Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a323030303a3a2f33362d3336203d3e20323634373833.roa
File:                     323830333a346634303a323030303a3a2f33362d3336203d3e20323634373833.roa (raw, json)
Hash identifier:          pRdDu86GzsIfjh2noqPWR3cQrLPYh5UUFUWHTIset3c=
Subject key identifier:   93:63:4A:F1:84:08:3C:48:43:7D:9C:BA:79:79:67:AE:17:2E:AB:31
Certificate issuer:       /CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
Certificate serial:       6F7DDC7F8F571E1296D55FF82B2CE6C743D592A7
Authority key identifier: 37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a323030303a3a2f33362d3336203d3e20323634373833.roa
Signing time:             Wed 27 May 2026 17:44:24 +0000
ROA not before:           Wed 27 May 2026 17:39:24 +0000
ROA not after:            Wed 26 May 2027 17:44:24 +0000
asID:                     264783
IP address blocks:        2803:4f40:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7d:dc:7f:8f:57:1e:12:96:d5:5f:f8:2b:2c:e6:c7:43:d5:92:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
        Validity
            Not Before: May 27 17:39:24 2026 GMT
            Not After : May 26 17:44:24 2027 GMT
        Subject: CN=93634AF184083C48437D9CBA797967AE172EAB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:64:fd:9f:b9:89:23:a2:f8:73:61:05:97:
                    8b:a5:d1:4a:0b:e1:1c:05:30:e8:d8:cd:f0:70:87:
                    49:e8:c3:b6:21:3a:e6:fb:25:24:c2:73:a7:34:66:
                    b4:ce:a1:16:75:a2:0d:e2:3f:45:e3:5e:3c:1f:aa:
                    85:83:cf:b8:6e:78:49:f8:96:df:1c:3e:25:da:5b:
                    ae:a7:da:06:68:ef:1b:2b:0d:9f:34:a5:22:48:1e:
                    1f:a7:6b:a0:2f:e5:73:f2:11:2f:77:0c:39:e5:b4:
                    45:35:a4:5c:81:29:82:3c:78:45:fa:dd:3a:50:eb:
                    09:c9:72:77:3d:9e:44:d8:5a:d5:b0:79:5c:77:9b:
                    b9:5f:89:f9:7b:eb:b7:15:e4:cd:26:b8:19:74:14:
                    9c:15:2a:db:fd:fc:a1:aa:bb:74:8a:e6:f6:0e:cd:
                    a5:4a:c3:53:9b:ac:0e:89:cc:46:61:cb:5a:9b:53:
                    35:3b:79:9e:be:85:1e:41:cb:ea:3a:95:f6:d4:5a:
                    ba:f5:bf:cc:eb:34:21:46:6f:88:a5:41:88:70:bc:
                    09:2a:bd:3d:0a:09:cd:09:d1:a2:14:10:26:e8:5f:
                    49:ae:b1:68:97:3c:fc:54:82:8c:aa:66:67:8c:f3:
                    8d:16:82:97:b0:2b:75:4a:08:dd:e0:f1:36:73:72:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:4A:F1:84:08:3C:48:43:7D:9C:BA:79:79:67:AE:17:2E:AB:31
            X509v3 Authority Key Identifier:
                keyid:37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a323030303a3a2f33362d3336203d3e20323634373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f40:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:57:c8:d4:08:44:db:e4:d7:b2:53:cc:59:a1:f0:8d:de:ce:
