Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
File:                     323830333a353834303a3a2f33322d3438203d3e20323632313435.roa (raw, json)
Hash identifier:          GqwNZTPrzCv0/bR0mgnH/1jwYW0xOBlQjsr5tgWJQWk=
Subject key identifier:   8C:CA:3A:B6:3C:F4:C6:E2:F8:E3:F6:AF:B9:C9:C9:DC:51:FE:47:FA
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       59AAC3A4323C610E9C24D97B46218910163BCCBE
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
Signing time:             Thu 11 Jun 2026 22:47:25 +0000
ROA not before:           Thu 11 Jun 2026 22:42:25 +0000
ROA not after:            Thu 10 Jun 2027 22:47:25 +0000
asID:                     262145
IP address blocks:        2803:5840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:aa:c3:a4:32:3c:61:0e:9c:24:d9:7b:46:21:89:10:16:3b:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Jun 11 22:42:25 2026 GMT
            Not After : Jun 10 22:47:25 2027 GMT
        Subject: CN=8CCA3AB63CF4C6E2F8E3F6AFB9C9C9DC51FE47FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:2a:49:b8:59:fa:90:ec:2c:cf:f7:11:ee:
                    d6:7e:da:06:cf:62:20:86:3a:d6:d8:46:c4:1f:92:
                    1a:f7:54:c3:b6:d2:82:21:71:4b:67:78:ac:ea:fc:
                    bb:bd:a2:56:66:ba:bf:4b:9a:c6:20:0b:42:80:95:
                    89:95:c5:2c:88:7f:07:9c:ce:0d:93:f1:04:9d:98:
                    04:52:24:2b:5c:ca:22:7a:ff:89:dd:da:eb:f8:72:
                    26:08:ac:3c:3c:01:97:79:36:40:e3:eb:d8:4c:e7:
                    ff:e2:03:33:ef:82:30:3d:c0:94:c5:7f:d3:2f:dc:
                    a2:f7:cf:f7:dc:e3:f9:5b:c4:f8:29:f2:38:6f:11:
                    05:27:04:a2:89:6c:3a:c1:62:28:a4:cb:32:3b:56:
                    df:6c:d0:4e:9e:f9:b7:bd:ea:dd:69:f5:0e:ff:82:
                    75:e7:ab:7c:62:e8:d7:bb:bd:fa:21:95:d5:92:2a:
                    c3:cd:f5:07:7b:c2:73:ff:de:d5:a7:b4:3d:50:26:
                    47:06:f4:39:d7:95:05:36:65:96:3b:8c:80:21:2b:
                    f6:c8:e5:49:b2:49:c1:84:6b:22:ee:0d:9f:96:50:
                    e2:3c:3f:0e:d8:0d:1e:81:be:74:c1:10:6d:f6:25:
                    c9:c7:c2:8b:be:c6:99:27:d2:cc:14:a7:f2:92:d7:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:3A:B6:3C:F4:C6:E2:F8:E3:F6:AF:B9:C9:C9:DC:51:FE:47:FA
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:a3:c5:1c:9a:5c:68:d9:18:41:98:13:ad:8b:bf:70:d7:
         a8:9a:2b:7e:9b:81:38:d7:52:74:2b:e6:d9:51:33:6f:54:66:
         51:e4:78:b4:eb:0e:08:7d:91:b5:d5:a1:16:e3:e6:7d:cc:99:
         a8:f5:9b:32:f5:e9:2f:87:21:fe:4c:28:e9:b9:8c:9a:0c:68:
         cb:30:91:1e:4c:85:50:44:a4:1f:36:6a:72:4e:3b:ad:55:80:
         e4:28:7c:fd:a2:22:8b:83:15:42:e5:1f:41:36:ee:f9:0f:97:
         40:89:d4:68:54:7e:af:18:aa:76:44:c5:82:e4:34:0a:a0:16:
         f3:52:b8:36:12:83:e5:e8:7a:36:6b:b5:71:49:be:3f:8d:08:
         2c:a0:62:0c:3e:78:86:00:b1:a4:51:bd:79:f8:20:86:e6:28:
         77:e7:40:b3:c8:56:3e:7b:da:ab:48:5b:9a:91:90:bf:a5:4b:
         37:c5:99:7c:5f:b1:eb:3d:cc:00:34:4f:e7:dd:a0:10:1f:be:
         69:b6:d9:3b:a8:ff:4a:42:87:c2:80:f3:6b:ef:ff:92:0e:ac:
         9a:8a:3b:81:77:0b:8d:6e:b8:3e:fd:b4:3b:3d:09:61:86:f8:
         16:c2:ed:fa:07:a1:05:90:c5:a7:75:ac:da:1e:5d:82:e7:e9:
         10:86:e7:f7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWarDpDI8YQ6cJNl7RiGJEBY7zL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNjA2MTEyMjQyMjVaFw0yNzA2MTAyMjQ3MjVaMDMxMTAvBgNV
BAMTKDhDQ0EzQUI2M0NGNEM2RTJGOEUzRjZBRkI5QzlDOURDNTFGRTQ3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkypJuFn6kOwsz/cR7tZ+2gbP
YiCGOtbYRsQfkhr3VMO20oIhcUtneKzq/Lu9olZmur9LmsYgC0KAlYmVxSyIfwec
zg2T8QSdmARSJCtcyiJ6/4nd2uv4ciYIrDw8AZd5NkDj69hM5//iAzPvgjA9wJTF
f9Mv3KL3z/fc4/lbxPgp8jhvEQUnBKKJbDrBYiikyzI7Vt9s0E6e+be96t1p9Q7/
gnXnq3xi6Ne7vfohldWSKsPN9Qd7wnP/3tWntD1QJkcG9DnXlQU2ZZY7jIAhK/bI
5UmyScGEayLuDZ+WUOI8Pw7YDR6BvnTBEG32JcnHwou+xpkn0swUp/KS1+BXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjMo6tjz0xuL44/avucnJ3FH+R/owHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMyMzgzMDMzM2EzNTM4MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMxMzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWEAw
DQYJKoZIhvcNAQELBQADggEBACgOo8Ucmlxo2RhBmBOti79w16iaK36bgTjXUnQr
5tlRM29UZlHkeLTrDgh9kbXVoRbj5n3Mmaj1mzL16S+HIf5MKOm5jJoMaMswkR5M
hVBEpB82anJOO61VgOQofP2iIouDFULlH0E27vkPl0CJ1GhUfq8YqnZExYLkNAqg
FvNSuDYSg+XoejZrtXFJvj+NCCygYgw+eIYAsaRRvXn4IIbmKHfnQLPIVj572qtI
W5qRkL+lSzfFmXxfses9zAA0T+fdoBAfvmm22Tuo/0pCh8KA82vv/5IOrJqKO4F3
C41uuD79tDs9CWGG+BbC7foHoQWQxad1rNoeXYLn6RCG5/c=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:52:34 2026 by rpki-client