Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393964303a3a2f34342d3438203d3e20323732393739.roa
File:                     323830333a623065303a393964303a3a2f34342d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          +58cHDaPkpsNNPYs73D4wfwEOOi14cQ8hjXoh0KLulo=
Subject key identifier:   F7:E4:51:CD:94:F9:2E:BA:B1:60:21:AC:13:48:FF:79:23:83:10:55
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       4EEADFECDBDE1BC27F79913FED42FF2C31AF72D7
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393964303a3a2f34342d3438203d3e20323732393739.roa
Signing time:             Mon 27 Jul 2026 15:47:14 +0000
ROA not before:           Mon 27 Jul 2026 15:42:14 +0000
ROA not after:            Mon 26 Jul 2027 15:47:14 +0000
asID:                     272979
IP address blocks:        2803:b0e0:99d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 08:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ea:df:ec:db:de:1b:c2:7f:79:91:3f:ed:42:ff:2c:31:af:72:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Jul 27 15:42:14 2026 GMT
            Not After : Jul 26 15:47:14 2027 GMT
        Subject: CN=F7E451CD94F92EBAB16021AC1348FF7923831055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:8c:d7:d4:54:a8:da:3b:1d:33:58:f1:98:
                    1b:10:25:c1:fc:75:00:ea:d0:17:47:8f:31:f0:37:
                    1e:3c:8c:c6:02:75:4e:cf:98:14:1d:a0:f6:2d:25:
                    f9:1b:ba:7f:60:a0:2c:d3:65:36:d7:96:cb:07:00:
                    31:f2:61:0c:e6:f8:00:55:28:86:ec:f6:dd:87:aa:
                    4c:a0:7d:58:b8:e5:56:da:63:9d:92:e9:d1:57:42:
                    d6:8a:ab:10:b9:5f:9f:0b:e6:82:0c:9d:0f:25:8c:
                    b1:c6:dc:ea:b6:24:c5:67:f7:2b:45:44:c4:e8:dc:
                    bb:12:61:e0:cf:d2:e8:73:e5:35:46:51:d8:0f:c5:
                    39:5b:30:81:ae:ed:f7:fe:73:f1:3b:aa:7c:e1:da:
                    a2:ab:17:75:51:a7:f3:c4:5d:c8:ac:a7:29:ef:ed:
                    b8:22:08:3c:50:3d:bf:fb:03:9c:29:fc:e8:3c:e4:
                    c7:49:65:9b:8d:5b:d6:d4:da:6d:92:b8:1e:b7:9e:
                    69:7b:3f:28:fe:0e:14:8e:0d:56:75:ce:5a:b3:ae:
                    bd:31:ca:20:91:d7:1f:ec:70:d0:57:a4:fe:17:37:
                    37:6b:77:49:59:14:37:64:fc:40:f0:3c:6f:28:96:
                    a2:e0:9c:48:93:13:03:20:04:a5:ed:89:2e:8b:54:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:51:CD:94:F9:2E:BA:B1:60:21:AC:13:48:FF:79:23:83:10:55
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393964303a3a2f34342d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:75:ff:f7:19:e2:7d:25:d3:7d:9b:43:fd:ec:d3:c5:ca:c5:
         95:c4:f9:8a:d8:49:c4:0c:98:d4:69:63:9c:c1:b1:e0:31:e3:
         e8:6d:de:df:fb:e2:5c:9d:13:97:ef:d9:ed:8e:89:55:12:d3:
         7b:89:7e:09:f8:3b:54:9d:93:30:cb:29:fa:21:03:88:e0:e3:
         be:55:b2:10:eb:12:5c:c8:45:a9:bf:f7:45:23:e9:73:09:fc:
         57:b1:80:02:25:d2:7a:99:b5:32:d5:97:56:a8:18:7b:13:39:
         7f:d2:99:72:af:07:88:43:93:0e:6d:8c:b1:d0:d6:fe:44:ad:
         9e:5a:1c:80:59:c1:d2:de:b2:eb:8e:a5:47:4b:fd:c4:4e:e9:
         b9:95:09:93:f4:76:18:07:2a:71:55:a8:58:e4:49:08:62:02:
         c4:24:45:22:d8:0c:1b:31:f9:9f:d8:b5:78:10:5e:29:bb:91:
         1e:b9:61:a2:28:6d:5a:8d:3b:2d:2f:71:b9:d2:08:61:e6:d0:
         03:fc:95:be:66:86:0a:82:44:00:0c:60:d9:43:cc:99:18:b1:
         3d:18:db:d6:ab:5d:3d:74:76:12:1b:5d:84:4e:7c:7e:3e:d5:
         c8:2b:f4:07:f5:b1:57:78:d6:e3:a0:ad:94:d0:92:ca:4d:1e:
         3e:92:26:6f
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUTurf7NveG8J/eZE/7UL/LDGvctcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNjA3MjcxNTQyMTRaFw0yNzA3MjYxNTQ3MTRaMDMxMTAvBgNV
BAMTKEY3RTQ1MUNEOTRGOTJFQkFCMTYwMjFBQzEzNDhGRjc5MjM4MzEwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQozX1FSo2jsdM1jxmBsQJcH8
dQDq0BdHjzHwNx48jMYCdU7PmBQdoPYtJfkbun9goCzTZTbXlssHADHyYQzm+ABV
KIbs9t2HqkygfVi45VbaY52S6dFXQtaKqxC5X58L5oIMnQ8ljLHG3Oq2JMVn9ytF
RMTo3LsSYeDP0uhz5TVGUdgPxTlbMIGu7ff+c/E7qnzh2qKrF3VRp/PEXcispynv
7bgiCDxQPb/7A5wp/Og85MdJZZuNW9bU2m2SuB63nml7Pyj+DhSODVZ1zlqzrr0x
yiCR1x/scNBXpP4XNzdrd0lZFDdk/EDwPG8olqLgnEiTEwMgBKXtiS6LVOwdAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU9+RRzZT5LrqxYCGsE0j/eSODEFUwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz
OTY0MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQoA7DgmdAwDQYJKoZIhvcNAQELBQADggEBAGB1//cZ4n0l032bQ/3s08XK
xZXE+YrYScQMmNRpY5zBseAx4+ht3t/74lydE5fv2e2OiVUS03uJfgn4O1SdkzDL
KfohA4jg475VshDrElzIRam/90Uj6XMJ/FexgAIl0nqZtTLVl1aoGHsTOX/SmXKv
B4hDkw5tjLHQ1v5ErZ5aHIBZwdLesuuOpUdL/cRO6bmVCZP0dhgHKnFVqFjkSQhi
AsQkRSLYDBsx+Z/YtXgQXim7kR65YaIobVqNOy0vcbnSCGHm0AP8lb5mhgqCRAAM
YNlDzJkYsT0Y29arXT10dhIbXYROfH4+1cgr9Af1sVd41uOgrZTQkspNHj6SJm8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:18:30 2026 by rpki-client