Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3438203d3e20323634373430.roa
File:                     323830333a663463303a3a2f33322d3438203d3e20323634373430.roa (raw, json)
Hash identifier:          6JBuBYkNJddVsXIG7Sppt9SEaZqyVDJd2uEyw+Ww6y8=
Subject key identifier:   BA:22:C8:6B:55:E0:08:97:E8:93:B3:C2:83:8C:05:04:EB:75:91:2E
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       05A26FD3C3B577037060BD499775FA1795F84C25
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3438203d3e20323634373430.roa
Signing time:             Mon 08 Jun 2026 16:25:00 +0000
ROA not before:           Mon 08 Jun 2026 16:20:00 +0000
ROA not after:            Mon 07 Jun 2027 16:25:00 +0000
asID:                     264740
IP address blocks:        2803:f4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a2:6f:d3:c3:b5:77:03:70:60:bd:49:97:75:fa:17:95:f8:4c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Jun  8 16:20:00 2026 GMT
            Not After : Jun  7 16:25:00 2027 GMT
        Subject: CN=BA22C86B55E00897E893B3C2838C0504EB75912E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:2b:5b:51:50:c4:a4:8e:a4:af:84:71:cb:
                    dc:31:dd:11:4f:80:53:62:1c:5d:c3:51:dd:aa:68:
                    a6:db:1d:4c:72:f5:55:64:bc:24:eb:5f:36:8d:45:
                    a3:62:f9:84:50:b9:2c:e8:9c:a0:3d:94:3d:0f:a7:
                    a9:23:5a:82:fc:ce:a2:60:27:14:59:48:19:9e:b0:
                    b3:e3:02:ec:23:1b:f5:c9:5e:89:10:fa:24:f9:8d:
                    35:ca:d9:cb:50:34:1f:07:45:4c:51:a9:57:09:7b:
                    7c:83:17:33:51:a8:77:3f:46:9c:de:e3:b0:af:70:
                    31:e4:2b:85:47:04:9e:30:fb:45:9e:4e:b3:50:54:
                    65:42:41:aa:44:71:e7:74:a4:2c:38:f4:d5:86:55:
                    60:94:14:4b:35:0e:42:1a:b0:87:74:ce:33:dc:3f:
                    e1:94:47:40:92:c4:fa:c3:b6:27:8f:1d:80:d9:2c:
                    64:d8:ac:78:62:23:3f:ad:bf:06:ae:b4:2d:26:36:
                    f1:15:60:d5:f4:06:c9:a9:00:6f:2f:7a:c5:ed:69:
                    20:2f:43:cf:e6:a6:aa:b5:46:1a:5a:6f:5c:0b:92:
                    63:e8:03:7f:b5:d9:e1:21:54:21:50:a3:57:50:fc:
                    30:dd:6e:94:e1:4f:f8:ba:a7:09:ee:6e:12:ee:a4:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:C8:6B:55:E0:08:97:E8:93:B3:C2:83:8C:05:04:EB:75:91:2E
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3438203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:fd:db:a0:89:a0:64:d6:88:64:43:cf:6f:36:71:32:b7:
         54:b5:9d:db:68:44:fd:c1:9a:1c:53:ed:95:4b:46:67:27:a1:
         a1:f7:46:d5:2e:20:07:f7:13:34:3d:77:0d:92:7e:56:f3:12:
         34:20:14:bd:db:8a:38:b3:18:04:fd:9c:ea:2d:02:42:e5:b6:
         24:9c:c1:d7:db:81:32:6f:84:ab:a6:38:5d:e5:b1:e1:ba:24:
         ed:be:a6:d3:41:bf:c2:cd:22:42:b9:5a:7a:e0:c9:69:71:53:
         c6:73:68:9a:61:10:64:ed:3c:3d:bf:bf:bb:1d:da:47:5d:09:
         cd:89:a9:6a:a9:47:6f:53:82:9f:37:d5:1f:b9:4a:d5:dc:d4:
         6b:c1:4c:bb:1b:42:b8:3e:3f:eb:9b:cb:14:b7:2c:89:c8:c1:
         47:20:da:58:19:1b:e7:6c:58:bb:23:0d:92:28:e5:bd:8b:40:
         5b:55:b1:33:12:84:4d:88:9d:eb:68:a0:84:07:c9:a9:f8:66:
         be:06:48:3c:69:40:27:c8:c7:d1:82:0b:6c:57:d0:24:74:ad:
         8a:eb:62:93:2f:34:7e:b5:5c:9a:62:61:c0:25:79:d8:8c:91:
         bd:68:4e:f0:52:65:22:db:12:dc:ee:ee:85:32:0e:e6:6f:a9:
         2b:e5:5b:42
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBaJv08O1dwNwYL1Jl3X6F5X4TCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNjA2MDgxNjIwMDBaFw0yNzA2MDcxNjI1MDBaMDMxMTAvBgNV
BAMTKEJBMjJDODZCNTVFMDA4OTdFODkzQjNDMjgzOEMwNTA0RUI3NTkxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GitbUVDEpI6kr4Rxy9wx3RFP
gFNiHF3DUd2qaKbbHUxy9VVkvCTrXzaNRaNi+YRQuSzonKA9lD0Pp6kjWoL8zqJg
JxRZSBmesLPjAuwjG/XJXokQ+iT5jTXK2ctQNB8HRUxRqVcJe3yDFzNRqHc/Rpze
47CvcDHkK4VHBJ4w+0WeTrNQVGVCQapEced0pCw49NWGVWCUFEs1DkIasId0zjPc
P+GUR0CSxPrDtiePHYDZLGTYrHhiIz+tvwautC0mNvEVYNX0BsmpAG8vesXtaSAv
Q8/mpqq1Rhpab1wLkmPoA3+12eEhVCFQo1dQ/DDdbpThT/i6pwnubhLupGzXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuiLIa1XgCJfok7PCg4wFBOt1kS4wHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMyMzgzMDMzM2E2NjM0NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9MAw
DQYJKoZIhvcNAQELBQADggEBABnG/dugiaBk1ohkQ89vNnEyt1S1ndtoRP3BmhxT
7ZVLRmcnoaH3RtUuIAf3EzQ9dw2SflbzEjQgFL3bijizGAT9nOotAkLltiScwdfb
gTJvhKumOF3lseG6JO2+ptNBv8LNIkK5WnrgyWlxU8ZzaJphEGTtPD2/v7sd2kdd
Cc2JqWqpR29Tgp831R+5StXc1GvBTLsbQrg+P+ubyxS3LInIwUcg2lgZG+dsWLsj
DZIo5b2LQFtVsTMShE2InetooIQHyan4Zr4GSDxpQCfIx9GCC2xX0CR0rYrrYpMv
NH61XJpiYcAlediMkb1oTvBSZSLbEtzu7oUyDuZvqSvlW0I=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:04 2026 by rpki-client