Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a38303a3a2f34382d3438203d3e20323734303539.roa
File:                     323830333a316135303a38303a3a2f34382d3438203d3e20323734303539.roa (raw, json)
Hash identifier:          wkdF7i0JF6JWDG+b9NHWtjDYqAvbng5KIuysMtCswVs=
Subject key identifier:   3E:C8:47:BB:26:8D:E6:85:5D:D9:B9:3E:C1:29:41:F3:2B:0B:4A:03
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       76561BB4EC0F598912EDDB59E721782898D4C437
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a38303a3a2f34382d3438203d3e20323734303539.roa
Signing time:             Mon 01 Jun 2026 20:10:00 +0000
ROA not before:           Mon 01 Jun 2026 20:05:00 +0000
ROA not after:            Mon 31 May 2027 20:10:00 +0000
asID:                     274059
IP address blocks:        2803:1a50:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:56:1b:b4:ec:0f:59:89:12:ed:db:59:e7:21:78:28:98:d4:c4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Jun  1 20:05:00 2026 GMT
            Not After : May 31 20:10:00 2027 GMT
        Subject: CN=3EC847BB268DE6855DD9B93EC12941F32B0B4A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:75:a4:06:69:18:b7:f1:13:ee:44:d5:fa:
                    ed:10:3e:0c:28:3a:ad:ab:1c:7e:22:e8:3d:6b:8a:
                    65:7d:79:7b:9f:8f:07:31:70:3f:67:9c:e0:80:c2:
                    1d:ed:81:31:41:16:3c:c7:87:8a:4f:cb:64:94:8b:
                    8f:d7:ae:d2:75:59:34:e8:e0:7c:04:63:a3:3e:c6:
                    b1:3e:b9:ff:b8:03:13:be:4b:9f:9f:95:92:b4:2f:
                    8b:fb:f8:8d:f1:64:6f:31:9e:c9:a8:af:71:bf:e2:
                    fe:83:9d:a1:31:4c:0f:5e:7c:9a:17:18:61:eb:87:
                    27:b4:8b:36:f2:3a:3c:b3:a5:58:a6:bd:df:e6:ab:
                    70:d2:80:60:7f:94:b6:c0:3f:86:b4:29:7e:eb:0c:
                    ba:74:25:18:30:7b:8f:39:c9:07:8e:fb:57:00:d8:
                    53:d4:b1:ff:fb:38:46:58:11:03:db:55:85:e0:eb:
                    57:cc:73:a2:89:0b:f1:5a:99:04:0c:c6:c5:d0:17:
                    7b:02:67:29:85:5a:42:8c:0d:2d:76:43:79:25:5a:
                    9b:c8:19:8a:22:57:10:ff:3d:b8:f2:62:82:e7:a8:
                    91:3c:31:9f:7a:1c:66:23:84:46:ab:12:41:e2:82:
                    85:e5:62:29:47:c5:a4:c0:0b:a9:cb:4f:a3:dc:df:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:47:BB:26:8D:E6:85:5D:D9:B9:3E:C1:29:41:F3:2B:0B:4A:03
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a38303a3a2f34382d3438203d3e20323734303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:8a:2d:a0:05:64:c1:9a:69:f9:f6:22:9a:7d:d0:1e:0d:
         44:a5:53:45:7c:7f:67:43:f5:89:73:bd:d4:1d:75:28:47:c4:
         65:c9:db:68:3e:25:40:29:d6:aa:52:38:8c:50:0c:b8:08:d6:
         3a:9a:8c:04:92:8a:d1:48:2b:71:31:a0:da:1b:d5:23:e0:38:
         04:21:56:89:12:65:f6:95:49:8e:79:8a:3e:77:e0:8b:ba:8c:
         3e:7f:2d:c0:16:3b:58:ff:42:60:2a:ee:21:b6:aa:10:37:3a:
         4b:b2:88:18:d8:ba:66:6a:09:a7:cb:6f:af:74:b1:1f:0f:f5:
         2b:44:e0:9d:9a:b9:56:43:af:6f:5d:12:aa:f9:64:71:44:fe:
         18:bd:e0:18:6a:af:aa:81:6b:76:c0:9b:f8:f9:ae:31:33:a1:
         81:14:c6:8c:55:01:4a:38:8b:f4:75:ca:b0:f1:91:d5:08:fe:
         9a:42:55:4a:9c:92:c9:cd:57:a2:a5:92:b8:a6:f1:c9:f1:f0:
         f5:d8:22:61:31:87:c9:d3:47:c5:4e:39:96:d8:62:0d:23:93:
         c2:70:44:78:04:0f:87:88:07:4c:0b:7f:01:13:11:57:96:53:
         dc:79:a4:bc:e4:5b:c5:48:23:96:ae:a5:aa:f8:b6:7e:df:b0:
         5d:80:34:e1
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUdlYbtOwPWYkS7dtZ5yF4KJjUxDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5RENEQjY0RTUwNkVBQzVDODBFOUE2QTBFMjJGMERG
MjVENzIzQzAeFw0yNjA2MDEyMDA1MDBaFw0yNzA1MzEyMDEwMDBaMDMxMTAvBgNV
BAMTKDNFQzg0N0JCMjY4REU2ODU1REQ5QjkzRUMxMjk0MUYzMkIwQjRBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmjnWkBmkYt/ET7kTV+u0QPgwo
Oq2rHH4i6D1rimV9eXufjwcxcD9nnOCAwh3tgTFBFjzHh4pPy2SUi4/XrtJ1WTTo
4HwEY6M+xrE+uf+4AxO+S5+flZK0L4v7+I3xZG8xnsmor3G/4v6DnaExTA9efJoX
GGHrhye0izbyOjyzpVimvd/mq3DSgGB/lLbAP4a0KX7rDLp0JRgwe485yQeO+1cA
2FPUsf/7OEZYEQPbVYXg61fMc6KJC/FamQQMxsXQF3sCZymFWkKMDS12Q3klWpvI
GYoiVxD/PbjyYoLnqJE8MZ96HGYjhEarEkHigoXlYilHxaTAC6nLT6Pc3/uPAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUPshHuyaN5oVd2bk+wSlB8ysLSgMwHwYDVR0j
BBgwFoAUsZ3Ntk5QbqxcgOmmoOIvDfJdcjwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTMyQjY5Q0JFMzQxNDAzMjdEMzgwMjk3MEJGRkZCRTkx
MTJDMEM4NEI0QUQ1OEMyOEQ0NEUxNTc4NTUwMDYxLzAvQjE5RENEQjY0RTUwNkVB
QzVDODBFOUE2QTBFMjJGMERGMjVENzIzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTlEQ0RCNjRFNTA2RUFDNUM4
MEU5QTZBMEUyMkYwREYyNUQ3MjNDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDkzMkI2OUNCRTM0MTQwMzI3RDM4MDI5NzBCRkZGQkU5MTEyQzBDODRC
NEFENThDMjhENDRFMTU3ODU1MDA2MS8wLzMyMzgzMDMzM2EzMTYxMzUzMDNhMzgz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzUzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDGlAAgDANBgkqhkiG9w0BAQsFAAOCAQEAgKqKLaAFZMGaafn2Ipp90B4NRKVT
RXx/Z0P1iXO91B11KEfEZcnbaD4lQCnWqlI4jFAMuAjWOpqMBJKK0UgrcTGg2hvV
I+A4BCFWiRJl9pVJjnmKPnfgi7qMPn8twBY7WP9CYCruIbaqEDc6S7KIGNi6ZmoJ
p8tvr3SxHw/1K0TgnZq5VkOvb10SqvlkcUT+GL3gGGqvqoFrdsCb+PmuMTOhgRTG
jFUBSjiL9HXKsPGR1Qj+mkJVSpySyc1XoqWSuKbxyfHw9dgiYTGHydNHxU45lthi
DSOTwnBEeAQPh4gHTAt/ARMRV5ZT3HmkvORbxUgjlq6lqvi2ft+wXYA04Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:34:11 2026 by rpki-client