Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6630303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6630303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          d8u/7yfY3OAXDlCfBjgkrGB8CJzu/OR3Jp/qdDpYGlw=
Subject key identifier:   FD:1A:6C:CC:E9:B9:A2:BF:CB:AA:0B:D5:E2:56:7E:A1:ED:DA:CD:5E
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       0DB50E0429A397F5511F9AB39CB82585016C4A06
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6630303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:42 +0000
ROA not before:           Fri 29 May 2026 00:39:42 +0000
ROA not after:            Fri 28 May 2027 00:44:42 +0000
asID:                     273123
IP address blocks:        2803:450:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:0e:04:29:a3:97:f5:51:1f:9a:b3:9c:b8:25:85:01:6c:4a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:42 2026 GMT
            Not After : May 28 00:44:42 2027 GMT
        Subject: CN=FD1A6CCCE9B9A2BFCBAA0BD5E2567EA1EDDACD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:1b:0a:e1:cf:2c:0b:38:db:ee:f4:43:60:
                    72:55:13:23:3e:11:82:6c:5f:41:5b:8e:0f:39:74:
                    28:27:d0:34:46:7f:4e:dc:a5:41:47:e0:b9:1f:85:
                    5c:f5:2d:3b:6f:85:8e:49:22:bf:57:a6:aa:41:73:
                    55:20:5c:a3:fc:a8:a7:da:44:6f:00:7c:40:4d:f1:
                    61:40:a5:d0:0c:e7:0d:03:62:a0:fd:ad:b4:57:34:
                    ad:8d:6d:61:b9:da:b6:40:9e:98:45:e3:c4:81:5b:
                    7e:ee:c4:00:ab:95:83:b8:02:fa:53:7f:bd:0c:99:
                    5e:ae:97:d6:8c:32:4a:ea:22:e8:52:5d:92:01:7a:
                    4c:b8:b9:15:a4:55:9c:28:70:32:15:6f:0f:c5:86:
                    e6:2e:2d:69:c5:95:1f:4c:c9:40:32:68:66:d3:bb:
                    79:3d:b4:1a:1d:0b:e8:21:b0:4d:f4:13:d6:4f:f4:
                    71:26:3c:c9:b8:a0:ad:56:d0:17:65:55:ba:95:22:
                    2e:cd:65:4f:09:56:36:6c:1c:df:1a:ad:18:ca:50:
                    46:9b:74:ee:a9:6e:2b:fb:4d:f7:1a:f0:a8:a5:81:
                    12:24:c8:67:96:7f:4b:70:a7:32:ba:3d:7e:57:42:
                    22:74:68:91:a0:82:18:63:3d:6a:82:1c:93:ed:91:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1A:6C:CC:E9:B9:A2:BF:CB:AA:0B:D5:E2:56:7E:A1:ED:DA:CD:5E
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6630303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:e5:48:34:2b:4b:ff:e9:ae:c2:33:33:d9:43:b7:e1:b8:
         d1:66:3c:70:20:00:ee:3d:d3:ab:50:77:16:f4:1a:0e:a6:0a:
         e2:bd:90:56:2d:06:0f:8e:23:2d:b9:12:5b:18:be:93:75:9c:
         40:38:91:c8:5e:67:2e:90:6a:d4:60:c2:55:fa:1a:b6:85:2b:
         cf:f0:fa:72:ff:47:85:fa:19:d4:f5:09:70:b7:22:e8:d5:03:
         2f:e2:ee:36:6e:00:fd:b5:f6:69:61:e2:01:49:39:0c:af:82:
         c8:88:76:47:23:db:22:41:8d:08:82:ad:b8:86:a0:ef:82:58:
         1c:1b:9b:cc:a9:86:98:de:7d:d1:7f:af:35:06:cd:e6:1e:73:
         ff:8b:40:a8:e1:21:70:c3:0f:a2:c1:51:09:bb:96:4f:ca:f0:
         b6:12:00:58:95:a8:ba:d7:e8:64:d4:b9:b6:d5:91:28:b8:65:
         2d:0d:c4:4c:b5:47:2d:ef:61:05:a2:df:da:18:db:a9:f6:40:
         e4:98:cb:94:10:9a:ba:cc:36:6e:49:67:81:ea:ce:a0:c4:8a:
         30:6e:22:41:3a:c1:24:4c:8e:ad:b6:55:3c:60:89:79:40:f7:
         a2:7c:39:ca:64:4e:be:6d:ba:65:36:73:d5:28:f4:a1:c3:cd:
         98:4e:5b:5d
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUDbUOBCmjl/VRH5qznLglhQFsSgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNjA1MjkwMDM5NDJaFw0yNzA1MjgwMDQ0NDJaMDMxMTAvBgNV
BAMTKEZEMUE2Q0NDRTlCOUEyQkZDQkFBMEJENUUyNTY3RUExRUREQUNENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOFxsK4c8sCzjb7vRDYHJVEyM+
EYJsX0Fbjg85dCgn0DRGf07cpUFH4LkfhVz1LTtvhY5JIr9XpqpBc1UgXKP8qKfa
RG8AfEBN8WFApdAM5w0DYqD9rbRXNK2NbWG52rZAnphF48SBW37uxACrlYO4AvpT
f70MmV6ul9aMMkrqIuhSXZIBeky4uRWkVZwocDIVbw/FhuYuLWnFlR9MyUAyaGbT
u3k9tBodC+ghsE30E9ZP9HEmPMm4oK1W0BdlVbqVIi7NZU8JVjZsHN8arRjKUEab
dO6pbiv7Tfca8KilgRIkyGeWf0twpzK6PX5XQiJ0aJGgghhjPWqCHJPtkUT3AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQU/RpszOm5or/LqgvV4lZ+oe3azV4wHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTY2MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBFAPMA0GCSqGSIb3DQEBCwUAA4IBAQBd6+VINCtL/+muwjMz2UO34bjRZjxw
IADuPdOrUHcW9BoOpgrivZBWLQYPjiMtuRJbGL6TdZxAOJHIXmcukGrUYMJV+hq2
hSvP8Ppy/0eF+hnU9QlwtyLo1QMv4u42bgD9tfZpYeIBSTkMr4LIiHZHI9siQY0I
gq24hqDvglgcG5vMqYaY3n3Rf681Bs3mHnP/i0Co4SFwww+iwVEJu5ZPyvC2EgBY
lai61+hk1Lm21ZEouGUtDcRMtUct72EFot/aGNup9kDkmMuUEJq6zDZuSWeB6s6g
xIowbiJBOsEkTI6ttlU8YIl5QPeifDnKZE6+bbplNnPVKPShw82YTltd
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:41:34 2026 by rpki-client