Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
File:                     323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (raw, json)
Hash identifier:          879k4d5FSFCRR7DOdP3MqnLopg4ZgND8BzqGpu69dRs=
Subject key identifier:   02:EB:D4:91:75:02:1B:2D:EA:F7:99:79:51:B2:40:3F:24:89:CD:99
Certificate issuer:       /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial:       1D9A481A5D80728374311F647B7F22A67F273B55
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
Signing time:             Tue 06 Jan 2026 19:25:32 +0000
ROA not before:           Tue 06 Jan 2026 19:20:32 +0000
ROA not after:            Tue 05 Jan 2027 19:25:32 +0000
asID:                     264678
IP address blocks:        2803:dd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9a:48:1a:5d:80:72:83:74:31:1f:64:7b:7f:22:a6:7f:27:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
        Validity
            Not Before: Jan  6 19:20:32 2026 GMT
            Not After : Jan  5 19:25:32 2027 GMT
        Subject: CN=02EBD49175021B2DEAF7997951B2403F2489CD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:a4:37:ae:59:d4:f8:d0:b9:ec:ed:4a:de:
                    dd:87:d2:e1:8b:a4:3e:2f:cb:d8:c2:00:5b:f6:c3:
                    a3:6a:56:3c:3e:bd:0d:40:19:c4:55:c6:59:69:cf:
                    7e:9d:c5:bb:7b:d7:7d:1b:ac:1a:90:09:99:92:14:
                    8f:9b:70:22:2e:61:e4:2e:35:3c:a4:9a:5a:4f:a1:
                    65:d4:39:c1:e5:de:31:ad:31:7b:e2:78:59:98:1d:
                    16:9e:9f:f4:5f:7e:df:4a:a6:fa:5d:19:c7:93:00:
                    d9:e1:c0:be:60:e8:4e:df:32:46:35:f7:18:b5:b9:
                    ce:15:46:af:72:6c:e2:88:50:d6:1e:38:e4:7a:b5:
                    01:2a:40:b0:71:b5:53:2f:7b:f4:53:38:34:39:b0:
                    df:c9:3e:d3:bd:fa:ed:51:40:2f:d7:d6:c0:e9:54:
                    33:56:de:6a:f0:ab:0d:0c:a3:bc:d2:33:51:0a:4e:
                    08:e1:d8:4b:3c:97:10:3e:33:be:1f:d9:01:07:7f:
                    d4:e4:59:cc:e1:d0:54:93:9f:ed:85:80:7d:db:79:
                    a4:aa:87:91:72:07:f9:32:82:f9:19:dc:f6:5c:3c:
                    3e:40:d2:77:e5:08:a6:33:88:97:dd:3b:59:59:90:
                    37:db:0d:6d:b2:37:ce:57:a5:b3:35:d0:17:cd:f1:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:D4:91:75:02:1B:2D:EA:F7:99:79:51:B2:40:3F:24:89:CD:99
            X509v3 Authority Key Identifier:
                keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:e4:e0:71:d2:14:2d:aa:04:9f:94:ef:45:96:33:0a:9d:
         04:81:5f:d0:76:c0:89:0e:a2:fa:fd:c3:3e:c5:7d:30:5e:d7:
