Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a313a3a2f34382d3438203d3e20323634373333.roa
File:                     323830333a643238303a313a3a2f34382d3438203d3e20323634373333.roa (raw, json)
Hash identifier:          Z0T9/JP3GhvWQMOa7uWhVX1SNMZ2JSL77kiYTcF7yJs=
Subject key identifier:   68:80:B4:72:04:2A:1F:B8:9D:A2:99:39:E3:E0:A9:AC:C8:ED:8D:CF
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       3570CAF774AC638F9B2DA32E6984C5E7C9920F26
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a313a3a2f34382d3438203d3e20323634373333.roa
Signing time:             Fri 30 Jan 2026 12:28:21 +0000
ROA not before:           Fri 30 Jan 2026 12:23:21 +0000
ROA not after:            Fri 29 Jan 2027 12:28:21 +0000
asID:                     264733
IP address blocks:        2803:d280:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:70:ca:f7:74:ac:63:8f:9b:2d:a3:2e:69:84:c5:e7:c9:92:0f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Jan 30 12:23:21 2026 GMT
            Not After : Jan 29 12:28:21 2027 GMT
        Subject: CN=6880B472042A1FB89DA29939E3E0A9ACC8ED8DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:b4:7e:ec:27:78:f3:79:b2:e2:31:88:b9:
                    92:14:c5:5a:8b:d5:dc:ee:f9:c4:71:6d:02:1d:59:
                    9e:af:9f:d0:bf:f4:2f:66:44:ea:ce:18:28:96:58:
                    2c:c0:33:d1:64:e3:53:06:2b:c0:49:90:c0:1d:24:
                    11:50:ab:8a:f2:7e:97:18:1c:6f:c1:67:d6:17:a7:
                    34:78:b9:5d:c1:4e:80:94:cc:29:e6:59:70:8f:bb:
                    1c:aa:a4:e3:29:f3:39:e5:96:cb:38:73:98:dc:38:
                    f3:20:1e:98:7a:c1:a1:85:89:14:87:0a:d5:8f:b7:
                    85:ea:7a:68:0c:04:a2:69:20:05:cc:c7:f2:32:bc:
                    1d:e2:92:2d:c9:48:e0:18:94:0e:25:42:e0:a1:35:
                    b5:3a:29:11:79:a6:12:a9:9c:d7:ec:62:4a:62:b4:
                    48:94:b6:93:64:46:f7:87:c3:bf:3f:80:78:46:01:
                    7b:68:da:3f:e1:f6:6d:59:5d:9c:83:d5:07:4e:c2:
                    2a:7f:11:ee:a9:b4:6f:67:0c:fd:14:b4:4a:38:87:
                    39:76:cd:2c:68:b6:a4:20:23:e1:55:07:17:6e:f0:
                    85:fd:f0:60:8b:46:c0:e2:69:15:a6:6f:87:6f:cf:
                    18:aa:1b:7d:77:39:87:c9:2e:38:88:88:ca:82:09:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:80:B4:72:04:2A:1F:B8:9D:A2:99:39:E3:E0:A9:AC:C8:ED:8D:CF
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a313a3a2f34382d3438203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:5c:b1:66:9b:56:18:3b:ca:cf:25:b4:ad:66:9f:ba:d7:
         77:43:fd:74:45:09:da:bb:c0:99:0d:6b:00:e1:b0:90:08:2b:
         7c:1b:c1:fe:9e:2a:50:8a:91:f3:91:67:fc:4e:f4:03:f2:3e:
