Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3332203d3e20323734313133.roa
File:                     323830333a316564303a3a2f33322d3332203d3e20323734313133.roa (raw, json)
Hash identifier:          E0WjDtoxa9Al9LrSO0lzy+aUb5nzLYowRBtWlw+D3/Q=
Subject key identifier:   42:82:82:F1:51:1F:B5:A6:94:4B:D0:22:20:AA:3E:75:2C:5B:F3:8C
Certificate issuer:       /CN=55F03D1AB13935CBDE33069764787747A3721A5B
Certificate serial:       37E3199EFBF82692867C0C8A80ABDF0A02A0889B
Authority key identifier: 55:F0:3D:1A:B1:39:35:CB:DE:33:06:97:64:78:77:47:A3:72:1A:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3332203d3e20323734313133.roa
Signing time:             Mon 13 Apr 2026 19:45:00 +0000
ROA not before:           Mon 13 Apr 2026 19:40:00 +0000
ROA not after:            Mon 12 Apr 2027 19:45:00 +0000
asID:                     274113
IP address blocks:        2803:1ed0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e3:19:9e:fb:f8:26:92:86:7c:0c:8a:80:ab:df:0a:02:a0:88:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F03D1AB13935CBDE33069764787747A3721A5B
        Validity
            Not Before: Apr 13 19:40:00 2026 GMT
            Not After : Apr 12 19:45:00 2027 GMT
        Subject: CN=428282F1511FB5A6944BD02220AA3E752C5BF38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:aa:fc:27:32:2f:17:e4:25:73:fa:b4:49:
                    33:7f:65:11:44:c2:62:80:f2:9a:03:a3:0c:94:59:
                    b0:0c:5e:c6:cd:e3:de:3c:a5:a6:4b:30:8c:c0:c6:
                    a2:f0:92:6f:56:62:4e:bb:0c:46:ff:a9:4a:cd:28:
                    da:02:f6:aa:5b:2a:69:44:7c:6d:5e:b0:db:f5:78:
                    82:01:de:3a:94:f7:f2:dd:56:26:08:8c:cb:dd:d4:
                    c7:c2:c3:61:a4:2b:4e:78:7f:82:3b:86:cb:85:cd:
                    4f:67:a4:cf:af:dc:e1:96:22:ca:81:cd:75:d1:2e:
                    1d:da:1d:b4:a3:51:be:a5:2e:b3:7a:68:38:28:aa:
                    2a:d2:e0:08:87:5f:14:98:c8:76:e3:b6:3c:90:0f:
                    92:ed:ae:dc:80:54:d3:68:3a:99:d1:3e:2f:df:cc:
                    85:55:5b:bd:79:3c:0b:93:79:57:04:aa:48:74:d5:
                    4f:0b:9c:3b:19:42:85:6f:2e:ef:d9:ce:95:ea:1c:
                    62:3f:84:0f:fc:0c:a4:f0:04:32:02:cc:bf:55:b2:
                    ca:3f:92:73:a4:be:af:46:98:59:84:0e:f1:cb:c2:
                    ac:a0:22:ba:63:29:5f:a6:ae:85:bf:b1:e2:db:c3:
                    20:5b:2c:f2:11:ba:ed:b0:56:14:f6:0a:11:fc:ae:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:82:F1:51:1F:B5:A6:94:4B:D0:22:20:AA:3E:75:2C:5B:F3:8C
            X509v3 Authority Key Identifier:
                keyid:55:F0:3D:1A:B1:39:35:CB:DE:33:06:97:64:78:77:47:A3:72:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3332203d3e20323734313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:80:42:d8:63:d4:94:fb:f0:fc:04:26:21:8c:54:01:ff:
