Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a393a3a2f34382d3438203d3e20323634373333.roa
File:                     323830333a643238303a393a3a2f34382d3438203d3e20323634373333.roa (raw, json)
Hash identifier:          iXxcl4QSPsBxnHpog2GCnyOVJyjMY5O48zxnULmHk+U=
Subject key identifier:   47:E2:B1:4A:EC:9B:7C:E8:3F:FC:A3:AD:B9:D0:91:62:17:69:21:8D
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       684B46473BF1FF7CC58F4CA1817811D6C622B008
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a393a3a2f34382d3438203d3e20323634373333.roa
Signing time:             Fri 30 Jan 2026 12:28:22 +0000
ROA not before:           Fri 30 Jan 2026 12:23:22 +0000
ROA not after:            Fri 29 Jan 2027 12:28:22 +0000
asID:                     264733
IP address blocks:        2803:d280:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:46:47:3b:f1:ff:7c:c5:8f:4c:a1:81:78:11:d6:c6:22:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Jan 30 12:23:22 2026 GMT
            Not After : Jan 29 12:28:22 2027 GMT
        Subject: CN=47E2B14AEC9B7CE83FFCA3ADB9D091621769218D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:99:08:70:a2:e0:42:1d:3b:a4:8e:55:41:
                    ed:aa:1f:3a:b0:76:5a:a0:4c:6a:aa:27:be:8f:d3:
                    f3:dd:c6:91:e8:a5:57:bc:1e:ce:71:02:6d:d9:d7:
                    b3:d5:e9:53:99:fe:8a:66:45:33:1f:33:fe:a8:a9:
                    0f:bf:14:f8:76:92:ba:8b:8b:b9:e8:aa:8d:65:59:
                    b4:b0:9e:3e:c8:6f:9c:dc:6a:f2:9d:bc:c3:f5:90:
                    d8:b5:49:18:89:b7:aa:4c:de:5f:ee:a4:b6:57:34:
                    51:42:d8:f3:53:e4:a8:4d:11:1c:2a:ae:fa:e7:76:
                    c2:fd:5c:4a:13:0c:f9:a7:f7:6d:e3:84:a6:2b:89:
                    e5:6e:e7:3e:12:05:79:7c:4f:30:d1:db:d5:5e:9d:
                    96:6a:28:36:d7:64:44:93:7b:92:0d:77:dc:23:88:
                    4e:74:ed:8d:eb:09:da:ff:43:e0:b7:03:d1:30:f9:
                    b6:a4:cf:a5:ad:52:95:b1:26:69:aa:0b:86:06:ef:
                    e9:c7:59:97:4f:c0:52:8a:e3:48:40:81:6a:f4:70:
                    3d:c3:00:4d:fc:5e:4a:64:b0:04:c6:f8:98:54:a1:
                    8d:d9:7d:8a:21:7b:9c:61:6f:3c:ff:6f:ad:db:5b:
                    21:46:03:31:64:d1:b5:a6:dd:96:ac:35:cf:6f:33:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:B1:4A:EC:9B:7C:E8:3F:FC:A3:AD:B9:D0:91:62:17:69:21:8D
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a393a3a2f34382d3438203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:32:1a:e7:cf:84:f6:20:45:ae:b2:52:32:6b:c4:da:03:
         1a:22:0f:24:a8:1b:e7:9d:12:c5:35:dd:54:44:cb:7f:bd:fa:
         8e:a2:e4:88:34:48:1c:0b:ae:91:1d:bd:25:b2:48:5d:48:ac:
         47:db:2f:cc:ad:c5:ee:65:a5:da:99:5c:bd:1a:d6:0e:f9:f3:
         06:b4:e7:26:92:3b:c9:69:6c:85:99:e8:fd:11:5a:98:a3:2d:
         f7:d0:39:86:e8:8b:1d:a3:18:e3:ba:69:5b:9b:82:76:ea:2f:
         0d:c7:86:35:cc:6b:00:54:af:69:50:52:3a:b5:a0:2c:9b:a4:
         1c:3f:ad:b9:24:b7:11:c1:80:bc:55:97:59:c8:e5:82:bb:cc:
         24:c7:fe:ce:21:07:cc:1a:f7:01:33:14:cc:ae:8e:3f:1b:f3:
         c4:13:a7:df:b6:53:5f:8c:71:95:87:f7:ac:6e:19:42:30:86:
         37:3c:fc:c0:2b:50:7e:ac:15:6d:35:02:15:9b:58:6d:47:6e:
         7a:9b:4e:8a:72:9f:99:1a:b4:b1:11:dc:09:30:91:16:9b:66:
         88:e8:c9:16:c9:2e:78:82:e1:c6:b9:2d:66:c3:fa:03:08:72:
         25:ba:e5:76:85:44:18:f8:b4:7a:4e:c2:99:b8:a0:bc:c5:4c:
         31:c3:0f:a0
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUaEtGRzvx/3zFj0yhgXgR1sYisAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RDU1RjAzMTdFMjA0MTQ1RDJDQTIzRTg1MzQ5RkRG
RTBGOTIzRTAeFw0yNjAxMzAxMjIzMjJaFw0yNzAxMjkxMjI4MjJaMDMxMTAvBgNV
BAMTKDQ3RTJCMTRBRUM5QjdDRTgzRkZDQTNBREI5RDA5MTYyMTc2OTIxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4JkIcKLgQh07pI5VQe2qHzqw
dlqgTGqqJ76P0/PdxpHopVe8Hs5xAm3Z17PV6VOZ/opmRTMfM/6oqQ+/FPh2krqL
i7noqo1lWbSwnj7Ib5zcavKdvMP1kNi1SRiJt6pM3l/upLZXNFFC2PNT5KhNERwq
rvrndsL9XEoTDPmn923jhKYrieVu5z4SBXl8TzDR29VenZZqKDbXZESTe5INd9wj
iE507Y3rCdr/Q+C3A9Ew+bakz6WtUpWxJmmqC4YG7+nHWZdPwFKK40hAgWr0cD3D
AE38XkpksATG+JhUoY3ZfYohe5xhbzz/b63bWyFGAzFk0bWm3ZasNc9vM76XAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUR+KxSuybfOg//KOtudCRYhdpIY0wHwYDVR0j
BBgwFoAUR21V8DF+IEFF0soj6FNJ/f4Pkj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NkUzRjFDNkI1RkM4MTQ5NzMyNkQxNTQ0MkFDRDBCNjZF
Njk0NzY5QjQ2QTE2OTMyRjQ3QkQ3NEMzNEQwRjk5LzAvNDc2RDU1RjAzMTdFMjA0
MTQ1RDJDQTIzRTg1MzQ5RkRGRTBGOTIzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZENTVGMDMxN0UyMDQxNDVE
MkNBMjNFODUzNDlGREZFMEY5MjNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODZFM0YxQzZCNUZDODE0OTczMjZEMTU0NDJBQ0QwQjY2RTY5NDc2OUI0
NkExNjkzMkY0N0JENzRDMzREMEY5OS8wLzMyMzgzMDMzM2E2NDMyMzgzMDNhMzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzQzNzMzMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A9KAAAkwDQYJKoZIhvcNAQELBQADggEBAFE8Mhrnz4T2IEWuslIya8TaAxoiDySo
G+edEsU13VREy3+9+o6i5Ig0SBwLrpEdvSWySF1IrEfbL8ytxe5lpdqZXL0a1g75
8wa05yaSO8lpbIWZ6P0RWpijLffQOYboix2jGOO6aVubgnbqLw3HhjXMawBUr2lQ
Ujq1oCybpBw/rbkktxHBgLxVl1nI5YK7zCTH/s4hB8wa9wEzFMyujj8b88QTp9+2
U1+McZWH96xuGUIwhjc8/MArUH6sFW01AhWbWG1HbnqbTopyn5katLER3AkwkRab
ZojoyRbJLniC4ca5LWbD+gMIciW65XaFRBj4tHpOwpm4oLzFTDHDD6A=
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:01:18 2026 by rpki-client