Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa
File:                     323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa (raw, json)
Hash identifier:          ZcUnsIFbaLvA25qm4o9FifN5C3GxR9L46MJsq0iISZ0=
Subject key identifier:   EE:74:85:9F:B9:17:8C:25:23:58:49:FD:15:47:2C:1A:F4:60:68:A0
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       13217A2C8EA0BDDF38A71779B116E01710E45B8D
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa
Signing time:             Wed 01 Apr 2026 03:37:08 +0000
ROA not before:           Wed 01 Apr 2026 03:32:08 +0000
ROA not after:            Wed 31 Mar 2027 03:37:08 +0000
asID:                     266737
IP address blocks:        2803:b5a0:400c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:21:7a:2c:8e:a0:bd:df:38:a7:17:79:b1:16:e0:17:10:e4:5b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Apr  1 03:32:08 2026 GMT
            Not After : Mar 31 03:37:08 2027 GMT
        Subject: CN=EE74859FB9178C25235849FD15472C1AF46068A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:c9:c1:e5:c3:d3:10:f2:3b:2a:5d:94:2a:
                    99:39:1a:22:9f:aa:10:85:4f:74:26:9b:7a:91:eb:
                    14:f9:24:6d:dd:bc:49:e1:dd:26:7e:a3:22:f5:91:
                    87:fc:c9:f1:d0:e6:f7:a4:c6:d4:73:3a:6d:5d:0e:
                    ca:c9:26:6a:98:9b:2e:0c:9f:77:31:2b:76:c9:a9:
                    02:9d:79:10:c1:66:ec:54:8e:00:16:18:fd:c9:b5:
                    fb:2f:7b:55:40:86:d3:f2:8d:4c:ee:9c:45:b0:55:
                    a4:d9:92:14:18:d7:df:3b:9f:5c:4b:c8:a2:43:3b:
                    a3:ef:20:13:27:ea:75:ec:d1:9b:b7:d4:e9:df:9d:
                    f3:fd:d6:17:c0:28:90:25:1d:b7:8b:bc:41:51:5b:
                    84:42:ed:ba:77:d4:ee:29:01:59:6a:25:c3:0e:04:
                    ef:cf:86:07:72:a9:71:1b:88:ed:d4:27:d2:f3:df:
                    37:ad:ca:59:db:5c:25:ff:7f:6e:98:43:cd:b3:04:
                    0b:ea:de:50:79:83:0d:91:00:68:65:a4:c2:12:0b:
                    b7:c1:cb:e7:89:75:b2:49:69:a4:39:62:d7:1a:96:
                    37:74:a0:56:c1:59:0b:70:17:0a:a8:0b:6a:5f:8b:
                    12:00:cd:4e:3b:39:89:d1:87:61:b4:af:57:05:b2:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:74:85:9F:B9:17:8C:25:23:58:49:FD:15:47:2C:1A:F4:60:68:A0
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b5a0:400c::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:84:cd:64:c1:62:9c:ca:c9:28:4d:86:ef:af:8f:59:e3:31:
         dd:3e:47:f3:34:02:65:e2:f6:dd:41:48:95:67:4c:3c:15:a7:
         a1:24:c5:31:65:11:26:27:d3:3a:8c:46:8b:79:a1:51:a8:a3:
