Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          nsk+4bTghzDiU17hzwt58nQaEwMt86cxnY63IBlUSRs=
Subject key identifier:   8E:82:52:FF:32:F5:09:98:D5:89:39:A3:9F:11:9C:62:6E:9C:5D:0D
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       57A426650F2D3AA5C8E91149ACC07CF4C14DB5B7
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 20 May 2026 14:43:23 +0000
ROA not before:           Wed 20 May 2026 14:38:23 +0000
ROA not after:            Wed 19 May 2027 14:43:23 +0000
asID:                     262589
IP address blocks:        2800:650:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:26:65:0f:2d:3a:a5:c8:e9:11:49:ac:c0:7c:f4:c1:4d:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: May 20 14:38:23 2026 GMT
            Not After : May 19 14:43:23 2027 GMT
        Subject: CN=8E8252FF32F50998D58939A39F119C626E9C5D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:81:04:2a:55:db:2f:ba:91:8e:1f:71:d6:
                    2a:43:59:fb:f4:7e:a6:ed:f7:dd:57:a7:ac:15:e4:
                    79:48:b1:31:1c:d2:98:c9:a2:23:47:f2:04:c5:73:
                    1f:e6:56:1b:df:ce:b5:17:7d:9d:d4:b2:0a:6e:f5:
                    97:21:1b:de:90:d4:ee:0b:da:63:82:63:f4:b8:4e:
                    68:24:c2:49:a4:f9:ea:bd:10:75:b2:d2:b0:22:df:
                    cd:81:c5:b4:25:b7:7f:b4:13:65:27:2d:08:bf:40:
                    b6:4f:b2:4f:c2:87:72:80:ac:7e:74:d5:b8:69:22:
                    a5:89:2b:b5:02:dc:6f:a9:88:c1:fe:96:38:a9:03:
                    3e:77:ca:3c:53:b9:68:4b:76:70:9a:90:f8:17:73:
                    43:e5:a3:76:c9:0b:e8:3b:ce:44:e9:ab:48:6c:e0:
                    6d:2c:90:8c:a2:f3:19:17:e7:8c:f2:c6:01:51:5f:
                    7e:be:e0:b3:1d:74:8f:c6:aa:52:a0:98:f7:71:33:
                    a9:0e:9d:34:bf:a9:08:b2:86:e9:81:63:5a:1e:62:
                    1e:5c:e9:95:e5:6e:1d:b1:e3:f1:54:90:f8:59:0a:
                    b6:51:dc:84:43:89:a8:c2:56:8b:1c:d6:50:ef:e2:
                    6c:92:bb:02:e3:ea:22:e8:86:73:a2:97:87:06:0e:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:52:FF:32:F5:09:98:D5:89:39:A3:9F:11:9C:62:6E:9C:5D:0D
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:be:ee:0d:46:f0:c3:b7:f4:d3:b7:eb:59:5e:8b:be:d9:
         c7:0c:ac:bd:a2:91:ee:0a:53:4a:30:b5:97:4a:da:01:d3:c6:
         87:d0:20:75:b1:1c:7f:4a:61:a7:b3:56:11:2e:3d:1f:8d:5f:
         93:60:7d:41:5a:c5:9a:1e:0f:51:74:95:ec:45:42:ea:29:6b:
         6b:58:36:a1:87:42:4e:eb:05:a8:f4:f5:84:d4:ea:37:04:df:
         e2:60:08:ee:4a:c2:94:ab:b3:04:8a:06:e9:4e:13:9d:d8:f1:
         7e:8e:01:01:3e:ee:8c:52:72:dd:19:4f:59:07:67:ec:2c:26:
         7c:90:0f:83:86:90:e0:9f:f9:9f:bf:be:8a:f1:03:4d:1b:86:
         d6:d2:80:c9:95:fd:a5:28:30:85:40:7e:13:a2:af:71:88:3a:
         68:15:5f:f9:ff:bf:6f:99:c0:1e:3a:3f:4a:f3:de:9f:b3:45:
         e5:80:9c:1e:46:6c:e9:ab:de:4c:a7:01:5f:c9:f9:e5:11:42:
         0a:7a:de:70:dd:ca:de:0e:7d:8a:b8:21:79:c5:f7:5f:7d:b1:
         48:b9:c0:2d:b5:47:ff:bf:af:93:ec:97:cc:72:10:5e:b7:9d:
         b5:23:cd:8d:0d:fb:b6:1b:8d:df:46:1a:10:61:6b:7d:5b:22:
         bb:b2:b8:a3
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUV6QmZQ8tOqXI6RFJrMB89MFNtbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNjA1MjAxNDM4MjNaFw0yNzA1MTkxNDQzMjNaMDMxMTAvBgNV
BAMTKDhFODI1MkZGMzJGNTA5OThENTg5MzlBMzlGMTE5QzYyNkU5QzVEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt34EEKlXbL7qRjh9x1ipDWfv0
fqbt991Xp6wV5HlIsTEc0pjJoiNH8gTFcx/mVhvfzrUXfZ3Usgpu9ZchG96Q1O4L
2mOCY/S4Tmgkwkmk+eq9EHWy0rAi382BxbQlt3+0E2UnLQi/QLZPsk/Ch3KArH50
1bhpIqWJK7UC3G+piMH+ljipAz53yjxTuWhLdnCakPgXc0Plo3bJC+g7zkTpq0hs
4G0skIyi8xkX54zyxgFRX36+4LMddI/GqlKgmPdxM6kOnTS/qQiyhumBY1oeYh5c
6ZXlbh2x4/FUkPhZCrZR3IRDiajCVosc1lDv4mySuwLj6iLohnOil4cGDi3pAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUjoJS/zL1CZjViTmjnxGcYm6cXQ0wHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMyMzgzMDMwM2EzNjM1MzAzYTMxMzAz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgABlABBDANBgkqhkiG9w0BAQsFAAOCAQEADy2+7g1G8MO39NO361lei77Zxwys
vaKR7gpTSjC1l0raAdPGh9AgdbEcf0php7NWES49H41fk2B9QVrFmh4PUXSV7EVC
6ilra1g2oYdCTusFqPT1hNTqNwTf4mAI7krClKuzBIoG6U4Tndjxfo4BAT7ujFJy
3RlPWQdn7CwmfJAPg4aQ4J/5n7++ivEDTRuG1tKAyZX9pSgwhUB+E6KvcYg6aBVf
+f+/b5nAHjo/SvPen7NF5YCcHkZs6aveTKcBX8n55RFCCnrecN3K3g59irghecX3
X32xSLnALbVH/7+vk+yXzHIQXredtSPNjQ37thuN30YaEGFrfVsiu7K4ow==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:47 2026 by rpki-client