         85:ca:cd:b2:df:a5:22:6d:4f:d7:12:d0:e9:c5:69:9a:b0:b9:
         e3:85:b4:a8:5f:53:d0:c5:9c:f1:fc:e5:32:dd:28:33:41:fe:
         ba:e7:d2:3b:69:55:61:1b:c2:b4:a4:80:80:8f:fe:b1:4e:e9:
         18:59:d7:1c:a7:a4:e7:c7:7b:17:05:b2:f1:c7:d6:7b:68:6e:
         cf:89:b4:41:94:e3:d4:52:ab:c6:c4:82:d3:b6:c6:fc:6b:bb:
         47:4f:83:58:0b:2d:c5:97:7c:f5:36:cc:b2:90:4b:95:6f:6b:
         8c:7d:bd:8e:75:fb:c5:bd:4c:3d:c6:f8:ea:da:74:22:d9:ff:
         3e:0f:69:87:27:2d:0b:c6:7f:e4:a7:3c:6e:89:1c:45:1e:14:
         05:5e:98:ae:ab:72:24:54:34:25:a9:96:43:97:e8:41:70:e9:
         dd:3c:b2:fc:0f:4d:3a:a1:6c:67:27:03:28:c3:05:d2:4f:77:
         fb:3b:ec:c7:75:cc:05:63:bb:29:9b:b2:41:62:31:75:d4:bd:
         14:f7:33:6a:ec:5b:54:9a:d0:7b:6e:44:e7:61:38:61:a0:84:
         d6:02:75:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHZpIGl2AcoN0MR9ke38ipn8nO1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZBMzY0Q0MwNUMzNDcwMEI2QzMyQUMzNzUxMkQ5NEQy
OTJEMzAxQzAeFw0yNjAxMDYxOTIwMzJaFw0yNzAxMDUxOTI1MzJaMDMxMTAvBgNV
BAMTKDAyRUJENDkxNzUwMjFCMkRFQUY3OTk3OTUxQjI0MDNGMjQ4OUNEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPaQ3rlnU+NC57O1K3t2H0uGL
pD4vy9jCAFv2w6NqVjw+vQ1AGcRVxllpz36dxbt7130brBqQCZmSFI+bcCIuYeQu
NTykmlpPoWXUOcHl3jGtMXvieFmYHRaen/Rfft9KpvpdGceTANnhwL5g6E7fMkY1
9xi1uc4VRq9ybOKIUNYeOOR6tQEqQLBxtVMve/RTODQ5sN/JPtO9+u1RQC/X1sDp
VDNW3mrwqw0Mo7zSM1EKTgjh2Es8lxA+M74f2QEHf9TkWczh0FSTn+2FgH3beaSq
h5FyB/kygvkZ3PZcPD5A0nflCKYziJfdO1lZkDfbDW2yN85XpbM10BfN8RrXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAuvUkXUCGy3q95l5UbJAPySJzZkwHwYDVR0j
BBgwFoAUv6NkzAXDRwC2wyrDdRLZTSktMBwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDFGQ0ZGRjMzMjI2MTVGNUYyQzlCQjI2QUE5ODdGQUNF
NjgzRTA4NjhBMDdDQ0E3NjJERTdBNkJBQkVEOTUwLzAvQkZBMzY0Q0MwNUMzNDcw
MEI2QzMyQUMzNzUxMkQ5NEQyOTJEMzAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkEzNjRDQzA1QzM0NzAwQjZD
MzJBQzM3NTEyRDk0RDI5MkQzMDFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQxRkNGRkYzMzIyNjE1RjVGMkM5QkIyNkFBOTg3RkFDRTY4M0UwODY4
QTA3Q0NBNzYyREU3QTZCQUJFRDk1MC8wLzMyMzgzMDMzM2E2NDY0MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3UAw
DQYJKoZIhvcNAQELBQADggEBAHk85OBx0hQtqgSflO9FljMKnQSBX9B2wIkOovr9
wz7FfTBe14XKzbLfpSJtT9cS0OnFaZqwueOFtKhfU9DFnPH85TLdKDNB/rrn0jtp
VWEbwrSkgICP/rFO6RhZ1xynpOfHexcFsvHH1ntobs+JtEGU49RSq8bEgtO2xvxr
u0dPg1gLLcWXfPU2zLKQS5Vva4x9vY51+8W9TD3G+OradCLZ/z4PaYcnLQvGf+Sn
PG6JHEUeFAVemK6rciRUNCWplkOX6EFw6d08svwPTTqhbGcnAyjDBdJPd/s77Md1
zAVjuymbskFiMXXUvRT3M2rsW1Sa0HtuROdhOGGghNYCdZ0=
-----END CERTIFICATE-----
Generated at Tue Mar 3 06:12:27 2026 by rpki-client