Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/323830333a646533303a3a2f33322d3332203d3e20323734393131.roa
File:                     323830333a646533303a3a2f33322d3332203d3e20323734393131.roa (raw, json)
Hash identifier:          QuUvfs/mFDfprgojJzTdy4ewgQYu4pzni+XN/M/Eo4M=
Subject key identifier:   24:CE:F9:31:6A:BB:F7:B6:D4:EA:F2:10:4D:F5:3E:9C:46:F1:D3:5A
Certificate issuer:       /CN=F497C62456E4A963F3D485490F400BA0BA659A26
Certificate serial:       733EB6C8283BB2D0C286931A96FBE390A348E031
Authority key identifier: F4:97:C6:24:56:E4:A9:63:F3:D4:85:49:0F:40:0B:A0:BA:65:9A:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F497C62456E4A963F3D485490F400BA0BA659A26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/323830333a646533303a3a2f33322d3332203d3e20323734393131.roa
Signing time:             Sat 16 May 2026 14:30:00 +0000
ROA not before:           Sat 16 May 2026 14:25:00 +0000
ROA not after:            Sat 15 May 2027 14:30:00 +0000
asID:                     274911
IP address blocks:        2803:de30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/F497C62456E4A963F3D485490F400BA0BA659A26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/F497C62456E4A963F3D485490F400BA0BA659A26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F497C62456E4A963F3D485490F400BA0BA659A26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:b6:c8:28:3b:b2:d0:c2:86:93:1a:96:fb:e3:90:a3:48:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F497C62456E4A963F3D485490F400BA0BA659A26
        Validity
            Not Before: May 16 14:25:00 2026 GMT
            Not After : May 15 14:30:00 2027 GMT
        Subject: CN=24CEF9316ABBF7B6D4EAF2104DF53E9C46F1D35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:4b:0d:c3:60:f1:94:ef:dc:37:74:62:91:
                    99:6a:3f:78:84:4f:53:08:07:72:db:68:9d:2d:09:
                    3b:e0:5a:58:3e:e0:9d:a6:bc:cc:f1:22:cd:db:75:
                    e3:37:72:58:3d:d0:5d:eb:2f:d1:7a:0e:b6:64:17:
                    a2:20:75:48:16:19:2a:87:4f:e4:4e:66:e1:aa:6e:
                    dd:6c:08:42:43:b2:59:3f:a6:0d:86:fb:a7:2d:9e:
                    40:71:18:38:b3:34:c5:ec:95:82:48:aa:4f:58:ad:
                    b3:e0:67:2d:82:ce:3b:58:65:77:9f:9e:0d:19:82:
                    1d:f0:86:c8:fa:6c:d0:72:9d:b0:6d:e1:b2:36:6a:
                    36:05:cd:98:5c:20:30:25:44:20:ba:c7:11:6c:58:
                    78:a1:73:3e:05:6c:86:22:d1:ae:c3:03:89:a5:54:
                    9b:52:22:09:3c:36:cf:1c:3d:23:9c:36:5d:74:7c:
                    7c:28:b5:94:7a:42:69:46:4d:f9:44:48:8e:be:07:
                    46:f7:13:f5:dd:4b:e8:8e:da:37:19:0b:52:32:cf:
                    96:c2:b6:aa:bd:fd:00:85:f9:ad:20:20:e5:37:15:
                    e0:7b:33:32:bd:32:f6:ec:47:79:bc:9d:4a:47:d5:
                    6a:45:30:a1:c5:73:f7:f3:0b:83:ec:07:42:0d:35:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:F9:31:6A:BB:F7:B6:D4:EA:F2:10:4D:F5:3E:9C:46:F1:D3:5A
            X509v3 Authority Key Identifier:
