Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313130303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313130303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          woemTbZxnGukMEBTycaAogLwAfegvrpLQk/7RoVoK1w=
Subject key identifier:   D9:E9:5F:76:96:9C:8D:DA:36:6A:D7:05:FF:74:04:FE:91:48:7E:F4
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       5EC9FC145B5FCDAA239B68F9069D3861B386B065
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313130303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:41 +0000
ROA not before:           Fri 29 May 2026 00:39:41 +0000
ROA not after:            Fri 28 May 2027 00:44:41 +0000
asID:                     273123
IP address blocks:        2803:450:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c9:fc:14:5b:5f:cd:aa:23:9b:68:f9:06:9d:38:61:b3:86:b0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:41 2026 GMT
            Not After : May 28 00:44:41 2027 GMT
        Subject: CN=D9E95F76969C8DDA366AD705FF7404FE91487EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:a2:48:27:3a:d2:dc:8e:db:d3:b7:92:c1:
                    ca:34:8c:e6:5b:7e:8e:99:a4:fe:de:37:13:9c:63:
                    7f:a3:37:b1:e1:70:66:72:c4:d6:34:a5:ca:71:ae:
                    be:ea:e0:41:ff:85:50:47:08:7f:dc:ca:68:dd:97:
                    49:7a:d0:da:c0:2a:4e:bb:08:27:ea:cf:d0:19:06:
                    cd:ce:e2:77:c8:45:ca:13:63:23:7f:67:4a:ee:e8:
                    f0:16:9c:7c:09:aa:2b:75:b4:80:d2:77:46:a7:ce:
                    e7:a9:48:50:62:6c:1b:01:08:f2:98:db:4f:a5:5e:
                    e1:2d:35:6d:3c:12:51:4d:4f:cd:03:08:40:c6:c0:
                    d6:55:1e:03:41:eb:2f:d0:78:4e:11:0f:0d:35:bf:
                    b4:82:eb:1a:ab:e0:a4:41:13:77:ea:7a:b4:a7:2d:
                    fc:6c:1f:c7:ee:ed:b4:7f:02:e9:2e:31:c2:1e:c4:
                    cc:ef:27:a1:d1:18:67:3e:d1:98:c5:a5:eb:d8:05:
                    33:fb:4e:ef:2e:65:5a:21:9e:8f:8a:3a:aa:97:48:
                    03:8b:6d:e5:f6:29:c8:c9:11:c5:2c:ba:6a:40:7e:
                    3f:2d:bf:2a:1b:c2:a7:29:f5:a6:c2:3a:c6:b4:5d:
                    f2:02:46:d3:f0:9b:11:e5:a7:82:02:cd:31:a2:36:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E9:5F:76:96:9C:8D:DA:36:6A:D7:05:FF:74:04:FE:91:48:7E:F4
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313130303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:a2:79:40:f9:49:88:aa:35:9c:d1:f7:1a:3e:38:f9:91:
         62:f1:5b:5c:54:9c:38:db:8c:ea:da:20:b2:43:3a:71:28:6f:
         13:39:b9:76:71:b5:94:74:f4:df:96:b7:62:a7:b3:9b:fc:8a:
         41:85:f6:29:53:03:0c:95:cc:be:d1:f8:aa:d2:7d:f6:af:0f:
         4a:7e:58:5c:89:52:d9:25:43:26:62:8d:18:c4:97:42:ea:00:
         75:18:e6:d6:3e:d4:35:05:ba:b8:04:af:64:3f:2b:b7:5a:2f:
         05:c4:32:e2:da:3b:10:bb:07:96:e0:4a:35:49:29:68:39:85:
         16:a3:ac:ef:d0:99:aa:ec:74:ab:ca:cc:61:19:7f:90:8f:ad:
         05:0d:89:8e:27:b5:df:24:88:e6:e0:c3:d8:38:d6:c7:12:05:
         ab:d6:c2:dc:ba:d0:ba:7e:69:3c:12:b3:37:12:ff:32:b3:e8:
         8f:78:b6:c2:03:cb:3a:ed:dd:64:8c:d7:21:6f:f4:b6:c7:ba:
         b0:1e:71:5f:65:81:6d:ee:96:53:b2:49:f1:00:ba:4e:08:8d:
         c0:3e:e6:ec:bf:25:c7:28:bd:14:1f:41:a9:d7:b2:82:2d:df:
         8d:61:7f:74:b6:d4:8e:ac:07:bb:32:a3:67:72:db:78:5a:54:
         43:72:d8:55
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUXsn8FFtfzaojm2j5Bp04YbOGsGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNjA1MjkwMDM5NDFaFw0yNzA1MjgwMDQ0NDFaMDMxMTAvBgNV
BAMTKEQ5RTk1Rjc2OTY5QzhEREEzNjZBRDcwNUZGNzQwNEZFOTE0ODdFRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKaJIJzrS3I7b07eSwco0jOZb
fo6ZpP7eNxOcY3+jN7HhcGZyxNY0pcpxrr7q4EH/hVBHCH/cymjdl0l60NrAKk67
CCfqz9AZBs3O4nfIRcoTYyN/Z0ru6PAWnHwJqit1tIDSd0anzuepSFBibBsBCPKY
20+lXuEtNW08ElFNT80DCEDGwNZVHgNB6y/QeE4RDw01v7SC6xqr4KRBE3fqerSn
LfxsH8fu7bR/AukuMcIexMzvJ6HRGGc+0ZjFpevYBTP7Tu8uZVohno+KOqqXSAOL
beX2KcjJEcUsumpAfj8tvyobwqcp9abCOsa0XfICRtPwmxHlp4ICzTGiNjCzAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU2elfdpacjdo2atcF/3QE/pFIfvQwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBEwDQYJKoZIhvcNAQELBQADggEBAJB9onlA+UmIqjWc0fcaPjj5kWLx
W1xUnDjbjOraILJDOnEobxM5uXZxtZR09N+Wt2Kns5v8ikGF9ilTAwyVzL7R+KrS
ffavD0p+WFyJUtklQyZijRjEl0LqAHUY5tY+1DUFurgEr2Q/K7daLwXEMuLaOxC7
B5bgSjVJKWg5hRajrO/QmarsdKvKzGEZf5CPrQUNiY4ntd8kiObgw9g41scSBavW
wty60Lp+aTwSszcS/zKz6I94tsIDyzrt3WSM1yFv9LbHurAecV9lgW3ullOySfEA
uk4IjcA+5uy/JccovRQfQanXsoIt341hf3S21I6sB7syo2dy23haVENy2FU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:38 2026 by rpki-client