Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa
File:                     323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa (raw, json)
Hash identifier:          pqj75DfrWVQ1ZCa2G0KumJiS5l5MpdUGJTt3ER6k5q0=
Subject key identifier:   D9:9B:54:D5:E5:CF:DB:72:65:F2:51:73:91:F3:A9:E3:86:AC:71:58
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       7FE25AFF86C2B91B4E8C467E83C673F2A5C791DD
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa
Signing time:             Fri 17 Apr 2026 15:39:15 +0000
ROA not before:           Fri 17 Apr 2026 15:34:15 +0000
ROA not after:            Fri 16 Apr 2027 15:39:15 +0000
asID:                     266683
IP address blocks:        2803:c520:980::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e2:5a:ff:86:c2:b9:1b:4e:8c:46:7e:83:c6:73:f2:a5:c7:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Apr 17 15:34:15 2026 GMT
            Not After : Apr 16 15:39:15 2027 GMT
        Subject: CN=D99B54D5E5CFDB7265F2517391F3A9E386AC7158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:fe:62:7b:f8:37:50:3d:7d:82:77:d3:1a:
                    90:b5:4b:ce:c2:72:d2:ee:0e:f9:96:69:10:7e:89:
                    2a:42:14:b4:ea:b2:a4:e5:07:b8:6a:11:d8:4c:76:
                    16:a7:be:9b:e8:79:16:d6:2a:0c:2c:bd:a8:a0:78:
                    0d:b1:52:03:2f:7f:5a:4e:03:1e:7e:49:cb:9f:4b:
                    0e:c1:9d:91:48:b6:f0:2f:35:c3:ef:83:7b:02:4d:
                    42:63:a5:e9:fa:f9:2e:47:33:c9:d4:bb:04:97:d9:
                    e3:42:c9:f1:09:25:fc:0c:16:d8:84:ea:4b:f9:30:
                    78:f2:a2:25:ff:18:5b:30:1d:60:69:e8:c2:5b:60:
                    bf:02:b2:0f:0d:b5:33:94:a3:40:d6:78:55:e4:78:
                    e7:d1:21:fb:02:14:41:cc:19:7f:b0:71:4c:10:aa:
                    12:02:6c:2c:58:10:d1:66:ae:87:94:fc:5f:81:14:
                    5b:7c:b2:d5:b9:a2:8d:28:b3:98:51:ee:aa:d4:79:
                    b7:43:b1:73:b0:93:b0:56:e0:66:23:14:ea:ea:1e:
                    d8:b9:8e:9b:78:6b:ed:4f:51:a0:58:25:aa:10:d8:
                    da:e3:4a:bb:c2:b4:5f:e8:44:f1:14:cf:48:63:63:
                    52:eb:71:89:24:fc:a8:07:16:c6:d1:a0:98:d7:95:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:54:D5:E5:CF:DB:72:65:F2:51:73:91:F3:A9:E3:86:AC:71:58
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520:980::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:49:e0:b0:f0:35:4f:25:ec:09:15:c1:d4:23:07:1d:b4:6f:
         30:70:4a:b5:38:04:0a:01:8b:20:28:df:65:5e:4d:62:f1:bf:
         1a:60:77:52:ce:58:9e:ab:3e:66:18:80:36:7a:0d:2e:58:66:
