Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33342d3334203d3e20323730303735.roa
File:                     323830333a633365303a3a2f33342d3334203d3e20323730303735.roa (raw, json)
Hash identifier:          ypo2Jo+nh8iqXpClrlfSw+qULaOWY2bsxRjbwFZBGFo=
Subject key identifier:   34:F0:45:15:28:FC:FE:8B:D6:F4:0F:4D:C5:B8:49:0B:BC:95:F1:C2
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       71880067D6ADC0CAB2F4C4A86254AAB3175C34AB
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33342d3334203d3e20323730303735.roa
Signing time:             Thu 26 Feb 2026 22:10:00 +0000
ROA not before:           Thu 26 Feb 2026 22:05:00 +0000
ROA not after:            Thu 25 Feb 2027 22:10:00 +0000
asID:                     270075
IP address blocks:        2803:c3e0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:00:67:d6:ad:c0:ca:b2:f4:c4:a8:62:54:aa:b3:17:5c:34:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Feb 26 22:05:00 2026 GMT
            Not After : Feb 25 22:10:00 2027 GMT
        Subject: CN=34F0451528FCFE8BD6F40F4DC5B8490BBC95F1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:63:ab:98:82:cf:20:e6:d9:50:5a:70:8c:
                    92:72:44:d3:45:da:8d:ef:88:f1:19:9f:16:11:81:
                    b2:6e:9a:71:2e:60:15:f3:99:5f:48:05:45:d4:e8:
                    2b:b4:e8:4f:d3:e0:19:09:ea:72:ce:32:92:3c:ad:
                    a7:d9:b6:58:18:85:d5:5d:4d:ec:02:12:f4:38:c0:
                    e4:7f:72:41:67:49:9b:44:29:d2:16:68:83:9d:75:
                    e9:4c:e8:d5:db:23:4b:b2:2f:c4:d5:c2:43:04:3c:
                    08:ce:8c:4b:17:64:f5:89:92:18:15:03:d5:16:9d:
                    8a:7b:27:dd:55:d8:31:64:c9:99:a0:cd:b3:1f:55:
                    da:76:10:ea:4b:a9:ef:1d:6b:4a:79:f2:9c:4b:bb:
                    65:d9:5e:30:79:b6:62:9a:6b:68:09:e6:57:82:f1:
                    f9:c7:3c:6b:7f:60:e2:79:ad:2b:f5:3a:2a:11:1d:
                    ac:07:55:de:4a:ac:b2:3c:f4:70:ae:f0:7d:62:c5:
                    8d:a0:1d:84:36:2d:5f:fc:6c:5c:47:33:d2:89:7a:
                    2b:af:66:bb:22:c6:88:26:e0:53:8b:87:40:ae:4b:
                    d9:b2:fa:b6:39:2f:e5:27:3e:e7:7a:f7:70:19:78:
                    b8:d0:cf:92:c3:aa:2f:ed:7b:9e:c6:a8:bc:bb:db:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:45:15:28:FC:FE:8B:D6:F4:0F:4D:C5:B8:49:0B:BC:95:F1:C2
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33342d3334203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:e5:22:24:8f:5f:31:82:51:c0:76:cd:51:f6:9d:b1:29:
         19:ef:7f:a4:d4:af:b1:8d:53:47:0a:28:6a:74:83:f4:2f:3c:
         40:45:c1:0e:1c:2a:b7:8a:24:5f:d1:32:62:de:7d:8a:a4:a0:
