Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
File:                     323830303a6231303a3a2f34382d3438203d3e203237383834.roa (raw, json)
Hash identifier:          MKzrSm31Kt5Z4FvApzOz/KH6W2ET7Eg4k3yXumGTy90=
Subject key identifier:   01:4C:4A:C4:11:28:AA:95:02:FE:28:2C:36:75:20:5F:97:33:BE:1E
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       6DD97041BCB555F688FCC2F4DA469B6714BCE46C
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
Signing time:             Thu 29 Oct 2026 22:06:09 +0000
ROA not before:           Thu 29 Oct 2026 22:01:09 +0000
ROA not after:            Thu 28 Oct 2027 22:06:09 +0000
asID:                     27884
IP address blocks:        2800:b10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:70:41:bc:b5:55:f6:88:fc:c2:f4:da:46:9b:67:14:bc:e4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Oct 29 22:01:09 2026 GMT
            Not After : Oct 28 22:06:09 2027 GMT
        Subject: CN=014C4AC41128AA9502FE282C3675205F9733BE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:a4:65:45:12:6b:d2:5a:5b:98:56:38:d7:
                    5e:58:d6:f7:a0:34:77:28:85:63:0e:dd:5e:3e:10:
                    87:a5:18:35:56:72:89:b6:9b:62:b6:cd:2e:d4:a9:
                    72:d9:d7:e9:9f:db:2c:8c:66:bb:3e:93:49:b3:d2:
                    aa:49:76:b6:9a:7f:a0:bd:c3:93:39:76:8b:09:e1:
                    7e:dc:f9:aa:e2:60:ca:ab:0f:51:d1:7e:13:33:b1:
                    27:58:12:e9:c5:7e:2d:ca:00:02:96:82:15:70:02:
                    64:59:25:55:49:06:ce:4e:99:36:71:48:12:86:d8:
                    fb:14:6d:43:5e:02:b9:31:4e:a1:7b:16:77:2b:d1:
                    05:71:f2:80:e4:41:ed:77:85:f8:d3:4d:8d:92:ac:
                    a2:d6:83:ca:38:19:c1:60:9e:23:3e:a4:3a:b7:db:
                    cc:4d:0a:43:36:bc:6d:f6:3a:48:2a:cc:11:b3:36:
                    ba:67:c6:7e:27:73:2d:7b:d8:6d:07:8f:f4:88:1a:
                    56:ab:2c:7f:ec:63:ce:81:3d:69:59:e4:9d:58:f8:
                    b2:34:b2:9c:79:f6:34:4c:90:5f:f2:d4:22:d4:9b:
                    cb:d9:48:9a:cc:83:88:df:24:17:15:cd:8b:c0:15:
                    64:4a:43:1f:09:9f:49:e7:f7:f3:68:a8:54:99:85:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:4A:C4:11:28:AA:95:02:FE:28:2C:36:75:20:5F:97:33:BE:1E
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:69:e1:64:4a:55:69:f9:90:55:c8:f5:f4:59:62:06:44:7d:
         2d:df:9d:84:e4:42:b7:37:92:5a:3f:9c:b6:e3:a1:68:d9:f0:
         8c:a0:7e:4b:fb:5b:04:07:4d:fc:92:c6:ab:0e:1f:96:e7:07:
         55:03:e1:90:d1:56:17:c1:0c:d2:3d:80:8a:98:01:72:9f:29:
         80:5a:14:5c:d4:a8:53:94:9e:4b:f4:a1:90:67:ad:b5:1c:7f:
         3a:5c:5e:44:09:33:a5:51:21:b1:51:2d:97:2e:d6:74:65:e7:
         2d:14:fb:f4:1c:02:1d:65:cc:a7:0c:df:56:20:d1:72:5d:8c:
         8a:56:83:41:4d:31:b7:09:57:0e:cd:f6:c0:12:ed:57:e1:ff:
         7d:da:34:ff:f5:25:1d:5e:77:f0:58:2f:70:41:90:16:e0:bc:
         8e:e4:33:57:b4:f0:69:75:8a:bc:71:34:e3:c3:24:f1:21:e3:
         43:2c:f1:f2:0b:3b:d8:d1:ba:65:71:72:de:f3:4b:3a:9a:b6:
         af:fe:b5:dd:1f:fb:07:4f:6c:38:7a:31:f8:4c:48:56:5a:58:
         d0:8c:9b:b9:ab:2a:6d:98:ad:17:f7:20:83:25:a7:62:8b:d8:
         36:a7:fa:28:66:9d:de:e7:7d:81:59:4e:96:c3:23:87:6e:44:
         c1:9f:02:8b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbdlwQby1VfaI/ML02kabZxS85GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNjEwMjkyMjAxMDlaFw0yNzEwMjgyMjA2MDlaMDMxMTAvBgNV
BAMTKDAxNEM0QUM0MTEyOEFBOTUwMkZFMjgyQzM2NzUyMDVGOTczM0JFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTO6RlRRJr0lpbmFY4115Y1veg
NHcohWMO3V4+EIelGDVWcom2m2K2zS7UqXLZ1+mf2yyMZrs+k0mz0qpJdraaf6C9
w5M5dosJ4X7c+ariYMqrD1HRfhMzsSdYEunFfi3KAAKWghVwAmRZJVVJBs5OmTZx
SBKG2PsUbUNeArkxTqF7Fncr0QVx8oDkQe13hfjTTY2SrKLWg8o4GcFgniM+pDq3
28xNCkM2vG32OkgqzBGzNrpnxn4ncy172G0Hj/SIGlarLH/sY86BPWlZ5J1Y+LI0
spx59jRMkF/y1CLUm8vZSJrMg4jfJBcVzYvAFWRKQx8Jn0nn9/NoqFSZhcTRAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUAUxKxBEoqpUC/igsNnUgX5czvh4wHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMyMzgzMDMwM2E2MjMxMzAzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAALEAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBWaeFkSlVp+ZBVyPX0WWIGRH0t352E5EK3N5JaP5y2
46Fo2fCMoH5L+1sEB038ksarDh+W5wdVA+GQ0VYXwQzSPYCKmAFynymAWhRc1KhT
lJ5L9KGQZ621HH86XF5ECTOlUSGxUS2XLtZ0ZectFPv0HAIdZcynDN9WINFyXYyK
VoNBTTG3CVcOzfbAEu1X4f992jT/9SUdXnfwWC9wQZAW4LyO5DNXtPBpdYq8cTTj
wyTxIeNDLPHyCzvY0bplcXLe80s6mrav/rXdH/sHT2w4ejH4TEhWWljQjJu5qypt
mK0X9yCDJadii9g2p/ooZp3e532BWU6WwyOHbkTBnwKL
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:04:26 2026 by rpki-client