         7a:d9:e2:13:ae:5b:a4:3a:63:8b:92:44:5d:80:c3:2f:45:f9:
         98:90:82:97:01:95:8f:12:3e:3a:f7:fc:76:c6:87:7c:6d:63:
         42:8f:b3:c4:12:18:ab:86:e8:a4:f3:47:96:13:1b:de:6d:5b:
         dd:51:11:b1:79:c7:9d:54:39:ce:a4:d6:84:ca:f6:a9:65:5b:
         c4:86:1e:35:7a:de:05:34:5d:c0:6b:bf:0a:86:70:28:43:87:
         55:45:93:c8:0a:0a:01:77:d9:9f:f4:ff:7b:35:84:80:c5:d1:
         9a:37:84:bc:b1:9e:df:79:ff:d1:b9:cf:b8:31:0a:08:e9:9b:
         a7:af:a2:6f:dc:83:09:b8:39:99:9a:8c:4f:90:7c:09:8a:06:
         3f:67:17:29:1e:8c:f0:82:45:10:7a:82:8d:14:ee:c4:c3:3f:
         21:c1:ac:8a:8a:e7:93:a5:b4:a6:39:50:a6:8e:14:9f:5a:e4:
         b9:41:88:7d:a4:02:14:ea:24:97:ac:06:15:0e:38:d8:d2:42:
         b8:21:b2:5a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUf+Ja/4bCuRtOjEZ+g8Zz8qXHkd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2OTVBNTdBMjQ2RTdGRUVDNUU5OTY5MjU2NkU0M0Q3
RjAzOTY2MzAeFw0yNjA0MTcxNTM0MTVaFw0yNzA0MTYxNTM5MTVaMDMxMTAvBgNV
BAMTKEQ5OUI1NEQ1RTVDRkRCNzI2NUYyNTE3MzkxRjNBOUUzODZBQzcxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVP5ie/g3UD19gnfTGpC1S87C
ctLuDvmWaRB+iSpCFLTqsqTlB7hqEdhMdhanvpvoeRbWKgwsvaigeA2xUgMvf1pO
Ax5+ScufSw7BnZFItvAvNcPvg3sCTUJjpen6+S5HM8nUuwSX2eNCyfEJJfwMFtiE
6kv5MHjyoiX/GFswHWBp6MJbYL8Csg8NtTOUo0DWeFXkeOfRIfsCFEHMGX+wcUwQ
qhICbCxYENFmroeU/F+BFFt8stW5oo0os5hR7qrUebdDsXOwk7BW4GYjFOrqHti5
jpt4a+1PUaBYJaoQ2NrjSrvCtF/oRPEUz0hjY1LrcYkk/KgHFsbRoJjXlff1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2ZtU1eXP23Jl8lFzkfOp44ascVgwHwYDVR0j
BBgwFoAUZ2laV6JG5/7sXplpJWbkPX8DlmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTdEMjI3NzBFQTQ3ODU0NDY1NTk1OUU2NUIwREFENkEz
OTgzNTdGQTY3MzA5QTc2NEFBRDcxQTREMzk0MUEyLzAvNjc2OTVBNTdBMjQ2RTdG
RUVDNUU5OTY5MjU2NkU0M0Q3RjAzOTY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzY5NUE1N0EyNDZFN0ZFRUM1
RTk5NjkyNTY2RTQzRDdGMDM5NjYzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDE3RDIyNzcwRUE0Nzg1NDQ2NTU5NTlFNjVCMERBRDZBMzk4MzU3RkE2
NzMwOUE3NjRBQUQ3MUE0RDM5NDFBMi8wLzMyMzgzMDMzM2E2MzM1MzIzMDNhMzkz
ODMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjM2MzYzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEKAPFIAmAMA0GCSqGSIb3DQEBCwUAA4IBAQCWSeCw8DVPJewJFcHUIwcdtG8w
cEq1OAQKAYsgKN9lXk1i8b8aYHdSzlieqz5mGIA2eg0uWGZ62eITrlukOmOLkkRd
gMMvRfmYkIKXAZWPEj469/x2xod8bWNCj7PEEhirhuik80eWExvebVvdURGxeced
VDnOpNaEyvapZVvEhh41et4FNF3Aa78KhnAoQ4dVRZPICgoBd9mf9P97NYSAxdGa
N4S8sZ7fef/Ruc+4MQoI6Zunr6Jv3IMJuDmZmoxPkHwJigY/ZxcpHozwgkUQeoKN
FO7Ewz8hwayKiueTpbSmOVCmjhSfWuS5QYh9pAIU6iSXrAYVDjjY0kK4IbJa
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:38:10 2026 by rpki-client