                keyid:F4:97:C6:24:56:E4:A9:63:F3:D4:85:49:0F:40:0B:A0:BA:65:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/F497C62456E4A963F3D485490F400BA0BA659A26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F497C62456E4A963F3D485490F400BA0BA659A26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42A13FB0839861EC94B509C38F8C93BDD3E70834F469FE32936802B0C84CE5DE/0/323830333a646533303a3a2f33322d3332203d3e20323734393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de30::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:7d:32:63:02:d3:96:03:ff:4c:54:a0:90:a7:24:67:c6:
         f0:55:3b:af:9d:a3:d0:85:5c:0d:c8:bc:9a:5b:03:df:7f:ee:
         4a:66:cc:27:8a:ca:e8:d9:73:e2:02:f0:cd:7f:ac:ee:bb:99:
         05:cc:bc:2d:4f:1f:89:00:7b:f7:8f:9e:22:0e:ed:8c:e8:2a:
         d4:c2:b0:c3:b8:79:02:ba:14:31:99:2f:78:83:dd:92:b5:41:
         4a:56:8d:c5:56:cb:8f:d4:ec:23:3b:41:02:d5:19:5e:57:7d:
         bc:e6:ca:23:e3:14:8a:c6:56:42:62:21:17:82:d5:0d:5a:95:
         90:e0:49:32:d7:46:24:b5:4d:50:25:51:86:5c:d9:35:5c:16:
         fa:8b:3e:52:ff:63:03:50:b8:17:56:07:49:58:85:c9:d7:f3:
         d0:29:c8:cb:cb:1d:78:f4:e3:17:61:b4:61:a3:13:61:bd:7c:
         b1:94:45:64:48:48:cb:24:18:4e:d3:0f:6f:1c:f2:23:55:3f:
         b9:27:cc:82:77:3e:08:7b:b0:14:91:da:7e:31:fe:6f:a1:26:
         fb:19:ff:9c:d0:93:15:c8:b4:94:70:97:fe:80:24:2c:ab:2a:
         5c:53:14:01:5e:0f:64:62:4b:cf:ef:bf:2b:20:21:84:6e:07:
         06:36:61:c7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcz62yCg7stDChpMalvvjkKNI4DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5N0M2MjQ1NkU0QTk2M0YzRDQ4NTQ5MEY0MDBCQTBC
QTY1OUEyNjAeFw0yNjA1MTYxNDI1MDBaFw0yNzA1MTUxNDMwMDBaMDMxMTAvBgNV
BAMTKDI0Q0VGOTMxNkFCQkY3QjZENEVBRjIxMDRERjUzRTlDNDZGMUQzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuC0sNw2DxlO/cN3RikZlqP3iE
T1MIB3LbaJ0tCTvgWlg+4J2mvMzxIs3bdeM3clg90F3rL9F6DrZkF6IgdUgWGSqH
T+ROZuGqbt1sCEJDslk/pg2G+6ctnkBxGDizNMXslYJIqk9YrbPgZy2CzjtYZXef
ng0Zgh3whsj6bNBynbBt4bI2ajYFzZhcIDAlRCC6xxFsWHihcz4FbIYi0a7DA4ml
VJtSIgk8Ns8cPSOcNl10fHwotZR6QmlGTflESI6+B0b3E/XdS+iO2jcZC1Iyz5bC
tqq9/QCF+a0gIOU3FeB7MzK9MvbsR3m8nUpH1WpFMKHFc/fzC4PsB0INNTV/AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJM75MWq797bU6vIQTfU+nEbx01owHwYDVR0j
BBgwFoAU9JfGJFbkqWPz1IVJD0ALoLplmiYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MkExM0ZCMDgzOTg2MUVDOTRCNTA5QzM4RjhDOTNCREQz
RTcwODM0RjQ2OUZFMzI5MzY4MDJCMEM4NENFNURFLzAvRjQ5N0M2MjQ1NkU0QTk2
M0YzRDQ4NTQ5MEY0MDBCQTBCQTY1OUEyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNDk3QzYyNDU2RTRBOTYzRjNE
NDg1NDkwRjQwMEJBMEJBNjU5QTI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDJBMTNGQjA4Mzk4NjFFQzk0QjUwOUMzOEY4QzkzQkREM0U3MDgzNEY0
NjlGRTMyOTM2ODAyQjBDODRDRTVERS8wLzMyMzgzMDMzM2E2NDY1MzMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDM5MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3jAw
DQYJKoZIhvcNAQELBQADggEBAGyyfTJjAtOWA/9MVKCQpyRnxvBVO6+do9CFXA3I
vJpbA99/7kpmzCeKyujZc+IC8M1/rO67mQXMvC1PH4kAe/ePniIO7YzoKtTCsMO4
eQK6FDGZL3iD3ZK1QUpWjcVWy4/U7CM7QQLVGV5XfbzmyiPjFIrGVkJiIReC1Q1a
lZDgSTLXRiS1TVAlUYZc2TVcFvqLPlL/YwNQuBdWB0lYhcnX89ApyMvLHXj04xdh
tGGjE2G9fLGURWRISMskGE7TD28c8iNVP7knzIJ3Pgh7sBSR2n4x/m+hJvsZ/5zQ
kxXItJRwl/6AJCyrKlxTFAFeD2RiS8/vvysgIYRuBwY2Ycc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:00 2026 by rpki-client