Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62383a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a62383a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          +zoJbnJ0cSWlOMD2t5bSXFAN9YBnfkEGB8AjOR5W1OA=
Subject key identifier:   52:A5:1A:E7:FC:92:E7:B7:FD:2F:39:84:87:1E:22:FA:6C:9F:07:9B
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       531378D693EB80D02B00613C265DA2455EC83EC2
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62383a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Sat 30 May 2026 18:25:00 +0000
ROA not before:           Sat 30 May 2026 18:20:00 +0000
ROA not after:            Sat 29 May 2027 18:25:00 +0000
asID:                     274063
IP address blocks:        2803:f2d0:b8::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 05:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:13:78:d6:93:eb:80:d0:2b:00:61:3c:26:5d:a2:45:5e:c8:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: May 30 18:20:00 2026 GMT
            Not After : May 29 18:25:00 2027 GMT
        Subject: CN=52A51AE7FC92E7B7FD2F3984871E22FA6C9F079B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:88:00:24:21:3c:9a:3a:7f:84:80:f1:53:
                    d0:76:27:8c:1d:89:30:2a:81:bf:07:5e:8f:9c:e4:
                    0b:e8:88:14:8d:a5:90:5e:e9:3d:b8:a1:c1:8b:b0:
                    35:e1:30:eb:ed:b0:ff:ef:00:f5:7a:eb:30:06:21:
                    13:6c:75:f6:38:3f:00:ad:a7:e8:3a:7e:a2:04:ec:
                    10:8b:48:ab:32:06:44:33:09:9c:14:c3:7f:0c:b0:
                    7d:ad:7c:61:d1:f8:a0:62:7c:08:3c:02:99:a4:4f:
                    e9:1c:5d:42:2d:7f:86:06:5c:3c:ac:af:81:4f:4a:
                    71:9b:0d:ab:7b:0c:23:15:69:14:ae:89:fa:43:b8:
                    91:84:13:43:9c:f0:47:56:3d:5d:52:4a:dc:43:00:
                    ea:84:13:b1:53:a5:fe:c3:cb:62:89:56:ce:c3:e9:
                    09:3f:39:f2:f4:4d:f6:28:0e:67:4a:2e:32:37:33:
                    ee:e0:11:c5:22:35:30:f0:ff:1a:08:22:b3:cf:11:
                    5f:8a:89:53:aa:1d:49:db:ea:5d:99:b5:16:95:60:
                    c1:4f:19:cb:4b:94:9b:88:14:f0:3a:f0:65:23:d6:
                    75:47:e3:ee:9b:e1:1d:22:c0:6a:5e:06:d5:8a:5c:
                    26:f1:8f:36:b7:59:14:d0:c5:97:af:52:c6:8f:cc:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:1A:E7:FC:92:E7:B7:FD:2F:39:84:87:1E:22:FA:6C:9F:07:9B
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62383a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:c6:ff:f7:ee:1d:2b:4b:73:6d:4a:bb:e7:95:ef:54:6f:
         c6:8c:97:43:98:19:70:40:84:76:a6:3a:15:70:e6:76:b0:ea:
         7d:6c:35:ee:87:d9:c6:de:92:19:da:f7:1e:7e:6b:c6:b8:c9:
         0b:7b:a7:55:74:e7:8f:4e:51:a6:d6:b0:01:c2:b0:f4:cb:a0:
         00:fc:48:da:46:c2:b3:f4:04:a2:af:2b:23:02:aa:ea:f0:89:
         96:c0:ba:57:7d:5f:53:26:0a:1d:68:4e:fd:b3:df:c7:72:a8:
         09:b2:8c:26:bc:ec:89:c7:ae:1a:2e:73:9f:bc:aa:58:be:c7:
         0f:ab:b7:70:8e:2e:56:8a:76:f3:ee:3a:4b:d0:ab:85:d6:26:
         d7:61:6f:ee:11:2b:7a:a9:6f:b4:fa:84:f7:8c:b6:51:33:b6:
         69:be:ee:ba:28:e6:b1:74:90:74:b4:f8:64:ba:34:73:de:f2:
         8b:87:3c:b7:95:3f:2b:e7:da:9e:00:db:db:28:51:ab:88:27:
         02:09:ba:c4:23:95:62:11:28:3b:73:35:cc:0c:2b:92:68:4a:
         57:63:82:4c:c9:7a:10:6e:35:30:29:1d:7f:2f:9f:f9:40:bd:
         a4:8b:8b:01:7e:9a:35:a3:97:83:d0:c6:c8:f9:e9:f5:2a:ba:
         4e:51:2d:0f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUUxN41pPrgNArAGE8Jl2iRV7IPsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAyNEYyNjQ2QkE0MjEwNjQwNzMxNkZFNTlBMENEMkE3
NkVGMjQwQzAeFw0yNjA1MzAxODIwMDBaFw0yNzA1MjkxODI1MDBaMDMxMTAvBgNV
BAMTKDUyQTUxQUU3RkM5MkU3QjdGRDJGMzk4NDg3MUUyMkZBNkM5RjA3OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcY4gAJCE8mjp/hIDxU9B2J4wd
iTAqgb8HXo+c5AvoiBSNpZBe6T24ocGLsDXhMOvtsP/vAPV66zAGIRNsdfY4PwCt
p+g6fqIE7BCLSKsyBkQzCZwUw38MsH2tfGHR+KBifAg8ApmkT+kcXUItf4YGXDys
r4FPSnGbDat7DCMVaRSuifpDuJGEE0Oc8EdWPV1SStxDAOqEE7FTpf7Dy2KJVs7D
6Qk/OfL0TfYoDmdKLjI3M+7gEcUiNTDw/xoIIrPPEV+KiVOqHUnb6l2ZtRaVYMFP
GctLlJuIFPA68GUj1nVH4+6b4R0iwGpeBtWKXCbxjza3WRTQxZevUsaPzOgPAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUUqUa5/yS57f9LzmEhx4i+myfB5swHwYDVR0j
BBgwFoAUACTyZGukIQZAcxb+WaDNKnbvJAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDU3NEE2RjIzOEMwREMxMTdBOEEwOEQ0OEMzNjkwNjJD
Q0MwQThBOTEzQzk4MDcyRUI3MTc5NjFFNzM5ODA5LzAvMDAyNEYyNjQ2QkE0MjEw
NjQwNzMxNkZFNTlBMENEMkE3NkVGMjQwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDI0RjI2NDZCQTQyMTA2NDA3
MzE2RkU1OUEwQ0QyQTc2RUYyNDBDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ1NzRBNkYyMzhDMERDMTE3QThBMDhENDhDMzY5MDYyQ0NDMEE4QTkx
M0M5ODA3MkVCNzE3OTYxRTczOTgwOS8wLzMyMzgzMDMzM2E2NjMyNjQzMDNhNjIz
ODNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzczNDMwMzYzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgD8tAAuDANBgkqhkiG9w0BAQsFAAOCAQEAX0XG//fuHStLc21Ku+eV71RvxoyX
Q5gZcECEdqY6FXDmdrDqfWw17ofZxt6SGdr3Hn5rxrjJC3unVXTnj05RptawAcKw
9MugAPxI2kbCs/QEoq8rIwKq6vCJlsC6V31fUyYKHWhO/bPfx3KoCbKMJrzsiceu
Gi5zn7yqWL7HD6u3cI4uVop28+46S9CrhdYm12Fv7hEreqlvtPqE94y2UTO2ab7u
uijmsXSQdLT4ZLo0c97yi4c8t5U/K+fangDb2yhRq4gnAgm6xCOVYhEoO3M1zAwr
kmhKV2OCTMl6EG41MCkdfy+f+UC9pIuLAX6aNaOXg9DGyPnp9Sq6TlEtDw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:30 2026 by rpki-client