Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3438203d3e20323637383039.roa
File:                     323830333a313036303a3a2f33322d3438203d3e20323637383039.roa (raw, json)
Hash identifier:          j2uxMIS9GSzwsB3LEbLEPU0K1qf6Sz1tRrkQxyyvKpQ=
Subject key identifier:   57:60:B5:D4:92:60:D0:65:3B:8A:E5:A8:FF:E0:CB:F6:D8:7F:40:AE
Certificate issuer:       /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
Certificate serial:       26F98E8E1153CAE8E98D34A267E4D0CD6E559D5A
Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3438203d3e20323637383039.roa
Signing time:             Fri 03 Apr 2026 15:37:25 +0000
ROA not before:           Fri 03 Apr 2026 15:32:25 +0000
ROA not after:            Fri 02 Apr 2027 15:37:25 +0000
asID:                     267809
IP address blocks:        2803:1060::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 19:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:8e:8e:11:53:ca:e8:e9:8d:34:a2:67:e4:d0:cd:6e:55:9d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
        Validity
            Not Before: Apr  3 15:32:25 2026 GMT
            Not After : Apr  2 15:37:25 2027 GMT
        Subject: CN=5760B5D49260D0653B8AE5A8FFE0CBF6D87F40AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:b2:e6:57:52:62:9f:1f:bc:c7:30:10:86:
                    3b:2e:0a:bb:eb:0e:ac:df:a8:9e:41:dd:e5:9c:f8:
                    ae:73:3d:ea:a3:67:90:f9:86:3f:e6:d4:ef:10:81:
                    3e:2d:0c:67:26:50:a7:49:25:e9:83:bb:4f:ce:63:
                    ca:26:e4:c2:58:14:3a:ab:9a:4e:c5:40:78:1c:b8:
                    94:88:6b:a0:09:2a:4b:1b:28:6a:1a:5c:62:12:88:
                    19:2b:7b:f1:cd:2a:b0:4b:ff:f7:ec:0d:00:2d:7a:
                    a6:86:9a:55:a7:e6:49:1b:83:13:77:3e:ce:62:6b:
                    d2:65:10:4e:48:7d:29:18:f8:c1:5f:3a:b8:98:36:
                    96:77:07:64:6c:88:4b:0b:3f:56:fd:41:91:6c:99:
                    92:0c:1d:78:c8:e4:73:e8:43:ec:e4:41:ae:ec:72:
                    27:fd:76:4b:13:cd:8c:28:2c:c0:8b:df:92:bf:0f:
                    92:d2:ea:20:18:df:22:96:19:75:fe:2c:48:5e:c7:
                    92:36:f0:14:52:9c:16:89:54:89:f9:54:cd:7d:ac:
                    a4:fd:25:19:ce:01:2b:5a:71:0f:c8:cb:b3:6e:f0:
                    86:3a:82:b6:86:87:db:12:e0:f2:ca:10:02:66:7c:
                    36:08:81:be:4f:ec:5b:28:d6:21:5d:a9:39:cc:89:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:B5:D4:92:60:D0:65:3B:8A:E5:A8:FF:E0:CB:F6:D8:7F:40:AE
            X509v3 Authority Key Identifier:
                keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3438203d3e20323637383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1060::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:e2:e9:fc:96:0c:52:1e:ed:70:e3:e8:f2:5d:e5:bc:fd:
