Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          JaWC1emXrOExwHghtB1inrHl/HPIQMVAm/vPV3+euys=
Subject key identifier:   04:0E:1B:8C:F9:D1:24:C5:93:32:61:88:5E:9B:13:F9:78:03:22:A6
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       4B3445F786C05E0ED62253E95EA369A5CF296CD5
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 14 Oct 2026 21:40:36 +0000
ROA not before:           Wed 14 Oct 2026 21:35:36 +0000
ROA not after:            Wed 13 Oct 2027 21:40:36 +0000
asID:                     273177
IP address blocks:        2803:ca50:1f02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 09:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:34:45:f7:86:c0:5e:0e:d6:22:53:e9:5e:a3:69:a5:cf:29:6c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Oct 14 21:35:36 2026 GMT
            Not After : Oct 13 21:40:36 2027 GMT
        Subject: CN=040E1B8CF9D124C5933261885E9B13F9780322A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:83:c7:78:96:2b:2b:08:df:81:dd:ac:33:
                    55:a4:11:74:d6:e8:03:a4:2a:b5:19:69:63:87:fa:
                    6e:73:af:ef:e7:13:de:a3:2f:49:dd:57:f7:69:29:
                    78:b8:9c:4d:fd:40:51:4f:25:4e:3f:7f:a7:a3:cd:
                    02:66:8f:0c:45:9d:2d:a6:48:14:62:bb:8c:15:a8:
                    c5:43:94:49:0e:7e:1a:c1:59:0d:82:7f:98:2e:7a:
                    c4:c2:a0:9a:89:01:8f:6a:0c:81:bb:44:14:14:da:
                    90:fc:3d:5e:95:a1:87:14:8b:54:b1:9d:f1:4a:27:
                    96:d1:60:23:e3:8c:44:ec:67:14:01:39:72:f6:47:
                    ee:b5:bf:f9:66:fa:4d:0f:06:31:91:36:e8:2d:f7:
                    58:c1:68:a7:83:e8:ef:ea:47:2f:a7:20:98:4a:80:
                    48:90:49:f9:57:02:2d:dd:cd:29:bd:e6:96:c1:a0:
                    32:91:82:77:e0:32:43:6b:ac:f3:16:88:91:79:09:
                    10:fd:5f:b9:fc:22:09:b4:51:b1:b2:74:b6:3a:93:
                    84:54:72:8d:65:1b:26:1e:6f:45:b9:66:6c:04:9f:
                    01:4f:cd:c5:94:50:5a:ff:1f:11:bd:ad:d4:2b:41:
                    f3:87:66:2c:2a:fd:1c:e8:b8:a7:56:d2:09:f7:2f:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0E:1B:8C:F9:D1:24:C5:93:32:61:88:5E:9B:13:F9:78:03:22:A6
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:1f02::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:aa:cf:3f:7d:f8:e6:d1:f4:6b:b1:5a:2f:78:a0:31:7c:30:
         ad:1a:ef:78:d1:27:78:fe:08:b9:b8:bf:23:b8:46:38:c4:c4:
         98:1a:95:6b:c6:14:05:53:e9:2b:0e:67:23:f4:ee:29:f3:c5:
         82:98:25:b1:2e:15:5f:5a:7c:64:84:96:5c:02:9d:64:b3:55:
         70:97:40:75:06:c3:f8:89:b7:fe:ea:48:d3:a5:c0:7d:e8:d6:
         3f:eb:f1:bb:6d:95:10:6f:74:05:d4:1d:7a:3e:10:e9:cf:6a:
         72:c6:10:58:ca:fb:6b:b2:81:96:b7:77:2f:c9:be:b2:78:8b:
         f7:b1:d4:60:4a:34:05:71:5d:d3:28:2e:0b:0a:30:5c:de:3a:
         bf:99:2a:8e:25:dd:64:90:8b:d0:0e:52:bb:aa:00:dd:0d:58:
         22:6a:65:80:0a:d4:34:26:bf:98:d8:3f:2d:6e:5d:8e:a2:31:
         fe:36:6b:8f:73:97:b5:24:25:92:df:99:bd:9f:2f:59:5e:d4:
         fb:60:29:42:85:37:34:d9:19:af:89:6f:32:18:0e:c6:c2:2b:
         db:d6:51:d5:c7:92:5e:df:ae:e9:5e:25:66:f7:bc:12:00:7f:
         8e:36:5b:de:08:f0:d1:ba:2c:71:fc:a2:ec:63:6b:29:0d:f3:
         7d:c1:32:47
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUSzRF94bAXg7WIlPpXqNppc8pbNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4
QTBDQkNENjAeFw0yNjEwMTQyMTM1MzZaFw0yNzEwMTMyMTQwMzZaMDMxMTAvBgNV
BAMTKDA0MEUxQjhDRjlEMTI0QzU5MzMyNjE4ODVFOUIxM0Y5NzgwMzIyQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T4PHeJYrKwjfgd2sM1WkEXTW
6AOkKrUZaWOH+m5zr+/nE96jL0ndV/dpKXi4nE39QFFPJU4/f6ejzQJmjwxFnS2m
SBRiu4wVqMVDlEkOfhrBWQ2Cf5guesTCoJqJAY9qDIG7RBQU2pD8PV6VoYcUi1Sx
nfFKJ5bRYCPjjETsZxQBOXL2R+61v/lm+k0PBjGRNugt91jBaKeD6O/qRy+nIJhK
gEiQSflXAi3dzSm95pbBoDKRgnfgMkNrrPMWiJF5CRD9X7n8Igm0UbGydLY6k4RU
co1lGyYeb0W5ZmwEnwFPzcWUUFr/HxG9rdQrQfOHZiwq/RzouKdW0gn3LwQdAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUBA4bjPnRJMWTMmGIXpsT+XgDIqYwHwYDVR0j
BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC
OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC
MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC
NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2
Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzE2
NjMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA8pQHwIwDQYJKoZIhvcNAQELBQADggEBALmqzz99+ObR9GuxWi94oDF8
MK0a73jRJ3j+CLm4vyO4RjjExJgalWvGFAVT6SsOZyP07inzxYKYJbEuFV9afGSE
llwCnWSzVXCXQHUGw/iJt/7qSNOlwH3o1j/r8bttlRBvdAXUHXo+EOnPanLGEFjK
+2uygZa3dy/JvrJ4i/ex1GBKNAVxXdMoLgsKMFzeOr+ZKo4l3WSQi9AOUruqAN0N
WCJqZYAK1DQmv5jYPy1uXY6iMf42a49zl7UkJZLfmb2fL1le1PtgKUKFNzTZGa+J
bzIYDsbCK9vWUdXHkl7fruleJWb3vBIAf442W94I8NG6LHH8ouxjaykN833BMkc=
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:36:40 2026 by rpki-client