         f7:a5:4c:e0:ba:45:f5:3f:9b:dc:e4:5c:d7:00:2b:fd:34:51:
         cb:10:28:ee:04:42:3c:97:ef:70:8a:fd:71:c1:fb:2b:84:19:
         74:c5:0c:0c:e7:64:fa:28:b3:7b:da:b7:71:bc:1e:51:76:74:
         3b:75:dc:a2:cc:0d:f1:df:91:b7:7a:53:ca:61:b5:75:d3:a7:
         4b:04:5d:87:67:89:ed:d2:5e:45:f4:2a:52:e9:b0:60:77:5d:
         3b:e4:aa:83:6e:58:f4:93:6d:aa:ce:83:46:06:d1:43:25:8b:
         f1:45:a0:58:28:9b:e2:21:38:dc:7d:42:3d:cc:0d:16:c8:50:
         e3:48:0b:11:89:55:13:59:27:5c:d0:2a:3c:51:9e:a1:6a:a7:
         fb:35:2d:ba:3a:a0:77:9f:85:71:47:9c:d0:4d:5e:f2:4a:50:
         60:da:dc:2e:e7:b0:5d:2e:b6:85:c2:23:29:e0:a7:64:ab:2b:
         13:5b:e4:8d:b0:52:a9:21:68:16:3a:0f:73:f0:4d:48:84:8b:
         fb:94:8d:0a
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUEyF6LI6gvd84pxd5sRbgFxDkW40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNGQzBDRDM2REU4Mzg5OEFGRTQ2MzRDMTAzRkUxQ0Yw
NjU2M0NGNDAeFw0yNjA0MDEwMzMyMDhaFw0yNzAzMzEwMzM3MDhaMDMxMTAvBgNV
BAMTKEVFNzQ4NTlGQjkxNzhDMjUyMzU4NDlGRDE1NDcyQzFBRjQ2MDY4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIcnB5cPTEPI7Kl2UKpk5GiKf
qhCFT3Qmm3qR6xT5JG3dvEnh3SZ+oyL1kYf8yfHQ5vekxtRzOm1dDsrJJmqYmy4M
n3cxK3bJqQKdeRDBZuxUjgAWGP3Jtfsve1VAhtPyjUzunEWwVaTZkhQY1987n1xL
yKJDO6PvIBMn6nXs0Zu31OnfnfP91hfAKJAlHbeLvEFRW4RC7bp31O4pAVlqJcMO
BO/PhgdyqXEbiO3UJ9Lz3zetylnbXCX/f26YQ82zBAvq3lB5gw2RAGhlpMISC7fB
y+eJdbJJaaQ5Ytcaljd0oFbBWQtwFwqoC2pfixIAzU47OYnRh2G0r1cFsiMlAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU7nSFn7kXjCUjWEn9FUcsGvRgaKAwHwYDVR0j
BBgwFoAUbPwM023oOJiv5GNMED/hzwZWPPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U5MkU2QUQ0MEFBMEM5RkVBQjk5QUM4MUUyRjJGRTRG
ODlCQ0ZGODBCOEFFOEYzODkxMkIyOTVGMEU5OTE0LzAvNkNGQzBDRDM2REU4Mzg5
OEFGRTQ2MzRDMTAzRkUxQ0YwNjU2M0NGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0ZDMENEMzZERTgzODk4QUZF
NDYzNEMxMDNGRTFDRjA2NTYzQ0Y0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFOTJFNkFENDBBQTBDOUZFQUI5OUFDODFFMkYyRkU0Rjg5QkNGRjgw
QjhBRThGMzg5MTJCMjk1RjBFOTkxNC8wLzMyMzgzMDMzM2E2MjM1NjEzMDNhMzQz
MDMwNjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzYzNzMzMzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7WgQAwwDQYJKoZIhvcNAQELBQADggEBAAaEzWTBYpzKyShNhu+vj1nj
Md0+R/M0AmXi9t1BSJVnTDwVp6EkxTFlESYn0zqMRot5oVGoo/elTOC6RfU/m9zk
XNcAK/00UcsQKO4EQjyX73CK/XHB+yuEGXTFDAznZPoos3vat3G8HlF2dDt13KLM
DfHfkbd6U8phtXXTp0sEXYdnie3SXkX0KlLpsGB3XTvkqoNuWPSTbarOg0YG0UMl
i/FFoFgom+IhONx9Qj3MDRbIUONICxGJVRNZJ1zQKjxRnqFqp/s1Lbo6oHefhXFH
nNBNXvJKUGDa3C7nsF0utoXCIyngp2SrKxNb5I2wUqkhaBY6D3PwTUiEi/uUjQo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:33 2026 by rpki-client