Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa
File:                     323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa (raw, json)
Hash identifier:          elfo6YjkAfaBWh1b+0mJ31blcOXY02S3OR536pO2944=
Subject key identifier:   04:BC:ED:69:D1:35:96:03:8F:5B:3A:2A:4A:E6:0E:D7:6A:9E:A3:86
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       74332AF4FFE3B72136A6FC0193024A40F2C2EB5B
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa
Signing time:             Fri 11 Sep 2026 03:34:57 +0000
ROA not before:           Fri 11 Sep 2026 03:29:57 +0000
ROA not after:            Fri 10 Sep 2027 03:34:57 +0000
asID:                     52268
IP address blocks:        2800:a80:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:2a:f4:ff:e3:b7:21:36:a6:fc:01:93:02:4a:40:f2:c2:eb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Sep 11 03:29:57 2026 GMT
            Not After : Sep 10 03:34:57 2027 GMT
        Subject: CN=04BCED69D13596038F5B3A2A4AE60ED76A9EA386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:bd:a5:42:c0:20:f5:b8:c5:31:ca:07:61:
                    1f:c7:f4:a0:9e:17:98:c4:f7:7b:b6:b0:41:8e:6b:
                    51:c2:08:d3:ab:65:03:33:86:0a:6c:35:ba:1f:1f:
                    df:50:67:36:ff:db:4f:68:40:bd:64:38:db:38:e9:
                    f0:33:21:b7:b8:01:bb:c0:39:88:f6:b9:32:fb:3a:
                    0c:fb:51:a9:96:df:f7:f8:c7:ce:c0:e6:80:fd:cb:
                    a6:88:ba:ec:b2:eb:6c:05:34:9e:c2:d0:db:38:7d:
                    29:c2:4c:c7:64:c1:c1:b8:1d:c3:35:c6:a8:c4:a1:
                    41:a9:b5:d2:07:4e:65:05:6e:a6:c4:e9:63:c2:15:
                    5e:07:7a:94:e8:8a:d3:f7:34:28:c5:aa:6c:94:84:
                    8d:93:49:94:6b:c9:9d:b8:82:c8:f1:53:ea:28:c1:
                    6a:44:b1:6e:c0:a9:b3:69:dd:a4:b9:73:a5:f1:58:
                    45:4b:5e:17:15:11:03:1c:ce:39:e6:41:c0:d8:45:
                    85:eb:f1:25:d4:2f:f2:f1:8f:2a:8d:93:c8:57:b3:
                    1c:a1:c9:a1:90:0c:9d:44:91:95:3b:ff:0d:7d:5c:
                    ed:8b:5d:89:1c:26:95:25:e8:94:1c:6d:42:6b:6f:
                    55:f4:c6:51:6c:8c:a1:e4:e1:c9:1d:e0:da:e4:9d:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BC:ED:69:D1:35:96:03:8F:5B:3A:2A:4A:E6:0E:D7:6A:9E:A3:86
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383030303a3a2f34342d3434203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:33:f2:21:c2:30:4b:2c:0e:0f:af:98:37:4a:13:78:fd:
         93:73:3e:8a:3f:41:84:ec:7f:c5:d2:a8:9e:f9:21:98:c4:7d:
         47:65:86:27:9c:0b:29:27:9b:5f:62:e0:8d:d8:56:37:00:db:
         01:03:90:fd:e4:66:94:93:75:db:7a:84:2c:b0:7a:76:87:5f:
         82:99:48:bc:0d:b3:19:b7:ec:2f:9d:ee:e2:2a:f9:f1:98:18:
         44:c9:da:bb:99:bd:4a:d0:40:b5:fc:22:e3:a8:77:3e:a4:86:
         60:19:da:be:6a:a4:13:22:a9:7f:1e:17:d6:5c:0e:2d:d6:b5:
         1c:24:df:8e:3c:fc:f6:0c:92:af:8c:ab:cb:2b:8f:3f:ba:89:
         44:95:78:7b:c3:15:b4:70:b9:41:99:19:f8:b9:b1:c8:61:40:
         23:c1:d2:ff:da:4b:9d:24:d2:5d:1e:1a:c1:5b:b5:b6:ce:0b:
         44:b3:fa:f0:32:17:d0:4a:c7:1c:da:ab:a4:2c:8b:97:16:4f:
         6b:23:f8:6e:c6:2d:87:19:de:5e:f3:b8:68:24:00:23:ee:68:
         4b:b4:19:93:bd:1d:9a:20:87:93:31:e8:12:ac:74:67:1c:17:
         ee:42:25:9a:c2:bc:aa:92:9a:c2:02:7c:fd:65:69:48:0b:26:
         e8:4c:cc:2d
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUdDMq9P/jtyE2pvwBkwJKQPLC61swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdFN0ZDMkM3REJC
Mjk1RkMwMjAeFw0yNjA5MTEwMzI5NTdaFw0yNzA5MTAwMzM0NTdaMDMxMTAvBgNV
BAMTKDA0QkNFRDY5RDEzNTk2MDM4RjVCM0EyQTRBRTYwRUQ3NkE5RUEzODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG72lQsAg9bjFMcoHYR/H9KCe
F5jE93u2sEGOa1HCCNOrZQMzhgpsNbofH99QZzb/209oQL1kONs46fAzIbe4AbvA
OYj2uTL7Ogz7UamW3/f4x87A5oD9y6aIuuyy62wFNJ7C0Ns4fSnCTMdkwcG4HcM1
xqjEoUGptdIHTmUFbqbE6WPCFV4HepToitP3NCjFqmyUhI2TSZRryZ24gsjxU+oo
wWpEsW7AqbNp3aS5c6XxWEVLXhcVEQMczjnmQcDYRYXr8SXUL/LxjyqNk8hXsxyh
yaGQDJ1EkZU7/w19XO2LXYkcJpUl6JQcbUJrb1X0xlFsjKHk4ckd4NrknT8/AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUBLztadE1lgOPWzoqSuYO12qeo4YwHwYDVR0j
BBgwFoAUp5l5VJKYwQeyXGx+f8LH27KV/AIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBD
RUY4RDFBRjIyQUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEw
N0IyNUM2QzdFN0ZDMkM3REJCMjk1RkMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzk5Nzk1NDkyOThDMTA3QjI1
QzZDN0U3RkMyQzdEQkIyOTVGQzAyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURGRUNBMkQzOTEwQ0VGOEQxQUYy
MkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzMyMzgzMDMwM2E2MTM4MzAzYTM4MzAz
MDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzUzMjMyMzYzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgACoCAADANBgkqhkiG9w0BAQsFAAOCAQEAJvUz8iHCMEssDg+vmDdKE3j9k3M+
ij9BhOx/xdKonvkhmMR9R2WGJ5wLKSebX2LgjdhWNwDbAQOQ/eRmlJN123qELLB6
dodfgplIvA2zGbfsL53u4ir58ZgYRMnau5m9StBAtfwi46h3PqSGYBnavmqkEyKp
fx4X1lwOLda1HCTfjjz89gySr4yryyuPP7qJRJV4e8MVtHC5QZkZ+LmxyGFAI8HS
/9pLnSTSXR4awVu1ts4LRLP68DIX0ErHHNqrpCyLlxZPayP4bsYthxneXvO4aCQA
I+5oS7QZk70dmiCHkzHoEqx0ZxwX7kIlmsK8qpKawgJ8/WVpSAsm6EzMLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:52:14 2026 by rpki-client