Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/323830333a3664303a3a2f33322d3438203d3e20323734303835.roa
File:                     323830333a3664303a3a2f33322d3438203d3e20323734303835.roa (raw, json)
Hash identifier:          I463lKMkWdcGQXXvqkK3VlZzNY9DDrdeLmXK6cNj20w=
Subject key identifier:   C2:B5:AE:2E:FE:5D:9C:D3:7F:9F:B8:E0:C5:62:64:3E:CE:2A:35:1D
Certificate issuer:       /CN=7DF110C11FBAD69F038D8A73C7DC58153536B585
Certificate serial:       24CB1EAA718311B654E3197B120481A247B045
Authority key identifier: 7D:F1:10:C1:1F:BA:D6:9F:03:8D:8A:73:C7:DC:58:15:35:36:B5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/323830333a3664303a3a2f33322d3438203d3e20323734303835.roa
Signing time:             Tue 31 Mar 2026 00:36:54 +0000
ROA not before:           Tue 31 Mar 2026 00:31:54 +0000
ROA not after:            Tue 30 Mar 2027 00:36:54 +0000
asID:                     274085
IP address blocks:        2803:6d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:1e:aa:71:83:11:b6:54:e3:19:7b:12:04:81:a2:47:b0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF110C11FBAD69F038D8A73C7DC58153536B585
        Validity
            Not Before: Mar 31 00:31:54 2026 GMT
            Not After : Mar 30 00:36:54 2027 GMT
        Subject: CN=C2B5AE2EFE5D9CD37F9FB8E0C562643ECE2A351D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7c:54:48:be:c8:7e:d9:bf:2f:67:1d:cf:04:
                    cd:a6:85:8c:8e:49:24:3f:4c:46:28:82:05:90:97:
                    12:f0:08:02:0b:1f:a4:d4:8c:b4:91:dd:68:ab:c7:
                    4f:13:5c:80:12:c7:a5:4c:b7:ec:d6:75:30:8f:5c:
                    b5:94:41:4a:8e:ea:8e:4a:b0:50:75:cc:85:07:7b:
                    f8:23:11:2a:00:8c:09:77:95:82:7c:ab:d9:b2:cc:
                    7a:1d:3a:74:61:ff:b5:41:a5:a6:f7:79:e0:77:c9:
                    d3:71:52:81:37:22:aa:86:23:58:5b:08:3a:af:28:
                    0e:1e:68:0a:d8:d4:59:82:60:23:85:d1:d6:62:cf:
                    9e:0b:bf:e4:7d:3e:cd:92:8e:3c:e2:a3:0b:e9:e9:
                    4c:90:ab:d3:b7:1a:c6:16:6a:bb:3f:f9:54:5c:c0:
                    70:ed:a2:bc:9f:e1:8a:07:54:f4:00:3d:97:9f:48:
                    56:13:6a:45:6c:a3:33:e3:b4:5a:ca:6b:61:1a:37:
                    61:f3:73:b8:22:83:53:a7:8c:07:20:25:dd:38:4d:
                    7e:e6:87:5b:1a:b8:48:d4:14:eb:a2:7f:25:7f:d3:
                    12:e4:4c:40:ae:d6:17:1e:75:ca:6a:3d:e0:40:10:
                    8d:37:93:1d:73:60:c7:f4:e1:ba:15:a1:6f:eb:09:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:AE:2E:FE:5D:9C:D3:7F:9F:B8:E0:C5:62:64:3E:CE:2A:35:1D
            X509v3 Authority Key Identifier:
                keyid:7D:F1:10:C1:1F:BA:D6:9F:03:8D:8A:73:C7:DC:58:15:35:36:B5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/323830333a3664303a3a2f33322d3438203d3e20323734303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:29:f0:49:5e:c0:42:3a:4c:ef:4a:0c:9f:ba:9d:40:63:fe:
         8c:6d:1d:85:d3:af:fb:99:d4:59:ed:44:a3:f9:29:c4:4d:d6:
         67:a4:46:b1:55:a1:58:ec:93:b7:d6:8c:a2:40:05:0d:50:b8:
         5c:96:a4:2c:96:df:5d:53:3a:f0:29:6e:36:68:6d:de:27:7a:
         ce:ef:71:5a:b6:d9:75:77:8c:24:1b:6b:17:8a:50:b7:72:06:
         8a:d6:83:f4:0c:8a:27:e0:41:a8:3d:3d:7a:1f:13:67:b3:75:
         9c:ad:b2:2a:bc:f9:55:77:fd:1b:a3:0f:34:64:d8:88:ae:fe:
         ea:81:42:f1:32:43:27:be:55:1d:6d:c4:7c:c6:84:15:20:af:
         f1:bd:6f:a9:a6:4e:da:76:b2:41:68:cf:82:b9:4e:11:03:2d:
         2b:e9:74:5c:7e:a6:08:b5:5a:e4:4a:0e:b1:c0:08:92:bd:92:
         82:22:f0:84:2c:23:e0:91:c3:b8:70:23:7b:32:85:26:be:55:
         0d:3b:db:d9:c2:1f:fa:d3:21:de:db:dc:4a:39:4c:e1:a6:01:
         c6:16:11:e1:a0:14:27:f4:11:be:39:07:79:c1:db:77:66:5a:
         76:e0:24:c8:c8:2a:95:f1:30:77:40:80:c5:49:d7:b7:f8:1f:
         2a:8f:fa:f9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgITJMseqnGDEbZU4xl7EgSBokewRTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3REYxMTBDMTFGQkFENjlGMDM4RDhBNzNDN0RDNTgxNTM1
MzZCNTg1MB4XDTI2MDMzMTAwMzE1NFoXDTI3MDMzMDAwMzY1NFowMzExMC8GA1UE
AxMoQzJCNUFFMkVGRTVEOUNEMzdGOUZCOEUwQzU2MjY0M0VDRTJBMzUxRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO18VEi+yH7Zvy9nHc8EzaaFjI5J
JD9MRiiCBZCXEvAIAgsfpNSMtJHdaKvHTxNcgBLHpUy37NZ1MI9ctZRBSo7qjkqw
UHXMhQd7+CMRKgCMCXeVgnyr2bLMeh06dGH/tUGlpvd54HfJ03FSgTciqoYjWFsI
Oq8oDh5oCtjUWYJgI4XR1mLPngu/5H0+zZKOPOKjC+npTJCr07caxhZquz/5VFzA
cO2ivJ/higdU9AA9l59IVhNqRWyjM+O0WsprYRo3YfNzuCKDU6eMByAl3ThNfuaH
Wxq4SNQU66J/JX/TEuRMQK7WFx51ymo94EAQjTeTHXNgx/ThuhWhb+sJWvsCAwEA
AaOCAscwggLDMB0GA1UdDgQWBBTCta4u/l2c03+fuODFYmQ+zio1HTAfBgNVHSME
GDAWgBR98RDBH7rWnwONinPH3FgVNTa1hTAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzFGREZGMDQ0RTAwQTQyM0E0RjcwNEM0OEFCNTY4NkVERDdD
M0RFMUUxNzgzMkU2MDlFQjQwMjI4ODkwQkZGOEMvMC83REYxMTBDMTFGQkFENjlG
MDM4RDhBNzNDN0RDNTgxNTM1MzZCNTg1LmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzdERjExMEMxMUZCQUQ2OUYwMzhE
OEE3M0M3REM1ODE1MzUzNkI1ODUuY2VyMIHFBggrBgEFBQcBCwSBuDCBtTCBsgYI
KwYBBQUHMAuGgaVyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xRkRGRjA0NEUwMEE0MjNBNEY3MDRDNDhBQjU2ODZFREQ3QzNERTFFMTc4
MzJFNjA5RUI0MDIyODg5MEJGRjhDLzAvMzIzODMwMzMzYTM2NjQzMDNhM2EyZjMz
MzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDBtAwDQYJ
KoZIhvcNAQELBQADggEBAJEp8ElewEI6TO9KDJ+6nUBj/oxtHYXTr/uZ1FntRKP5
KcRN1mekRrFVoVjsk7fWjKJABQ1QuFyWpCyW311TOvApbjZobd4nes7vcVq22XV3
jCQbaxeKULdyBorWg/QMiifgQag9PXofE2ezdZytsiq8+VV3/RujDzRk2Iiu/uqB
QvEyQye+VR1txHzGhBUgr/G9b6mmTtp2skFoz4K5ThEDLSvpdFx+pgi1WuRKDrHA
CJK9koIi8IQsI+CRw7hwI3syhSa+VQ0729nCH/rTId7b3Eo5TOGmAcYWEeGgFCf0
Eb45B3nB23dmWnbgJMjIKpXxMHdAgMVJ17f4HyqP+vk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:46:01 2026 by rpki-client