         8d:5f:7c:b2:c3:cc:02:ba:cd:dd:90:c5:b9:d0:88:8c:e1:3e:
         83:64:a7:a2:ea:ef:46:60:8b:0f:08:9a:6e:d5:6c:3b:e2:4f:
         af:3e:b8:8a:48:e9:ad:fe:fd:0a:bc:ee:68:c8:42:cb:07:37:
         f0:a0:5e:83:f0:50:9b:fb:53:83:91:b1:4c:37:91:e4:5b:e1:
         a1:b4:31:be:5b:b5:31:49:28:15:48:c0:bf:ae:79:06:e1:7a:
         67:26:0a:b1:ec:da:4f:82:ac:75:24:89:55:10:d4:9a:08:2c:
         3f:d9:2b:15:9f:cc:19:44:f0:8e:cb:9e:c5:a6:76:d0:55:8e:
         fd:03:c2:06:09:d4:57:04:2d:ca:40:ad:df:45:60:63:63:10:
         eb:2c:30:96:39:48:01:63:53:0e:4f:06:4d:eb:11:3c:14:8e:
         ec:c7:02:44:95:b5:dc:67:1b:ac:83:ac:e7:4e:f8:56:37:9f:
         90:49:f7:0e:8d:18:1d:c9:7c:27:cd:1a:bf:1b:0f:6c:e1:eb:
         b2:64:0e:77
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNXDK93SsY4+bLaMuaYTF58mSDyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RDU1RjAzMTdFMjA0MTQ1RDJDQTIzRTg1MzQ5RkRG
RTBGOTIzRTAeFw0yNjAxMzAxMjIzMjFaFw0yNzAxMjkxMjI4MjFaMDMxMTAvBgNV
BAMTKDY4ODBCNDcyMDQyQTFGQjg5REEyOTkzOUUzRTBBOUFDQzhFRDhEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RLR+7Cd483my4jGIuZIUxVqL
1dzu+cRxbQIdWZ6vn9C/9C9mROrOGCiWWCzAM9Fk41MGK8BJkMAdJBFQq4ryfpcY
HG/BZ9YXpzR4uV3BToCUzCnmWXCPuxyqpOMp8znllss4c5jcOPMgHph6waGFiRSH
CtWPt4XqemgMBKJpIAXMx/IyvB3iki3JSOAYlA4lQuChNbU6KRF5phKpnNfsYkpi
tEiUtpNkRveHw78/gHhGAXto2j/h9m1ZXZyD1QdOwip/Ee6ptG9nDP0UtEo4hzl2
zSxotqQgI+FVBxdu8IX98GCLRsDiaRWmb4dvzxiqG313OYfJLjiIiMqCCTmNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUaIC0cgQqH7idopk54+CprMjtjc8wHwYDVR0j
BBgwFoAUR21V8DF+IEFF0soj6FNJ/f4Pkj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NkUzRjFDNkI1RkM4MTQ5NzMyNkQxNTQ0MkFDRDBCNjZF
Njk0NzY5QjQ2QTE2OTMyRjQ3QkQ3NEMzNEQwRjk5LzAvNDc2RDU1RjAzMTdFMjA0
MTQ1RDJDQTIzRTg1MzQ5RkRGRTBGOTIzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZENTVGMDMxN0UyMDQxNDVE
MkNBMjNFODUzNDlGREZFMEY5MjNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODZFM0YxQzZCNUZDODE0OTczMjZEMTU0NDJBQ0QwQjY2RTY5NDc2OUI0
NkExNjkzMkY0N0JENzRDMzREMEY5OS8wLzMyMzgzMDMzM2E2NDMyMzgzMDNhMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzQzNzMzMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A9KAAAEwDQYJKoZIhvcNAQELBQADggEBAHXTXLFmm1YYO8rPJbStZp+613dD/XRF
Cdq7wJkNawDhsJAIK3wbwf6eKlCKkfORZ/xO9APyPo1ffLLDzAK6zd2QxbnQiIzh
PoNkp6Lq70Zgiw8Imm7VbDviT68+uIpI6a3+/Qq87mjIQssHN/CgXoPwUJv7U4OR
sUw3keRb4aG0Mb5btTFJKBVIwL+ueQbhemcmCrHs2k+CrHUkiVUQ1JoILD/ZKxWf
zBlE8I7LnsWmdtBVjv0DwgYJ1FcELcpArd9FYGNjEOssMJY5SAFjUw5PBk3rETwU
juzHAkSVtdxnG6yDrOdO+FY3n5BJ9w6NGB3JfCfNGr8bD2zh67JkDnc=
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:28:21 2026 by rpki-client