Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313030303a3a2f34302d3430203d3e20323734383937.roa
File:                     323830333a623633303a313030303a3a2f34302d3430203d3e20323734383937.roa (raw, json)
Hash identifier:          vz3Ra3fvVXibFjwDJ/V/qlRY5E4vqdDC2J8D4LB63RI=
Subject key identifier:   7C:9C:62:26:5A:6D:29:10:2C:8A:8C:5E:9D:3B:C4:98:E1:65:44:3D
Certificate issuer:       /CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
Certificate serial:       5CAED24F3C4B68AC834226CF6ACAC42A0A193540
Authority key identifier: 48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313030303a3a2f34302d3430203d3e20323734383937.roa
Signing time:             Sat 13 Jun 2026 03:25:00 +0000
ROA not before:           Sat 13 Jun 2026 03:20:00 +0000
ROA not after:            Sat 12 Jun 2027 03:25:00 +0000
asID:                     274897
IP address blocks:        2803:b630:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ae:d2:4f:3c:4b:68:ac:83:42:26:cf:6a:ca:c4:2a:0a:19:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
        Validity
            Not Before: Jun 13 03:20:00 2026 GMT
            Not After : Jun 12 03:25:00 2027 GMT
        Subject: CN=7C9C62265A6D29102C8A8C5E9D3BC498E165443D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:4b:01:4d:ff:6b:5c:17:b7:3c:3b:e2:b6:
                    ab:d3:2e:5e:5e:bc:ad:54:4c:f3:76:aa:5f:f3:3c:
                    56:82:c8:5e:13:ed:0c:0e:b9:b0:15:93:8d:4e:68:
                    40:db:02:b7:88:04:d9:54:4a:5e:2d:63:d9:bf:36:
                    3f:0e:20:1d:d1:ce:f4:56:7b:28:8a:8b:bd:26:43:
                    b6:70:80:7f:2a:c1:7d:5a:79:97:f4:a8:4e:63:95:
                    29:c9:2a:07:e5:6c:5c:72:da:b8:45:b0:be:cf:c5:
                    37:16:07:4c:b1:9a:bc:e3:12:5b:39:14:f5:89:63:
                    43:d5:f9:89:a1:a7:3b:c7:49:32:80:83:2b:86:7e:
                    98:30:5b:f0:80:49:74:57:77:47:95:c0:10:20:71:
                    65:e5:40:8c:e7:5d:5b:13:a3:2d:bd:8d:98:91:ea:
                    3c:0a:50:d0:89:37:22:a6:bb:fb:df:c5:35:58:a6:
                    76:8c:db:30:ef:73:3b:c6:5a:5b:ca:66:e6:1e:4f:
                    17:1c:34:a2:f8:53:fe:9a:e6:b2:c0:9a:70:9f:19:
                    10:f4:b6:bc:14:0d:df:b4:6d:3e:01:6b:ee:8d:71:
                    26:20:53:15:8e:ea:7e:5d:04:15:c7:2e:38:00:0e:
                    76:3a:86:53:02:43:7b:03:97:c2:0e:58:86:9a:13:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:62:26:5A:6D:29:10:2C:8A:8C:5E:9D:3B:C4:98:E1:65:44:3D
            X509v3 Authority Key Identifier:
                keyid:48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313030303a3a2f34302d3430203d3e20323734383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b630:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:31:20:c4:98:be:14:8b:75:68:f0:04:b7:a5:2e:79:76:78:
         0d:ab:08:ac:8f:12:53:43:15:f0:7d:b6:ff:72:13:5a:f8:f9:
         f1:30:c6:73:d7:e8:fb:cc:4d:ae:42:f7:62:af:4a:f6:c0:ac:
         29:f2:03:60:45:43:82:7c:5a:b2:b0:5c:c3:8d:25:f9:c0:9b:
         7f:e2:14:dc:eb:c5:a1:f3:20:53:fe:63:59:90:99:3e:b4:bf:
         74:3b:1a:ed:3d:50:4f:56:dc:7a:41:7f:9b:1c:53:b9:43:65:
         85:7a:c1:ce:f0:bb:96:19:ba:ec:c9:6d:af:8f:43:e4:c8:d6:
         f7:9b:6b:38:4c:5c:cf:08:2c:ff:c0:09:5e:46:1b:d1:c3:9e:
         11:12:90:a5:97:83:c5:6b:b1:f3:ef:9b:09:7d:c9:89:9f:ed:
         dc:99:de:cd:6c:4d:1b:8a:71:52:e3:a4:25:f0:1e:a0:f3:b0:
         49:04:80:6d:1d:de:4c:b1:97:55:5d:1d:c6:49:be:c0:75:8b:
         cb:64:1d:7c:6e:e9:c0:d6:e5:b3:22:8f:16:c7:12:88:04:97:
         6a:26:cf:66:0b:a1:bf:2e:88:85:5f:55:b4:00:d2:53:68:38:
         b8:8c:4d:b5:43:5b:7d:4d:3a:2c:02:0a:01:48:f2:36:c3:6e:
         ed:01:99:b1
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUXK7STzxLaKyDQibPasrEKgoZNUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxOUI0NUM0QjBCNTdBQjI2REI5MTc5MEREMzJCN0M4
NEI4QUE4QzAeFw0yNjA2MTMwMzIwMDBaFw0yNzA2MTIwMzI1MDBaMDMxMTAvBgNV
BAMTKDdDOUM2MjI2NUE2RDI5MTAyQzhBOEM1RTlEM0JDNDk4RTE2NTQ0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0a0sBTf9rXBe3PDvitqvTLl5e
vK1UTPN2ql/zPFaCyF4T7QwOubAVk41OaEDbAreIBNlUSl4tY9m/Nj8OIB3RzvRW
eyiKi70mQ7ZwgH8qwX1aeZf0qE5jlSnJKgflbFxy2rhFsL7PxTcWB0yxmrzjEls5
FPWJY0PV+YmhpzvHSTKAgyuGfpgwW/CASXRXd0eVwBAgcWXlQIznXVsToy29jZiR
6jwKUNCJNyKmu/vfxTVYpnaM2zDvczvGWlvKZuYeTxccNKL4U/6a5rLAmnCfGRD0
trwUDd+0bT4Ba+6NcSYgUxWO6n5dBBXHLjgADnY6hlMCQ3sDl8IOWIaaE1bvAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUfJxiJlptKRAsioxenTvEmOFlRD0wHwYDVR0j
BBgwFoAUSBm0XEsLV6sm25F5DdMrfIS4qowwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdGNkUyRkY3RTk4NjdEQURFMjZGQTQ0MUM5M0I5QzZF
NkVGRTRDRUU2MjYyOEMzQjhDRTFDQ0NENzdGNkNGLzAvNDgxOUI0NUM0QjBCNTdB
QjI2REI5MTc5MEREMzJCN0M4NEI4QUE4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODE5QjQ1QzRCMEI1N0FCMjZE
QjkxNzkwREQzMkI3Qzg0QjhBQThDLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3RjZFMkZGN0U5ODY3REFERTI2RkE0NDFDOTNCOUM2RTZFRkU0Q0VF
NjI2MjhDM0I4Q0UxQ0NDRDc3RjZDRi8wLzMyMzgzMDMzM2E2MjM2MzMzMDNhMzEz
MDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzQzODM5Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA7YwEDANBgkqhkiG9w0BAQsFAAOCAQEAOTEgxJi+FIt1aPAEt6UueXZ4
DasIrI8SU0MV8H22/3ITWvj58TDGc9fo+8xNrkL3Yq9K9sCsKfIDYEVDgnxasrBc
w40l+cCbf+IU3OvFofMgU/5jWZCZPrS/dDsa7T1QT1bcekF/mxxTuUNlhXrBzvC7
lhm67Mltr49D5MjW95trOExczwgs/8AJXkYb0cOeERKQpZeDxWux8++bCX3JiZ/t
3JnezWxNG4pxUuOkJfAeoPOwSQSAbR3eTLGXVV0dxkm+wHWLy2QdfG7pwNblsyKP
FscSiASXaibPZguhvy6IhV9VtADSU2g4uIxNtUNbfU06LAIKAUjyNsNu7QGZsQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:28 2026 by rpki-client