:9A:6D:3F:39:7E:D5:19
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       233762E176C9C217A690098E84D049AE2EBCC536
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:09 +0000
ROA not before:           Fri 30 Jan 2026 06:36:09 +0000
ROA not after:            Fri 29 Jan 2027 06:41:09 +0000
asID:                     262191
IP address blocks:        2800:b70:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:37:62:e1:76:c9:c2:17:a6:90:09:8e:84:d0:49:ae:2e:bc:c5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:09 2026 GMT
            Not After : Jan 29 06:41:09 2027 GMT
        Subject: CN=F09A35E6C9D9DC3E07C1678A169A6D3F397ED519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:0c:98:22:2b:d2:3e:91:4c:b2:aa:77:ac:
                    f1:aa:03:94:2c:a7:39:f0:fb:d8:83:50:30:8e:8d:
                    47:b3:27:fb:80:69:fd:a3:83:58:b1:db:76:90:16:
                    91:b6:58:e3:d8:d9:17:a8:e8:a5:18:71:2d:e3:7a:
                    17:3b:29:97:bd:6c:2a:c9:a3:fd:c5:78:d5:7f:4c:
                    88:82:16:f4:32:eb:46:28:92:17:66:f8:02:88:c1:
                    73:40:0c:31:5f:b5:1b:de:78:34:44:0e:8d:61:14:
                    ca:80:a7:f1:e5:25:3a:e9:31:e3:66:04:e6:8e:56:
                    ed:3d:67:37:9f:d7:79:cc:4c:d5:dd:d7:41:ba:d1:
                    f6:4a:3b:97:93:6e:1d:30:c4:8f:91:c4:f2:2d:c2:
                    e2:18:5c:2a:30:be:95:87:eb:84:c3:07:a5:25:a4:
                    5e:14:db:76:23:de:df:9d:d3:0e:52:c3:e0:30:49:
                    5a:49:22:b8:18:20:bd:ea:6d:30:e1:10:05:39:fc:
                    8e:e6:09:9d:57:5a:1b:52:c9:e2:e0:f1:ba:26:a7:
                    e6:15:d0:33:28:ad:5f:37:0b:7e:db:98:a0:75:16:
                    43:29:2b:f5:0c:d4:04:02:db:31:cb:93:74:76:f3:
                    a1:2c:05:77:f8:bf:5f:e1:a8:ba:78:62:98:87:7f:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9A:35:E6:C9:D9:DC:3E:07:C1:67:8A:16:9A:6D:3F:39:7E:D5:19
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:7e:28:0c:62:42:5e:37:63:9b:62:a2:bb:f0:d3:2b:de:
         1c:4c:e9:24:15:02:f4:70:de:08:b4:5f:01:47:52:57:ce:da:
         48:7e:64:5b:e8:89:d1:71:e5:06:96:a8:99:68:47:05:0f:20:
         ee:56:1f:a4:79:01:66:17:cf:2b:50:37:87:b7:66:93:d7:ba:
         e2:7f:1f:0d:07:37:a7:61:b0:7b:43:96:0c:f7:25:72:ad:96:
         dd:d5:e2:12:52:66:a7:f8:55:3c:ec:4b:f9:2a:7e:1c:fb:c7:
         98:20:d8:9a:be:a2:8f:ac:07:1c:31:81:3a:bb:ed:94:a2:60:
         f1:e5:15:77:a2:85:17:fa:00:f3:84:6b:fb:b0:0f:72:c9:02:
         90:52:ac:ce:bc:ea:26:85:d5:67:7d:a8:7a:97:23:dc:f8:a4:
         d6:0d:5d:fc:43:5c:60:d1:29:10:fa:46:46:68:ab:80:c0:94:
         78:35:ff:e3:3e:58:5f:b7:48:b9:a7:71:6f:68:b4:71:35:81:
         de:1e:ed:b4:c7:a4:4d:61:e2:ec:84:57:b9:6c:e7:66:e3:31:
         c6:7e:5b:1e:44:c7:1c:fc:a6:60:cc:1d:a4:cc:62:aa:18:e3:
         53:72:c3:8d:99:d2:ee:80:d6:f5:cf:60:02:cb:1f:3a:0d:85:
         d0:20:cc:b6
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUIzdi4XbJwhemkAmOhNBJri68xTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgzODQxNTJERUUzOEQ2MkI5ODcwMEE1OTYzNEE1QjlG
QUY0MDZCMzAeFw0yNjAxMzAwNjM2MDlaFw0yNzAxMjkwNjQxMDlaMDMxMTAvBgNV
BAMTKEYwOUEzNUU2QzlEOURDM0UwN0MxNjc4QTE2OUE2RDNGMzk3RUQ1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrAyYIivSPpFMsqp3rPGqA5Qs
pznw+9iDUDCOjUezJ/uAaf2jg1ix23aQFpG2WOPY2Reo6KUYcS3jehc7KZe9bCrJ
o/3FeNV/TIiCFvQy60Yokhdm+AKIwXNADDFftRveeDREDo1hFMqAp/HlJTrpMeNm
BOaOVu09Zzef13nMTNXd10G60fZKO5eTbh0wxI+RxPItwuIYXCowvpWH64TDB6Ul
pF4U23Yj3t+d0w5Sw+AwSVpJIrgYIL3qbTDhEAU5/I7mCZ1XWhtSyeLg8bomp+YV
0DMorV83C37bmKB1FkMpK/UM1AQC2zHLk3R286EsBXf4v1/hqLp4YpiHfypDAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU8Jo15snZ3D4HwWeKFpptPzl+1RkwHwYDVR0j
BBgwFoAU+DhBUt7jjWK5hwClljSlufr0BrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvRjgzODQxNTJERUUzOEQ2
MkI5ODcwMEE1OTYzNEE1QjlGQUY0MDZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODM4NDE1MkRFRTM4RDYyQjk4
NzAwQTU5NjM0QTVCOUZBRjQwNkIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxNjYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwAB8wDQYJKoZIhvcNAQELBQADggEBAEu7figMYkJeN2ObYqK78NMr3hxM6SQV
AvRw3gi0XwFHUlfO2kh+ZFvoidFx5QaWqJloRwUPIO5WH6R5AWYXzytQN4e3ZpPX
uuJ/Hw0HN6dhsHtDlgz3JXKtlt3V4hJSZqf4VTzsS/kqfhz7x5gg2Jq+oo+sBxwx
gTq77ZSiYPHlFXeihRf6APOEa/uwD3LJApBSrM686iaF1Wd9qHqXI9z4pNYNXfxD
XGDRKRD6RkZoq4DAlHg1/+M+WF+3SLmncW9otHE1gd4e7bTHpE1h4uyEV7ls52bj
McZ+Wx5Exxz8pmDMHaTMYqoY41Nyw42Z0u6A1vXPYALLHzoNhdAgzLY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:48 2026 by rpki-client