Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa
File:                     323830333a323539303a3a2f33322d3332203d3e20323732393639.roa (raw, json)
Hash identifier:          cJFv3J/4rL3Bm2bgM1qwVEiwc5795px3Lc7EmhH8UAE=
Subject key identifier:   8D:42:13:BD:58:78:E3:D9:BF:94:C1:6D:34:2C:81:D3:14:13:8F:8F
Certificate issuer:       /CN=6786E79D4497221E4715B318D4CDA91EBF9AF72C
Certificate serial:       4154FB7D8C89AE39000750327F9432CFF1CCB8
Authority key identifier: 67:86:E7:9D:44:97:22:1E:47:15:B3:18:D4:CD:A9:1E:BF:9A:F7:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa
Signing time:             Mon 10 Aug 2026 16:24:52 +0000
ROA not before:           Mon 10 Aug 2026 16:19:52 +0000
ROA not after:            Mon 09 Aug 2027 16:24:52 +0000
asID:                     272969
IP address blocks:        2803:2590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Sep 2026 14:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:54:fb:7d:8c:89:ae:39:00:07:50:32:7f:94:32:cf:f1:cc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6786E79D4497221E4715B318D4CDA91EBF9AF72C
        Validity
            Not Before: Aug 10 16:19:52 2026 GMT
            Not After : Aug  9 16:24:52 2027 GMT
        Subject: CN=8D4213BD5878E3D9BF94C16D342C81D314138F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:04:1b:f6:49:8a:96:dd:e5:08:7c:5c:d1:
                    7f:8e:7e:44:ab:14:e1:e8:89:8f:57:7b:0f:69:94:
                    bf:dc:04:7e:1b:87:d3:c0:b1:66:b8:7c:7f:8b:58:
                    35:9d:58:78:5c:69:80:03:2b:d2:c8:44:3c:ad:e6:
                    b0:7c:6f:99:70:f7:ae:d3:c8:bf:99:83:6c:61:f3:
                    46:ad:2e:9d:58:fc:e3:25:b4:fa:84:77:7b:32:fa:
                    58:7d:51:de:31:48:d7:ed:99:98:bf:3e:68:05:02:
                    90:c2:37:f0:2a:95:3e:29:e8:73:89:c9:64:66:36:
                    93:d1:0f:d1:c1:e0:51:ca:81:fc:dc:54:be:27:46:
                    d4:eb:c0:9e:1b:bd:c3:8c:7d:4a:81:08:f3:24:94:
                    df:39:22:42:08:8e:01:a0:09:e2:11:d6:43:4a:55:
                    dd:40:df:56:87:c0:78:a9:2a:0c:1a:35:7b:19:b9:
                    48:41:cb:0b:1a:7b:da:2f:fa:1e:c1:e0:0f:5a:34:
                    b5:fc:88:da:74:bd:f7:04:4c:b6:21:f5:d6:9d:e3:
                    9b:97:f0:b0:e6:c6:d4:0e:64:a6:b3:28:55:fa:c9:
                    00:40:64:87:28:a2:db:f9:44:99:27:93:bb:43:75:
                    22:65:1e:df:b1:41:fd:aa:3c:c7:62:d1:9b:ad:bf:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:13:BD:58:78:E3:D9:BF:94:C1:6D:34:2C:81:D3:14:13:8F:8F
            X509v3 Authority Key Identifier:
                keyid:67:86:E7:9D:44:97:22:1E:47:15:B3:18:D4:CD:A9:1E:BF:9A:F7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6786E79D4497221E4715B318D4CDA91EBF9AF72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F1549B95023A5702E76DFD85B9BA1425A58ADC60085240CEC5641060C05DCC/0/323830333a323539303a3a2f33322d3332203d3e20323732393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2590::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:ea:26:41:25:ec:6b:ef:c6:c3:18:13:b7:ff:3b:7e:0b:
