Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/323830333a386230303a3a2f33322d3438203d3e20323734383931.roa
File:                     323830333a386230303a3a2f33322d3438203d3e20323734383931.roa (raw, json)
Hash identifier:          smuSET8sQ19ptUaVnECgwr8JDxtU3AcGJX+BbC69y0E=
Subject key identifier:   40:17:CB:43:77:AF:81:8D:DB:1B:F1:88:80:D1:7D:7D:24:09:9F:29
Certificate issuer:       /CN=B80E10741F3FBFB387E3DBB6D9EBC098E757799D
Certificate serial:       749F26DF4240AC2C827F2CA52E2FE4F54BA38A67
Authority key identifier: B8:0E:10:74:1F:3F:BF:B3:87:E3:DB:B6:D9:EB:C0:98:E7:57:79:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/323830333a386230303a3a2f33322d3438203d3e20323734383931.roa
Signing time:             Sun 31 May 2026 04:05:00 +0000
ROA not before:           Sun 31 May 2026 04:00:00 +0000
ROA not after:            Sun 30 May 2027 04:05:00 +0000
asID:                     274891
IP address blocks:        2803:8b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:26:df:42:40:ac:2c:82:7f:2c:a5:2e:2f:e4:f5:4b:a3:8a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80E10741F3FBFB387E3DBB6D9EBC098E757799D
        Validity
            Not Before: May 31 04:00:00 2026 GMT
            Not After : May 30 04:05:00 2027 GMT
        Subject: CN=4017CB4377AF818DDB1BF18880D17D7D24099F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:72:47:93:c5:6a:48:7d:01:b2:03:bf:ea:
                    8f:cc:ba:6f:48:80:e1:34:9d:16:77:c5:9d:a7:dc:
                    8c:9e:c4:27:3a:8d:d7:1a:37:5d:1f:00:1a:dd:2b:
                    66:ea:21:b6:4a:1c:a6:c5:ad:22:ff:71:0f:ef:d9:
                    2f:74:38:8d:9a:dc:e6:38:08:e1:99:ff:8b:4f:7d:
                    c4:91:73:1e:1e:17:37:a8:f1:6f:89:1d:90:03:cf:
                    cd:78:66:f7:6e:94:75:7d:15:98:13:5f:30:49:eb:
                    c9:e3:96:50:1d:cb:2c:e5:61:2a:fd:1e:d1:5d:3f:
                    7b:af:61:d3:92:d6:39:a6:ab:08:6a:ff:f5:ee:a5:
                    3b:93:7d:52:9a:fa:e3:29:a6:f5:0f:ce:2f:9a:ab:
                    51:de:87:ab:e9:b1:43:00:ce:61:bf:ef:b8:01:f1:
                    00:fe:c4:64:9e:21:72:d0:f8:c4:01:ee:d6:4b:f5:
                    1e:c2:39:79:40:36:7b:72:a2:97:6a:82:b8:cf:cb:
                    d4:0b:07:f4:aa:a3:1c:1a:86:07:67:c6:57:e6:f8:
                    45:6c:a1:6f:e3:f6:1b:d9:ee:da:35:9a:e2:ce:cc:
                    6a:5d:85:14:ae:13:35:94:b2:4d:64:90:12:37:98:
                    94:0a:8a:cc:80:f7:99:6e:87:e6:a4:20:ed:24:70:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:CB:43:77:AF:81:8D:DB:1B:F1:88:80:D1:7D:7D:24:09:9F:29
            X509v3 Authority Key Identifier:
                keyid:B8:0E:10:74:1F:3F:BF:B3:87:E3:DB:B6:D9:EB:C0:98:E7:57:79:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/323830333a386230303a3a2f33322d3438203d3e20323734383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:09:d2:2e:98:ce:6f:11:f0:c0:71:b0:1f:7b:72:a2:55:
         35:55:c0:4b:4d:50:56:fc:c5:2c:b3:87:27:75:3f:d6:b6:87:
         89:a8:20:c9:8a:13:e2:79:7d:62:42:5e:ac:ed:ae:f5:03:37:
         ee:3b:27:af:41:0d:97:3e:5f:53:c4:25:05:48:68:e3:2e:04:
         75:91:4d:e4:5b:24:cd:44:31:21:39:8c:fd:3a:10:01:af:ff:
         db:7b:07:e5:75:68:08:6b:6c:11:2a:ad:c6:95:9b:47:10:16:
         e2:31:95:4a:31:22:dc:9f:79:da:e7:6d:29:37:a1:89:75:c0:
         11:13:1b:8a:86:55:6a:5f:b2:6c:69:22:f3:77:69:62:3a:7a:
         86:53:09:26:de:a6:1b:91:eb:5f:59:84:e7:9d:3a:b3:80:99:
         d9:03:38:e2:07:74:ed:dc:12:a8:1e:9a:3d:b3:74:e2:d4:09:
         58:fb:e3:3d:9e:ce:3a:b6:87:b8:89:8c:12:a3:97:07:8c:a9:
         55:75:38:93:60:36:68:a9:56:de:b9:5a:cb:f9:f5:c7:1b:8e:
         54:d3:09:02:76:cc:50:7f:fd:d0:c0:3e:5e:63:76:89:00:e7:
         90:9e:87:2d:86:e9:9e:9d:07:ec:54:d1:7f:51:44:51:93:ff:
         3b:ca:af:ad
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdJ8m30JArCyCfyylLi/k9UujimcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwRTEwNzQxRjNGQkZCMzg3RTNEQkI2RDlFQkMwOThF
NzU3Nzk5RDAeFw0yNjA1MzEwNDAwMDBaFw0yNzA1MzAwNDA1MDBaMDMxMTAvBgNV
BAMTKDQwMTdDQjQzNzdBRjgxOEREQjFCRjE4ODgwRDE3RDdEMjQwOTlGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErnJHk8VqSH0BsgO/6o/Mum9I
gOE0nRZ3xZ2n3IyexCc6jdcaN10fABrdK2bqIbZKHKbFrSL/cQ/v2S90OI2a3OY4
COGZ/4tPfcSRcx4eFzeo8W+JHZADz814ZvdulHV9FZgTXzBJ68njllAdyyzlYSr9
HtFdP3uvYdOS1jmmqwhq//XupTuTfVKa+uMppvUPzi+aq1Heh6vpsUMAzmG/77gB
8QD+xGSeIXLQ+MQB7tZL9R7COXlANntyopdqgrjPy9QLB/Sqoxwahgdnxlfm+EVs
oW/j9hvZ7to1muLOzGpdhRSuEzWUsk1kkBI3mJQKisyA95luh+akIO0kcHkfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUQBfLQ3evgY3bG/GIgNF9fSQJnykwHwYDVR0j
BBgwFoAUuA4QdB8/v7OH49u22evAmOdXeZ0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzlGNzJDM0FEOUIwMDQ4OTk5MjNFQzhEQjk1Q0IxREI1
ODQ3MkFCNkQ5NkZBOUMxMjVBREM2M0RCQUVBMEY3LzAvQjgwRTEwNzQxRjNGQkZC
Mzg3RTNEQkI2RDlFQkMwOThFNzU3Nzk5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CODBFMTA3NDFGM0ZCRkIzODdF
M0RCQjZEOUVCQzA5OEU3NTc3OTlELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDM5RjcyQzNBRDlCMDA0ODk5OTIzRUM4REI5NUNCMURCNTg0NzJBQjZE
OTZGQTlDMTI1QURDNjNEQkFFQTBGNy8wLzMyMzgzMDMzM2EzODYyMzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDiwAw
DQYJKoZIhvcNAQELBQADggEBADEPCdIumM5vEfDAcbAfe3KiVTVVwEtNUFb8xSyz
hyd1P9a2h4moIMmKE+J5fWJCXqztrvUDN+47J69BDZc+X1PEJQVIaOMuBHWRTeRb
JM1EMSE5jP06EAGv/9t7B+V1aAhrbBEqrcaVm0cQFuIxlUoxItyfedrnbSk3oYl1
wBETG4qGVWpfsmxpIvN3aWI6eoZTCSbephuR619ZhOedOrOAmdkDOOIHdO3cEqge
mj2zdOLUCVj74z2ezjq2h7iJjBKjlweMqVV1OJNgNmipVt65Wsv59ccbjlTTCQJ2
zFB//dDAPl5jdokA55Cehy2G6Z6dB+xU0X9RRFGT/zvKr60=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:38:04 2026 by rpki-client