         9f:b4:49:5d:ea:72:d3:70:11:28:bf:95:47:eb:de:91:60:cf:
         cf:25:f3:be:17:78:0d:b8:b2:fe:ed:4d:f2:a8:77:e9:1b:ec:
         38:79:e3:7a:53:23:c9:ff:8f:a3:07:3e:b4:fe:f2:58:3a:27:
         00:30:89:24:47:54:0b:cb:30:ef:13:58:99:bd:ae:cd:91:66:
         81:eb:52:8e:1f:fe:03:bb:38:af:10:db:41:14:a6:b7:38:58:
         f8:52:9c:f7:6d:c3:1f:85:aa:6a:93:19:75:b4:40:b2:8e:c5:
         26:bb:e9:ba:7d:9d:b5:a9:5b:02:78:5e:44:8d:9b:e3:87:96:
         48:1e:3d:93:7a:61:40:1d:97:8b:71:ff:bf:45:e7:18:c8:4a:
         5f:0a:23:8d:45:6b:b8:d9:47:ef:86:64:11:59:83:78:51:3c:
         cf:c6:53:41:8a:a1:2d:f8:14:6b:f8:3b:93:f9:83:c8:ac:29:
         0b:27:bb:5b:ec:ae:b7:ef:bd:ba:09:ca:fd:16:88:04:c9:80:
         cc:dc:28:6d:a4:f5:aa:30:9f:4a:c4:c8:70:e8:0b:ae:7a:69:
         1e:99:f7:f4:f4:83:b7:cb:9a:ff:53:af:aa:83:75:9c:8b:e4:
         48:03:a8:c4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUN+MZnvv4JpKGfAyKgKvfCgKgiJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGMDNEMUFCMTM5MzVDQkRFMzMwNjk3NjQ3ODc3NDdB
MzcyMUE1QjAeFw0yNjA0MTMxOTQwMDBaFw0yNzA0MTIxOTQ1MDBaMDMxMTAvBgNV
BAMTKDQyODI4MkYxNTExRkI1QTY5NDRCRDAyMjIwQUEzRTc1MkM1QkYzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEar8JzIvF+Qlc/q0STN/ZRFE
wmKA8poDowyUWbAMXsbN4948paZLMIzAxqLwkm9WYk67DEb/qUrNKNoC9qpbKmlE
fG1esNv1eIIB3jqU9/LdViYIjMvd1MfCw2GkK054f4I7hsuFzU9npM+v3OGWIsqB
zXXRLh3aHbSjUb6lLrN6aDgoqirS4AiHXxSYyHbjtjyQD5LtrtyAVNNoOpnRPi/f
zIVVW715PAuTeVcEqkh01U8LnDsZQoVvLu/ZzpXqHGI/hA/8DKTwBDICzL9Vsso/
knOkvq9GmFmEDvHLwqygIrpjKV+mroW/seLbwyBbLPIRuu2wVhT2ChH8rrA1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUQoKC8VEftaaUS9AiIKo+dSxb84wwHwYDVR0j
BBgwFoAUVfA9GrE5NcveMwaXZHh3R6NyGlswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RTFDMzgxNTI1QzBFQjdBN0E4RjAyQ0U2M0E1MEVFODU5
MDFFOEE1M0I3RDVFQjlEM0UxRDQ0MEQ1M0QwQUEyLzAvNTVGMDNEMUFCMTM5MzVD
QkRFMzMwNjk3NjQ3ODc3NDdBMzcyMUE1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUYwM0QxQUIxMzkzNUNCREUz
MzA2OTc2NDc4Nzc0N0EzNzIxQTVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUUxQzM4MTUyNUMwRUI3QTdBOEYwMkNFNjNBNTBFRTg1OTAxRThBNTNC
N0Q1RUI5RDNFMUQ0NDBENTNEMEFBMi8wLzMyMzgzMDMzM2EzMTY1NjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDMxMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHtAw
DQYJKoZIhvcNAQELBQADggEBAE/5gELYY9SU+/D8BCYhjFQB/5+0SV3qctNwESi/
lUfr3pFgz88l874XeA24sv7tTfKod+kb7Dh543pTI8n/j6MHPrT+8lg6JwAwiSRH
VAvLMO8TWJm9rs2RZoHrUo4f/gO7OK8Q20EUprc4WPhSnPdtwx+FqmqTGXW0QLKO
xSa76bp9nbWpWwJ4XkSNm+OHlkgePZN6YUAdl4tx/79F5xjISl8KI41Fa7jZR++G
ZBFZg3hRPM/GU0GKoS34FGv4O5P5g8isKQsnu1vsrrfvvboJyv0WiATJgMzcKG2k
9aown0rEyHDoC656aR6Z9/T0g7fLmv9Tr6qDdZyL5EgDqMQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:21:55 2026 by rpki-client