Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          Rkm2eGefCDwnmpEGHnZtACqNYhDaAWSNJfArOd0qBYg=
Subject key identifier:   2E:9B:24:E2:5B:BF:43:4E:4F:D3:95:03:40:FC:91:0A:DF:E9:A9:87
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       15DC065003444864FE52BEAABCD1D91B116390DB
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:38 +0000
ROA not before:           Fri 29 May 2026 00:39:38 +0000
ROA not after:            Fri 28 May 2027 00:44:38 +0000
asID:                     273123
IP address blocks:        2803:450:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:06:50:03:44:48:64:fe:52:be:aa:bc:d1:d9:1b:11:63:90:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:38 2026 GMT
            Not After : May 28 00:44:38 2027 GMT
        Subject: CN=2E9B24E25BBF434E4FD3950340FC910ADFE9A987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:78:b2:eb:fb:18:7c:74:c9:53:26:0b:92:
                    7b:9a:b0:2a:40:f2:d2:5a:63:3c:3a:26:d9:b2:f5:
                    4a:6c:06:46:65:c9:58:ca:38:8f:02:f8:bd:30:8e:
                    59:10:02:d8:9e:62:4c:89:de:ac:22:fe:d9:d3:f3:
                    f3:4e:29:ee:98:fb:4f:77:5f:49:99:50:4f:44:0c:
                    1c:b0:57:d8:6a:f4:d2:ba:6f:1f:9e:b7:24:38:b9:
                    23:0f:0b:3a:79:41:8c:cb:3d:cb:c2:e2:17:e2:80:
                    7c:3d:89:47:78:51:0a:60:c6:17:74:b3:12:a5:aa:
                    8b:13:0a:01:26:74:d2:63:f9:ab:3b:8f:df:04:8b:
                    9d:0a:bd:ad:a3:28:e0:67:08:d3:e6:e3:57:96:47:
                    01:0f:10:6d:fe:b1:4d:9c:4e:58:65:29:6c:b7:4d:
                    9e:08:0b:a5:71:27:55:21:86:66:22:6a:3e:da:bc:
                    ba:e2:59:f6:17:65:cf:b5:e3:d3:0b:32:ff:e5:05:
                    66:07:32:9b:47:59:49:55:f2:5c:39:7b:9a:2c:18:
                    97:fb:7f:bc:d2:a8:d8:d1:af:0a:c4:14:00:e6:7a:
                    16:d3:d1:30:27:ae:97:3d:bf:88:62:25:29:d8:76:
                    67:51:e6:8b:77:70:8f:5a:69:0b:48:82:20:6c:35:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:24:E2:5B:BF:43:4E:4F:D3:95:03:40:FC:91:0A:DF:E9:A9:87
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:bb:bf:9d:34:5a:22:6a:7a:51:1b:03:3b:33:f1:be:f8:
         71:8a:dc:d7:35:81:eb:d2:8c:5f:9f:15:b7:37:fd:1f:0b:77:
         f9:d6:ee:9f:0d:9e:06:3f:41:d7:e0:83:bc:96:d6:3f:fc:6a:
         05:5a:dd:59:48:78:93:59:47:6d:8a:3a:f7:43:75:9f:a9:c0:
         85:71:f8:eb:b7:14:df:ca:84:4e:28:fc:0a:19:82:55:4d:69:
         cf:01:b6:9a:f5:c0:7f:6e:81:83:14:d8:3a:19:0a:0c:89:c6:
         60:a8:8f:00:c0:91:0b:ca:66:e8:59:9b:2a:2c:44:2c:e5:69:
         4a:d0:36:6e:b3:0e:eb:c7:bc:00:7f:a5:8a:ba:e9:01:7a:ba:
         03:8c:35:6e:be:ab:5b:53:24:2f:5b:fd:a0:89:28:c7:73:14:
         1b:f1:73:18:43:d0:6d:24:7e:9d:3a:30:f7:ec:77:fe:12:7a:
         e1:a6:21:83:33:e7:25:40:f0:73:b0:e7:35:f7:bb:c5:0f:0a:
         65:85:b3:e4:48:04:17:77:64:d7:84:95:24:e4:4f:7a:5c:14:
         50:17:d1:6a:09:10:09:ce:ed:2d:ba:d3:93:68:8f:1f:0f:75:
         75:63:db:cc:ec:7f:bc:d4:90:e1:82:87:46:d0:44:68:c6:b0:
         d7:93:5c:b2
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUFdwGUANESGT+Ur6qvNHZGxFjkNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNjA1MjkwMDM5MzhaFw0yNzA1MjgwMDQ0MzhaMDMxMTAvBgNV
BAMTKDJFOUIyNEUyNUJCRjQzNEU0RkQzOTUwMzQwRkM5MTBBREZFOUE5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKh3iy6/sYfHTJUyYLknuasCpA
8tJaYzw6Jtmy9UpsBkZlyVjKOI8C+L0wjlkQAtieYkyJ3qwi/tnT8/NOKe6Y+093
X0mZUE9EDBywV9hq9NK6bx+etyQ4uSMPCzp5QYzLPcvC4hfigHw9iUd4UQpgxhd0
sxKlqosTCgEmdNJj+as7j98Ei50Kva2jKOBnCNPm41eWRwEPEG3+sU2cTlhlKWy3
TZ4IC6VxJ1UhhmYiaj7avLriWfYXZc+149MLMv/lBWYHMptHWUlV8lw5e5osGJf7
f7zSqNjRrwrEFADmehbT0TAnrpc9v4hiJSnYdmdR5ot3cI9aaQtIgiBsNQudAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQULpsk4lu/Q05P05UDQPyRCt/pqYcwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBQwDQYJKoZIhvcNAQELBQADggEBAGwZu7+dNFoianpRGwM7M/G++HGK
3Nc1gevSjF+fFbc3/R8Ld/nW7p8NngY/Qdfgg7yW1j/8agVa3VlIeJNZR22KOvdD
dZ+pwIVx+Ou3FN/KhE4o/AoZglVNac8Btpr1wH9ugYMU2DoZCgyJxmCojwDAkQvK
ZuhZmyosRCzlaUrQNm6zDuvHvAB/pYq66QF6ugOMNW6+q1tTJC9b/aCJKMdzFBvx
cxhD0G0kfp06MPfsd/4SeuGmIYMz5yVA8HOw5zX3u8UPCmWFs+RIBBd3ZNeElSTk
T3pcFFAX0WoJEAnO7S2605Nojx8PdXVj28zsf7zUkOGCh0bQRGjGsNeTXLI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:27 2026 by rpki-client