Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a363030303a3a2f33362d3336203d3e20323734303031.roa
File:                     323830333a663864303a363030303a3a2f33362d3336203d3e20323734303031.roa (raw, json)
Hash identifier:          f8ChGNfJWxlcYeVE+Kp7psxYmTHQqszMCAw6V1rB8Jc=
Subject key identifier:   06:9B:91:17:67:F2:BE:0E:5F:B0:DF:5E:1D:D1:37:CF:85:7A:56:2D
Certificate issuer:       /CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
Certificate serial:       77BADB9F65D4B85A3EAF4E7533CF219630EB7BD7
Authority key identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a363030303a3a2f33362d3336203d3e20323734303031.roa
Signing time:             Wed 25 Feb 2026 12:55:00 +0000
ROA not before:           Wed 25 Feb 2026 12:50:00 +0000
ROA not after:            Wed 24 Feb 2027 12:55:00 +0000
asID:                     274001
IP address blocks:        2803:f8d0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ba:db:9f:65:d4:b8:5a:3e:af:4e:75:33:cf:21:96:30:eb:7b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
        Validity
            Not Before: Feb 25 12:50:00 2026 GMT
            Not After : Feb 24 12:55:00 2027 GMT
        Subject: CN=069B911767F2BE0E5FB0DF5E1DD137CF857A562D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:d8:c1:65:8f:0a:b7:60:15:15:9e:2f:0c:
                    92:13:08:8f:80:70:29:a6:2f:ee:18:68:f1:1d:c3:
                    5b:ed:91:0b:81:98:c8:d9:14:0d:e7:ff:66:4c:a1:
                    c9:2b:7b:53:d5:3b:ab:f9:d9:5a:a1:e2:58:b0:b4:
                    c9:2e:3a:07:2e:ba:5f:a9:bd:c2:d2:ef:64:f7:51:
                    4d:df:67:cd:1f:70:b0:7b:6e:cb:9b:24:5f:ac:e9:
                    4b:ea:56:22:d6:8a:e1:ef:03:68:02:c6:ce:92:dc:
                    06:6f:d6:2f:28:fb:5e:55:2f:ce:04:48:d3:2e:be:
                    16:2e:e2:19:2c:90:6d:60:62:8d:ba:9c:ad:cc:e8:
                    3d:e2:32:86:aa:d0:56:b0:24:f4:d8:1f:83:26:b6:
                    76:d2:f6:88:cb:ac:c0:61:a9:b9:86:84:8e:c7:9b:
                    9f:30:44:e8:b1:3b:4f:17:1e:b6:49:20:a2:a6:ee:
                    0f:ab:25:f3:db:0f:ba:ed:78:c4:e3:48:73:3e:ea:
                    42:43:16:17:68:57:21:25:0b:4c:cc:e5:bc:59:fe:
                    f3:1e:c9:a3:b9:a5:a2:e8:7f:75:00:91:a1:c0:9f:
                    d8:dc:40:0b:33:84:d1:0a:e9:a8:6b:82:b0:6f:b7:
                    a1:31:1b:d3:6c:d0:bc:88:49:d6:02:e9:f9:3e:c2:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9B:91:17:67:F2:BE:0E:5F:B0:DF:5E:1D:D1:37:CF:85:7A:56:2D
            X509v3 Authority Key Identifier:
                keyid:44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a363030303a3a2f33362d3336203d3e20323734303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8d0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:9e:5a:86:6d:58:61:b5:56:30:fa:86:ed:53:07:44:e0:
         21:da:9c:37:b8:93:f2:7e:a4:f8:8c:4c:b8:28:de:6d:d1:07:
         9b:ff:78:e8:db:d7:16:e1:68:8d:32:b2:b3:3b:a7:2d:b8:12:
         fb:bb:1a:8a:ac:80:2e:95:17:6b:2f:c2:3e:b3:d0:ec:ab:8c:
         49:fb:bd:1f:cd:c6:18:64:07:44:93:8a:b3:13:80:0a:7e:25:
         0f:4f:ed:e1:31:1b:72:ae:e6:2c:fa:54:52:6d:c9:60:b9:fd:
         6c:2f:66:6a:fb:55:b1:8f:2b:8f:18:87:a9:b3:bc:59:52:ea:
         ea:c8:a8:ef:9c:b9:49:d9:00:1b:54:42:e2:91:c2:15:5e:11:
         9d:48:e5:9d:28:a9:7e:52:f5:a4:38:c7:1c:bc:ab:37:ac:9f:
         d0:25:16:8c:0c:f2:99:6a:53:de:07:28:ae:c4:e2:56:76:4c:
         5b:1d:fc:ce:78:6d:f1:5a:09:80:72:e4:2a:4f:a7:57:0d:61:
         5b:aa:02:08:aa:b9:3f:04:93:71:ac:3b:9a:eb:66:7f:8e:24:
         08:20:4f:90:2c:77:a4:8b:27:b2:c8:af:b8:14:2e:22:34:d7:
         8e:f5:19:d3:86:cc:92:64:00:9a:ea:53:70:da:d4:0e:f1:67:
         70:74:93:25
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUd7rbn2XUuFo+r051M88hljDre9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQwMUZCMzU2QzlCQTMxQUNDMEI3ODEyMDFFMjlDREQy
NDVDOENCNTAeFw0yNjAyMjUxMjUwMDBaFw0yNzAyMjQxMjU1MDBaMDMxMTAvBgNV
BAMTKDA2OUI5MTE3NjdGMkJFMEU1RkIwREY1RTFERDEzN0NGODU3QTU2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QtjBZY8Kt2AVFZ4vDJITCI+A
cCmmL+4YaPEdw1vtkQuBmMjZFA3n/2ZMockre1PVO6v52Vqh4liwtMkuOgcuul+p
vcLS72T3UU3fZ80fcLB7bsubJF+s6UvqViLWiuHvA2gCxs6S3AZv1i8o+15VL84E
SNMuvhYu4hkskG1gYo26nK3M6D3iMoaq0FawJPTYH4MmtnbS9ojLrMBhqbmGhI7H
m58wROixO08XHrZJIKKm7g+rJfPbD7rteMTjSHM+6kJDFhdoVyElC0zM5bxZ/vMe
yaO5paLof3UAkaHAn9jcQAszhNEK6ahrgrBvt6ExG9Ns0LyISdYC6fk+woj3AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUBpuRF2fyvg5fsN9eHdE3z4V6Vi0wHwYDVR0j
BBgwFoAURAH7NWyboxrMC3gSAeKc3SRcjLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDc1QjM1RUM4MDJCRUFGQjk0NUU5QUYxRTE4NjZENkJD
QUEwMjVGQzcxOUQ4NUY2REU5Nzk2QUE4RjE1MzhELzAvNDQwMUZCMzU2QzlCQTMx
QUNDMEI3ODEyMDFFMjlDREQyNDVDOENCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDAxRkIzNTZDOUJBMzFBQ0Mw
Qjc4MTIwMUUyOUNERDI0NUM4Q0I1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA3NUIzNUVDODAyQkVBRkI5NDVFOUFGMUUxODY2RDZCQ0FBMDI1RkM3
MTlEODVGNkRFOTc5NkFBOEYxNTM4RC8wLzMyMzgzMDMzM2E2NjM4NjQzMDNhMzYz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzQzMDMwMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA/jQYDANBgkqhkiG9w0BAQsFAAOCAQEApzWeWoZtWGG1VjD6hu1TB0Tg
IdqcN7iT8n6k+IxMuCjebdEHm/946NvXFuFojTKyszunLbgS+7saiqyALpUXay/C
PrPQ7KuMSfu9H83GGGQHRJOKsxOACn4lD0/t4TEbcq7mLPpUUm3JYLn9bC9mavtV
sY8rjxiHqbO8WVLq6sio75y5SdkAG1RC4pHCFV4RnUjlnSipflL1pDjHHLyrN6yf
0CUWjAzymWpT3gcorsTiVnZMWx38znht8VoJgHLkKk+nVw1hW6oCCKq5PwSTcaw7
mutmf44kCCBPkCx3pIsnssivuBQuIjTXjvUZ04bMkmQAmupTcNrUDvFncHSTJQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:13:17 2026 by rpki-client