         c7:30:fa:c1:9e:61:97:85:f1:35:0e:42:d9:0d:b8:86:41:15:
         ff:a1:39:51:4c:d1:74:f7:ea:0f:c3:33:bb:a8:1b:37:e9:20:
         c3:7e:ac:0d:73:f1:80:eb:3f:69:9e:76:77:6f:0f:4d:fc:e8:
         b9:d5:93:1e:0c:38:d6:40:52:be:13:ef:78:77:3c:65:0c:58:
         86:f7:6a:bb:06:8b:67:39:75:a4:a3:c3:14:22:de:25:7a:15:
         71:b1:e6:30:ef:09:3d:27:1e:d6:a3:0b:81:d5:4e:fc:ef:96:
         2a:5a:3a:21:33:bd:df:26:dd:b2:30:3e:85:e4:7d:41:f2:29:
         0d:ce:db:6e:6e:a9:e2:7d:84:1b:17:ec:75:92:20:b2:8f:80:
         45:07:a8:e4:bf:51:22:a0:b4:7d:6f:41:81:85:12:4b:a8:81:
         c0:62:92:fa:83:21:3f:f0:ff:63:42:9b:4c:28:c8:49:53:5d:
         a6:50:44:0f:91:8c:c7:ee:dd:42:3e:71:c2:be:0b:ce:11:94:
         c1:68:e4:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcYgAZ9atwMqy9MSoYlSqsxdcNKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA0RDhBQzkwNkZDNEE4N0ExNjIyNDA4MTVDOEMyRDQy
MjQxMzBDQjAeFw0yNjAyMjYyMjA1MDBaFw0yNzAyMjUyMjEwMDBaMDMxMTAvBgNV
BAMTKDM0RjA0NTE1MjhGQ0ZFOEJENkY0MEY0REM1Qjg0OTBCQkM5NUYxQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrmOrmILPIObZUFpwjJJyRNNF
2o3viPEZnxYRgbJumnEuYBXzmV9IBUXU6Cu06E/T4BkJ6nLOMpI8rafZtlgYhdVd
TewCEvQ4wOR/ckFnSZtEKdIWaIOddelM6NXbI0uyL8TVwkMEPAjOjEsXZPWJkhgV
A9UWnYp7J91V2DFkyZmgzbMfVdp2EOpLqe8da0p58pxLu2XZXjB5tmKaa2gJ5leC
8fnHPGt/YOJ5rSv1OioRHawHVd5KrLI89HCu8H1ixY2gHYQ2LV/8bFxHM9KJeiuv
Zrsixogm4FOLh0CuS9my+rY5L+UnPud693AZeLjQz5LDqi/te57GqLy729eVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNPBFFSj8/ovW9A9NxbhJC7yV8cIwHwYDVR0j
BBgwFoAUME2KyQb8SoehYiQIFcjC1CJBMMswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REFEMzMxOEE1MzREOEFCQjgwMTk1RkYzNjY5Q0UxNkEw
NEEwN0Y0QjhGMjU2MzZCRDJBQkYzNkM4MzdBRDdELzAvMzA0RDhBQzkwNkZDNEE4
N0ExNjIyNDA4MTVDOEMyRDQyMjQxMzBDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDREOEFDOTA2RkM0QTg3QTE2
MjI0MDgxNUM4QzJENDIyNDEzMENCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERBRDMzMThBNTM0RDhBQkI4MDE5NUZGMzY2OUNFMTZBMDRBMDdGNEI4
RjI1NjM2QkQyQUJGMzZDODM3QUQ3RC8wLzMyMzgzMDMzM2E2MzMzNjUzMDNhM2Ey
ZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzczMDMwMzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigDw+AA
MA0GCSqGSIb3DQEBCwUAA4IBAQBEHOUiJI9fMYJRwHbNUfadsSkZ73+k1K+xjVNH
CihqdIP0LzxARcEOHCq3iiRf0TJi3n2KpKDHMPrBnmGXhfE1DkLZDbiGQRX/oTlR
TNF09+oPwzO7qBs36SDDfqwNc/GA6z9pnnZ3bw9N/Oi51ZMeDDjWQFK+E+94dzxl
DFiG92q7BotnOXWko8MUIt4lehVxseYw7wk9Jx7WowuB1U7875YqWjohM73fJt2y
MD6F5H1B8ikNzttubqnifYQbF+x1kiCyj4BFB6jkv1EioLR9b0GBhRJLqIHAYpL6
gyE/8P9jQptMKMhJU12mUEQPkYzH7t1CPnHCvgvOEZTBaOQJ
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:43:15 2026 by rpki-client