Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          WWU/DtEloaqb0Nra8aTvn2IOYaU5VeMH4E9DQwGoVwc=
Subject key identifier:   7A:DB:27:59:6F:F5:FC:4A:43:2B:EC:0B:48:D9:84:90:04:2D:3A:A3
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       10852C0E96A613782A8138F8054D0B6FB44C5513
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Mon 08 Jun 2026 21:47:06 +0000
ROA not before:           Mon 08 Jun 2026 21:42:06 +0000
ROA not after:            Mon 07 Jun 2027 21:47:06 +0000
asID:                     64120
IP address blocks:        2803:f080:8800::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:2c:0e:96:a6:13:78:2a:81:38:f8:05:4d:0b:6f:b4:4c:55:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Jun  8 21:42:06 2026 GMT
            Not After : Jun  7 21:47:06 2027 GMT
        Subject: CN=7ADB27596FF5FC4A432BEC0B48D98490042D3AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:4e:8e:e7:e9:69:40:42:09:11:47:fc:34:
                    45:2a:c3:6f:a6:e2:e0:8a:93:e7:e4:15:33:50:75:
                    a2:e0:93:b7:b6:c7:9a:63:55:31:76:8d:b9:23:67:
                    87:fe:2e:08:70:10:c8:b1:4b:81:08:b4:b2:05:c4:
                    43:8a:c8:43:6c:2a:7e:73:bd:aa:f7:72:20:1e:58:
                    e1:03:ab:a8:7e:a0:2e:73:ea:44:31:e2:d4:ce:f0:
                    2c:94:f7:61:3a:e3:1d:61:48:1b:21:e3:7f:4e:bd:
                    79:47:9d:c2:46:5d:1c:19:43:e6:49:0c:54:32:c6:
                    6d:8b:0f:4d:7e:cf:f9:ea:74:78:54:90:f0:c9:3c:
                    a2:73:c3:33:f8:bd:7b:c5:7a:05:aa:86:a8:cd:1b:
                    ab:45:6a:c9:d0:60:c1:45:ac:7e:a3:b8:94:17:16:
                    28:2b:83:7b:48:0d:c5:53:d8:02:b8:72:66:30:15:
                    fe:4c:28:d3:99:3c:88:83:65:a3:a5:ad:0f:2a:e7:
                    09:17:4b:70:13:ee:22:04:5c:c4:3e:3d:ae:4c:99:
                    6a:7d:b6:52:48:1e:75:7e:82:ef:1b:8e:37:09:f8:
                    89:75:36:79:c2:75:d0:07:08:8b:da:4b:72:d4:3b:
                    c0:89:3c:e2:43:01:8d:cd:3d:65:94:da:92:79:27:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:27:59:6F:F5:FC:4A:43:2B:EC:0B:48:D9:84:90:04:2D:3A:A3
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383830303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8800::/43

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:90:52:ab:c9:65:2c:57:47:13:cb:2a:27:60:35:2e:d9:
         04:5f:16:02:0d:a6:b3:cc:3c:47:cc:4f:64:03:04:98:b3:f7:
         fc:cc:74:2c:8a:95:f2:a5:73:71:8c:b1:c1:92:08:70:18:bc:
         42:00:88:52:0b:2c:fa:f3:a5:ab:5f:ee:70:73:a1:cb:09:88:
         a3:03:91:09:45:ce:c7:9d:33:9f:d6:6c:02:5a:e8:5f:31:4e:
         b3:b9:c1:90:94:37:a5:8f:85:6a:c3:6a:1b:34:9e:66:ef:5d:
         34:5e:9d:01:48:c3:8b:70:59:76:a6:5e:23:c9:4f:19:db:68:
         fb:97:c2:e1:0d:67:67:6e:91:75:a5:cf:7d:eb:d4:0c:3e:c8:
         c3:a9:c9:f2:b3:d3:07:ee:07:3d:38:ea:7b:61:56:23:77:75:
         4a:f4:d0:8a:16:f7:d0:1a:be:24:8f:75:ab:ce:b9:19:98:58:
         ee:f0:57:84:25:66:73:e6:26:4f:c2:46:ad:7a:d3:6f:6b:8a:
         af:70:14:1a:c8:ef:8e:7c:52:e5:e8:ab:4c:65:96:41:b6:1d:
         17:bb:14:9a:b5:f5:d7:74:fe:a4:9a:20:c8:60:18:ef:fb:38:
         e0:5e:af:fb:88:18:2c:1b:06:57:8a:58:3f:a8:cd:71:89:f2:
         6f:70:aa:81
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEIUsDpamE3gqgTj4BU0Lb7RMVRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNjA2MDgyMTQyMDZaFw0yNzA2MDcyMTQ3MDZaMDMxMTAvBgNV
BAMTKDdBREIyNzU5NkZGNUZDNEE0MzJCRUMwQjQ4RDk4NDkwMDQyRDNBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgw06O5+lpQEIJEUf8NEUqw2+m
4uCKk+fkFTNQdaLgk7e2x5pjVTF2jbkjZ4f+LghwEMixS4EItLIFxEOKyENsKn5z
var3ciAeWOEDq6h+oC5z6kQx4tTO8CyU92E64x1hSBsh439OvXlHncJGXRwZQ+ZJ
DFQyxm2LD01+z/nqdHhUkPDJPKJzwzP4vXvFegWqhqjNG6tFasnQYMFFrH6juJQX
Figrg3tIDcVT2AK4cmYwFf5MKNOZPIiDZaOlrQ8q5wkXS3AT7iIEXMQ+Pa5MmWp9
tlJIHnV+gu8bjjcJ+Il1NnnCddAHCIvaS3LUO8CJPOJDAY3NPWWU2pJ5JwHHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUetsnWW/1/EpDK+wLSNmEkAQtOqMwHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzgz
ODMwMzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgIgAMA0GCSqGSIb3DQEBCwUAA4IBAQCqQ5BSq8llLFdHE8sqJ2A1LtkE
XxYCDaazzDxHzE9kAwSYs/f8zHQsipXypXNxjLHBkghwGLxCAIhSCyz686WrX+5w
c6HLCYijA5EJRc7HnTOf1mwCWuhfMU6zucGQlDelj4Vqw2obNJ5m7100Xp0BSMOL
cFl2pl4jyU8Z22j7l8LhDWdnbpF1pc9969QMPsjDqcnys9MH7gc9OOp7YVYjd3VK
9NCKFvfQGr4kj3WrzrkZmFju8FeEJWZz5iZPwkatetNva4qvcBQayO+OfFLl6KtM
ZZZBth0XuxSatfXXdP6kmiDIYBjv+zjgXq/7iBgsGwZXilg/qM1xifJvcKqB
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:54:51 2026 by rpki-client