         9e:76:8d:25:4e:ba:32:26:d9:8c:6b:07:ec:07:c8:d7:41:b3:
         61:39:3b:81:d3:75:5b:1f:f4:9a:cd:4f:29:ce:df:5e:be:5d:
         99:ab:29:95:06:9c:99:ea:17:8a:26:ff:29:06:35:74:5a:11:
         3e:05:4d:ad:39:c9:51:ff:cc:58:c3:b6:aa:8c:fc:4a:c7:06:
         14:dc:dc:d5:54:b6:e0:0d:a3:7b:89:05:0a:23:f2:0a:9d:c4:
         88:fc:8b:6c:7a:a3:4c:eb:d3:3d:9b:50:a2:8d:63:c8:73:a3:
         2e:1c:e6:14:3f:84:5d:9b:19:7a:f1:9c:a1:02:e7:70:12:2c:
         53:57:fb:b6:32:e5:3f:7b:06:2a:5e:b3:0b:04:08:7c:71:5c:
         12:a8:ab:b2:37:a8:33:5f:8f:51:76:33:1a:f3:ee:37:0e:b1:
         3f:4d:8c:54:28:ee:d8:15:88:cf:85:c0:71:96:c8:2e:a3:3c:
         00:62:b3:9b:0d:22:cf:e5:83:9a:cb:9f:bb:2a:06:97:aa:30:
         05:a4:b7:05:a9:81:12:10:ec:4e:7c:d1:73:99:9d:e7:36:d4:
         27:a5:37:3a:f4:57:19:b7:2f:8a:8d:dc:1c:c1:ad:67:fd:80:
         2c:0d:6e:0e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJvmOjhFTyujpjTSiZ+TQzW5VnVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVBOENFQTFGNzExNUMwRDk5MDgzMjhBMEI5MUJBNENF
REQ0QjZEQTAeFw0yNjA0MDMxNTMyMjVaFw0yNzA0MDIxNTM3MjVaMDMxMTAvBgNV
BAMTKDU3NjBCNUQ0OTI2MEQwNjUzQjhBRTVBOEZGRTBDQkY2RDg3RjQwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijbLmV1Jinx+8xzAQhjsuCrvr
DqzfqJ5B3eWc+K5zPeqjZ5D5hj/m1O8QgT4tDGcmUKdJJemDu0/OY8om5MJYFDqr
mk7FQHgcuJSIa6AJKksbKGoaXGISiBkre/HNKrBL//fsDQAteqaGmlWn5kkbgxN3
Ps5ia9JlEE5IfSkY+MFfOriYNpZ3B2RsiEsLP1b9QZFsmZIMHXjI5HPoQ+zkQa7s
cif9dksTzYwoLMCL35K/D5LS6iAY3yKWGXX+LEhex5I28BRSnBaJVIn5VM19rKT9
JRnOAStacQ/Iy7Nu8IY6graGh9sS4PLKEAJmfDYIgb5P7Fso1iFdqTnMidXJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUV2C11JJg0GU7iuWo/+DL9th/QK4wHwYDVR0j
BBgwFoAUlajOofcRXA2ZCDKKC5G6TO3UttowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Q0RDNURFMkQ3Q0Q2QUM5QUYyN0YyQzc0OUJFMkRCODIz
QkY0RDUzMUYyM0MwQzM1RTE3NDNCMkQ3RjExQzA5LzAvOTVBOENFQTFGNzExNUMw
RDk5MDgzMjhBMEI5MUJBNENFREQ0QjZEQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NUE4Q0VBMUY3MTE1QzBEOTkw
ODMyOEEwQjkxQkE0Q0VERDRCNkRBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkNEQzVERTJEN0NENkFDOUFGMjdGMkM3NDlCRTJEQjgyM0JGNEQ1MzFG
MjNDMEMzNUUxNzQzQjJEN0YxMUMwOS8wLzMyMzgzMDMzM2EzMTMwMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDEGAw
DQYJKoZIhvcNAQELBQADggEBAEMu4un8lgxSHu1w4+jyXeW8/Z52jSVOujIm2Yxr
B+wHyNdBs2E5O4HTdVsf9JrNTynO316+XZmrKZUGnJnqF4om/ykGNXRaET4FTa05
yVH/zFjDtqqM/ErHBhTc3NVUtuANo3uJBQoj8gqdxIj8i2x6o0zr0z2bUKKNY8hz
oy4c5hQ/hF2bGXrxnKEC53ASLFNX+7Yy5T97BipeswsECHxxXBKoq7I3qDNfj1F2
Mxrz7jcOsT9NjFQo7tgViM+FwHGWyC6jPABis5sNIs/lg5rLn7sqBpeqMAWktwWp
gRIQ7E580XOZnec21CelNzr0Vxm3L4qN3BzBrWf9gCwNbg4=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:09:25 2026 by rpki-client