Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a343030303a3a2f33362d3336203d3e20323732393231.roa
File:                     323830333a396539303a343030303a3a2f33362d3336203d3e20323732393231.roa (raw, json)
Hash identifier:          O4fVRJUkVvhlVjF7poLhzf+d0j1feQsiHxOeXnPF5W4=
Subject key identifier:   AA:9F:5A:F1:DE:D6:4D:5B:A4:25:5F:82:0D:47:47:6D:73:A0:C2:93
Certificate issuer:       /CN=9AAD2F02A801741992977CEB681E0BF3863AF511
Certificate serial:       4D6226E90A00F16311E8602A9A3BE236A8DADD4C
Authority key identifier: 9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a343030303a3a2f33362d3336203d3e20323732393231.roa
Signing time:             Tue 27 Jan 2026 16:27:45 +0000
ROA not before:           Tue 27 Jan 2026 16:22:45 +0000
ROA not after:            Tue 26 Jan 2027 16:27:45 +0000
asID:                     272921
IP address blocks:        2803:9e90:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:26:e9:0a:00:f1:63:11:e8:60:2a:9a:3b:e2:36:a8:da:dd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AAD2F02A801741992977CEB681E0BF3863AF511
        Validity
            Not Before: Jan 27 16:22:45 2026 GMT
            Not After : Jan 26 16:27:45 2027 GMT
        Subject: CN=AA9F5AF1DED64D5BA4255F820D47476D73A0C293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:9f:0d:d4:e6:d6:fe:b6:51:ef:02:36:32:
                    18:1d:d3:32:db:e1:6b:b4:dc:d0:6f:34:18:e7:3b:
                    bb:6f:e0:f4:96:2c:1b:8e:47:66:92:bb:a1:1c:a5:
                    71:d1:b2:e9:c5:62:e5:0b:6c:16:19:7c:61:82:3b:
                    8e:d8:88:c1:66:59:bf:7d:6c:8c:53:ab:be:d3:c2:
                    cb:42:0f:fa:b4:37:a7:1d:d3:93:14:21:11:98:74:
                    5c:b6:db:34:1f:ff:71:03:d8:f4:49:d8:c2:08:80:
                    c3:76:4f:aa:a4:a1:ed:09:02:76:1f:c5:b1:5f:30:
                    77:ed:e4:4b:d9:6f:09:3f:65:b5:96:e9:8b:07:0e:
                    cd:4c:c9:f5:28:f0:bd:af:20:79:18:9d:91:b1:ce:
                    0b:c4:dc:20:c6:ad:c6:dc:ec:ee:54:a5:40:ce:32:
                    57:15:40:21:07:e3:e8:04:ae:b1:1e:ab:9a:ee:98:
                    26:a2:e9:4a:93:df:d7:9a:b1:c5:80:c6:26:aa:3a:
                    62:3d:56:6d:f9:26:12:a7:0b:1e:c4:79:17:b9:5a:
                    e4:8b:2a:09:f2:92:a7:22:07:2d:19:9b:22:b3:9e:
                    6f:e5:b0:9c:be:19:19:fd:df:dc:08:38:14:1c:41:
                    42:b3:55:e3:9e:7d:d2:54:aa:00:53:6a:28:1e:0b:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:5A:F1:DE:D6:4D:5B:A4:25:5F:82:0D:47:47:6D:73:A0:C2:93
            X509v3 Authority Key Identifier:
                keyid:9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a343030303a3a2f33362d3336203d3e20323732393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e90:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:49:ae:e0:6a:a5:78:40:aa:03:d3:8d:04:0b:f8:24:ad:
         f8:bf:1b:3e:1c:46:5f:de:f8:f1:0f:8d:16:b6:d1:bb:d7:a3:
         78:33:cd:df:42:dd:e0:20:fd:f4:a9:24:b7:36:99:cd:5f:17:
         d4:3c:de:a9:ab:c9:3b:b1:f4:f2:30:2d:2a:a1:1b:98:7d:58:
         73:5f:42:81:38:91:b3:eb:cd:12:76:78:15:69:9b:48:d6:33:
         e3:cc:6c:b4:16:6c:1b:a8:8a:34:21:89:06:72:d8:98:83:e7:
         c0:8b:b5:e2:ca:4a:24:35:45:8a:4f:b2:6c:78:11:b0:0b:da:
         b8:76:94:8f:30:43:24:b7:ec:6b:f5:91:30:32:f0:12:77:18:
         7f:d6:44:2b:5b:ad:ec:4a:e8:c4:46:cd:0e:2d:14:15:2c:72:
         28:c8:13:96:1a:e5:ae:24:42:a3:e7:94:ee:a1:7d:4b:cb:eb:
         9a:de:8a:87:5d:3f:a0:fc:78:ce:20:58:3c:7b:4b:4d:13:b5:
         3f:bb:21:f5:a3:8d:ec:3e:01:bb:89:0b:5f:03:61:70:e2:18:
         7a:fe:ad:d7:c2:4c:7d:75:2d:db:05:06:f7:24:ff:ee:b4:49:
         30:d3:e6:af:52:37:5d:1b:91:a5:c4:f7:71:03:f4:d7:c8:42:
         8a:11:dc:40
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUTWIm6QoA8WMR6GAqmjviNqja3UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFBRDJGMDJBODAxNzQxOTkyOTc3Q0VCNjgxRTBCRjM4
NjNBRjUxMTAeFw0yNjAxMjcxNjIyNDVaFw0yNzAxMjYxNjI3NDVaMDMxMTAvBgNV
BAMTKEFBOUY1QUYxREVENjRENUJBNDI1NUY4MjBENDc0NzZENzNBMEMyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lp8N1ObW/rZR7wI2Mhgd0zLb
4Wu03NBvNBjnO7tv4PSWLBuOR2aSu6EcpXHRsunFYuULbBYZfGGCO47YiMFmWb99
bIxTq77TwstCD/q0N6cd05MUIRGYdFy22zQf/3ED2PRJ2MIIgMN2T6qkoe0JAnYf
xbFfMHft5EvZbwk/ZbWW6YsHDs1MyfUo8L2vIHkYnZGxzgvE3CDGrcbc7O5UpUDO
MlcVQCEH4+gErrEeq5rumCai6UqT39eascWAxiaqOmI9Vm35JhKnCx7EeRe5WuSL
KgnykqciBy0ZmyKznm/lsJy+GRn939wIOBQcQUKzVeOefdJUqgBTaigeC+UhAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUqp9a8d7WTVukJV+CDUdHbXOgwpMwHwYDVR0j
BBgwFoAUmq0vAqgBdBmSl3zraB4L84Y69REwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjA0MTRBNjkwQzYzOThENUM1Njc1RDVCQjYwRjM5RDE1
ODhBMTNGMDAzODgxNjcxRTU4NzQ1OTY1NDc1Rjc1LzAvOUFBRDJGMDJBODAxNzQx
OTkyOTc3Q0VCNjgxRTBCRjM4NjNBRjUxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QUFEMkYwMkE4MDE3NDE5OTI5
NzdDRUI2ODFFMEJGMzg2M0FGNTExLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYwNDE0QTY5MEM2Mzk4RDVDNTY3NUQ1QkI2MEYzOUQxNTg4QTEzRjAw
Mzg4MTY3MUU1ODc0NTk2NTQ3NUY3NS8wLzMyMzgzMDMzM2EzOTY1MzkzMDNhMzQz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzOTMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA56QQDANBgkqhkiG9w0BAQsFAAOCAQEAVtVJruBqpXhAqgPTjQQL+CSt
+L8bPhxGX9748Q+NFrbRu9ejeDPN30Ld4CD99KkktzaZzV8X1DzeqavJO7H08jAt
KqEbmH1Yc19CgTiRs+vNEnZ4FWmbSNYz48xstBZsG6iKNCGJBnLYmIPnwIu14spK
JDVFik+ybHgRsAvauHaUjzBDJLfsa/WRMDLwEncYf9ZEK1ut7EroxEbNDi0UFSxy
KMgTlhrlriRCo+eU7qF9S8vrmt6Kh10/oPx4ziBYPHtLTRO1P7sh9aON7D4Bu4kL
XwNhcOIYev6t18JMfXUt2wUG9yT/7rRJMNPmr1I3XRuRpcT3cQP018hCihHcQA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:33:20 2026 by rpki-client