         e2:1e:5c:4c:a5:c5:1b:c0:cf:21:9f:6a:b0:02:e7:c4:ca:62:
         c6:dd:71:13:35:bd:21:c6:e6:48:e5:fb:a0:db:2a:f3:6b:7c:
         06:66:6c:30:99:13:cd:81:85:af:cc:c0:38:80:9f:80:51:7a:
         6b:ef:ff:f9:cc:d1:68:5a:5a:41:96:d2:35:55:a3:2c:f8:0f:
         42:dd:85:61:9b:7e:e2:e7:a5:37:88:4f:8a:bd:0a:23:b9:cc:
         f5:2c:94:6c:b1:fd:da:a2:63:b6:77:4a:06:cb:cf:fb:37:ad:
         01:dc:98:12:e7:8d:df:dc:89:5b:3b:d7:6f:6e:51:5b:5a:c4:
         b3:7b:a2:bd:c8:14:06:b3:17:d0:0e:b3:d6:fd:14:19:3c:6a:
         d9:eb:c4:c0:f1:62:72:68:c5:be:0e:c0:a6:77:95:a8:16:8b:
         b0:80:39:43:3e:d6:7c:d3:94:7f:e7:a8:75:bf:2c:30:48:44:
         f5:b8:7e:80:b7:d7:b6:b7:88:41:61:86:e7:05:97:49:ea:a0:
         db:51:52:61:89:87:8f:1b:ac:df:01:b1:57:8e:c2:80:d3:e0:
         b8:c4:a2:12:f9:ea:fc:d1:f0:b3:ec:c0:2b:7a:70:e8:dc:66:
         0a:eb:d7:b4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgITQVT7fYyJrjkAB1Ayf5Qyz/HMuDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2Nzg2RTc5RDQ0OTcyMjFFNDcxNUIzMThENENEQTkxRUJG
OUFGNzJDMB4XDTI2MDgxMDE2MTk1MloXDTI3MDgwOTE2MjQ1MlowMzExMC8GA1UE
AxMoOEQ0MjEzQkQ1ODc4RTNEOUJGOTRDMTZEMzQyQzgxRDMxNDEzOEY4RjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+jBBv2SYqW3eUIfFzRf45+RKsU
4eiJj1d7D2mUv9wEfhuH08CxZrh8f4tYNZ1YeFxpgAMr0shEPK3msHxvmXD3rtPI
v5mDbGHzRq0unVj84yW0+oR3ezL6WH1R3jFI1+2ZmL8+aAUCkMI38CqVPinoc4nJ
ZGY2k9EP0cHgUcqB/NxUvidG1OvAnhu9w4x9SoEI8ySU3zkiQgiOAaAJ4hHWQ0pV
3UDfVofAeKkqDBo1exm5SEHLCxp72i/6HsHgD1o0tfyI2nS99wRMtiH11p3jm5fw
sObG1A5kprMoVfrJAEBkhyii2/lEmSeTu0N1ImUe37FB/ao8x2LRm62/J/sCAwEA
AaOCAskwggLFMB0GA1UdDgQWBBSNQhO9WHjj2b+UwW00LIHTFBOPjzAfBgNVHSME
GDAWgBRnhuedRJciHkcVsxjUzakev5r3LDAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljL0Q1RjE1NDlCOTUwMjNBNTcwMkU3NkRGRDg1QjlCQTE0MjVB
NThBREM2MDA4NTI0MENFQzU2NDEwNjBDMDVEQ0MvMC82Nzg2RTc5RDQ0OTcyMjFF
NDcxNUIzMThENENEQTkxRUJGOUFGNzJDLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzY3ODZFNzlENDQ5NzIyMUU0NzE1
QjMxOEQ0Q0RBOTFFQkY5QUY3MkMuY2VyMIHHBggrBgEFBQcBCwSBujCBtzCBtAYI
KwYBBQUHMAuGgadyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENUYxNTQ5Qjk1MDIzQTU3MDJFNzZERkQ4NUI5QkExNDI1QTU4QURDNjAw
ODUyNDBDRUM1NjQxMDYwQzA1RENDLzAvMzIzODMwMzMzYTMyMzUzOTMwM2EzYTJm
MzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMyMzkzNjM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMlkDAN
BgkqhkiG9w0BAQsFAAOCAQEAe6PqJkEl7GvvxsMYE7f/O34L4h5cTKXFG8DPIZ9q
sALnxMpixt1xEzW9IcbmSOX7oNsq82t8BmZsMJkTzYGFr8zAOICfgFF6a+//+czR
aFpaQZbSNVWjLPgPQt2FYZt+4uelN4hPir0KI7nM9SyUbLH92qJjtndKBsvP+zet
AdyYEueN39yJWzvXb25RW1rEs3uivcgUBrMX0A6z1v0UGTxq2evEwPFicmjFvg7A
pneVqBaLsIA5Qz7WfNOUf+eodb8sMEhE9bh+gLfXtreIQWGG5wWXSeqg21FSYYmH
jxus3wGxV47CgNPguMSiEvnq/NHws+zAK3pw6NxmCuvXtA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:26:02 2026 by rpki-client