         7a:d8:61:5d:85:0f:fe:0a:bf:cb:75:c5:56:6c:78:00:99:95:
         6c:61:94:1c:02:85:5a:d3:51:5f:e2:ec:9e:75:e6:a5:5f:0c:
         89:68:a9:6d:4c:44:e7:f7:b2:13:ff:a7:42:88:11:d5:a8:61:
         9b:dd:5e:81:e2:29:c6:b0:3f:58:c7:1d:6b:cf:a6:5a:84:d2:
         18:d3:f6:0d:6e:a3:42:ae:b7:f4:87:f4:49:74:77:53:98:17:
         1f:7d:92:26:18:5e:95:cb:1f:9b:75:ce:10:ca:bf:42:e8:93:
         c8:e1:dd:45:11:2e:c2:26:4e:cc:ad:d0:7a:8f:db:62:82:f3:
         db:fb:5e:72:65:cd:d6:9c:a5:50:66:d3:f3:6d:dd:dd:33:a5:
         c4:bb:11:1f:14:f2:25:63:c7:6f:ec:bc:5e:29:e9:69:f3:6c:
         ac:ef:d0:1a:73:4a:78:3a:d0:62:b6:18:23:f0:dc:ab:50:31:
         0c:c5:dd:5d:14:c1:cc:e2:85:fc:08:11:ad:46:71:56:07:4a:
         ce:82:e2:f9:7f:90:02:ba:2b:05:c2:fe:7d:9f:2b:f0:30:b3:
         02:ae:e6:f4:a2:14:0a:cb:1b:ca:36:16:31:c5:e7:bc:9f:f3:
         2c:1e:f6:28
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUb33cf49XHhKW1V/4Kyzmx0PVkqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0ODI2QTU2QTg5MDNDQkM3QUM3RDY3RjgzQkE5MjBE
NDc5NkE4RjAeFw0yNjA1MjcxNzM5MjRaFw0yNzA1MjYxNzQ0MjRaMDMxMTAvBgNV
BAMTKDkzNjM0QUYxODQwODNDNDg0MzdEOUNCQTc5Nzk2N0FFMTcyRUFCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxC2T9n7mJI6L4c2EFl4ul0UoL
4RwFMOjYzfBwh0now7YhOub7JSTCc6c0ZrTOoRZ1og3iP0XjXjwfqoWDz7hueEn4
lt8cPiXaW66n2gZo7xsrDZ80pSJIHh+na6Av5XPyES93DDnltEU1pFyBKYI8eEX6
3TpQ6wnJcnc9nkTYWtWweVx3m7lfifl767cV5M0muBl0FJwVKtv9/KGqu3SK5vYO
zaVKw1ObrA6JzEZhy1qbUzU7eZ6+hR5By+o6lfbUWrr1v8zrNCFGb4ilQYhwvAkq
vT0KCc0J0aIUECboX0musWiXPPxUgoyqZmeM840WgpewK3VKCN3g8TZzcnrBAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUk2NK8YQIPEhDfZy6eXlnrhcuqzEwHwYDVR0j
BBgwFoAUN0gmpWqJA8vHrH1n+DupINR5ao8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FN0U0OEU2MDM0Mzk2MjI4OUFGRjQwODFBMDRBMEU3QTFC
ODBCRTM5MDVBQTNERTI0MjJFMTQzNUM5RjAxN0NDLzAvMzc0ODI2QTU2QTg5MDND
QkM3QUM3RDY3RjgzQkE5MjBENDc5NkE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzQ4MjZBNTZBODkwM0NCQzdB
QzdENjdGODNCQTkyMEQ0Nzk2QThGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTdFNDhFNjAzNDM5NjIyODlBRkY0MDgxQTA0QTBFN0ExQjgwQkUzOTA1
QUEzREUyNDIyRTE0MzVDOUYwMTdDQy8wLzMyMzgzMDMzM2EzNDY2MzQzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzNzM4MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA09AIDANBgkqhkiG9w0BAQsFAAOCAQEAplfI1AhE2+TXslPMWaHwjd7O
ethhXYUP/gq/y3XFVmx4AJmVbGGUHAKFWtNRX+LsnnXmpV8MiWipbUxE5/eyE/+n
QogR1ahhm91egeIpxrA/WMcda8+mWoTSGNP2DW6jQq639If0SXR3U5gXH32SJhhe
lcsfm3XOEMq/QuiTyOHdRREuwiZOzK3Qeo/bYoLz2/tecmXN1pylUGbT823d3TOl
xLsRHxTyJWPHb+y8XinpafNsrO/QGnNKeDrQYrYYI/Dcq1AxDMXdXRTBzOKF/AgR
rUZxVgdKzoLi+X+QArorBcL+fZ8r8DCzAq7m9KIUCssbyjYWMcXnvJ/zLB72KA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:44:09 2026 by rpki-client