Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a3130303a3a2f34302d3438203d3e20323637383530.roa
File:                     323830333a656336303a3130303a3a2f34302d3438203d3e20323637383530.roa (raw, json)
Hash identifier:          gYjvihcujcsMEj8fqv/JQv43xn7y73JjIqZktTm2d3A=
Subject key identifier:   66:56:A2:1C:BE:CB:0E:07:98:5D:AD:57:CC:4B:41:74:84:DC:4A:EF
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       1388BF463770438A685D0A7004875569B3F245C0
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a3130303a3a2f34302d3438203d3e20323637383530.roa
Signing time:             Tue 26 May 2026 20:05:00 +0000
ROA not before:           Tue 26 May 2026 20:00:00 +0000
ROA not after:            Tue 25 May 2027 20:05:00 +0000
asID:                     267850
IP address blocks:        2803:ec60:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:88:bf:46:37:70:43:8a:68:5d:0a:70:04:87:55:69:b3:f2:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: May 26 20:00:00 2026 GMT
            Not After : May 25 20:05:00 2027 GMT
        Subject: CN=6656A21CBECB0E07985DAD57CC4B417484DC4AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:95:73:11:3a:26:88:c0:e7:dc:21:6b:5e:
                    68:40:6e:b5:56:14:b5:35:47:c3:80:2d:57:96:57:
                    3f:78:17:b8:d1:06:4c:d2:21:b1:79:15:28:f6:c1:
                    b4:98:b8:c7:fd:88:cb:cd:4c:e8:fe:d9:ba:ae:b5:
                    bb:c8:09:57:ee:25:4d:78:e3:73:ba:ab:35:b4:b4:
                    34:b6:10:1f:9c:c6:ad:63:40:a6:8c:7e:cf:d0:c3:
                    c5:0b:e0:e6:8b:49:cb:ed:97:24:2a:bb:59:61:2a:
                    f7:cc:e9:22:f0:78:be:76:bf:ba:0c:75:e2:2f:12:
                    03:eb:68:33:e3:ce:22:47:b0:2b:02:39:3b:7f:cf:
                    fc:f2:68:3b:34:de:ef:3d:42:35:42:74:ac:a0:82:
                    b1:4f:3a:d3:42:f9:bc:ad:d8:d3:21:a8:62:fb:0c:
                    89:78:b6:ed:5a:35:95:1a:67:54:a4:c5:74:e9:3b:
                    25:bc:cd:db:a4:36:50:4d:a7:00:51:f3:c3:b5:14:
                    5b:91:60:51:76:52:c7:ba:1d:b2:23:81:5c:f4:4e:
                    96:88:e7:45:b0:9b:6e:26:e9:c4:cd:0c:54:3f:b6:
                    a6:88:d5:03:12:3c:92:a2:1d:3b:5c:11:64:bd:82:
                    a5:ad:3a:5d:63:c3:f1:16:39:6e:9e:5b:b3:6d:2b:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:A2:1C:BE:CB:0E:07:98:5D:AD:57:CC:4B:41:74:84:DC:4A:EF
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a3130303a3a2f34302d3438203d3e20323637383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:a8:29:fb:d1:5b:ba:f0:bb:2a:95:c0:e1:08:b7:e8:49:c8:
         23:43:61:33:16:ad:b0:fa:c8:d5:49:67:24:61:80:dc:c7:23:
         82:45:d8:04:0a:f3:c7:80:a6:99:80:3e:94:84:7d:c0:61:3a:
         05:b8:f2:a2:f1:13:9d:3d:8c:98:44:d1:0f:06:d7:8d:6e:a3:
         36:df:42:74:f2:af:8e:82:8f:20:f7:9a:ae:69:cd:54:67:50:
         9e:a6:80:6d:a2:a6:69:e4:02:83:ba:9f:a3:19:ea:a4:aa:9b:
         38:d1:bc:b6:39:e4:0d:61:7c:55:5e:ea:95:24:50:66:27:17:
         be:dc:76:df:47:bf:eb:85:2e:8f:d0:a9:83:d2:43:08:20:fc:
         62:06:ca:14:fd:60:25:f3:ca:73:ea:9c:61:5f:89:31:29:46:
         ea:33:ff:43:6e:09:63:9e:f5:7d:32:ca:69:05:d9:bb:c5:d8:
         2d:95:da:4d:87:21:d9:f2:ab:ba:89:12:01:98:5d:17:48:de:
         62:3b:6a:aa:79:a1:6b:37:d6:90:25:9c:1a:47:b3:ec:a6:0b:
         93:7a:c3:98:2f:5b:ce:98:27:30:26:ad:72:9d:21:b0:20:e6:
         a6:d2:b0:15:ee:70:50:64:ae:6a:83:a3:e4:11:d4:8e:17:13:
         eb:b0:b2:8a
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUE4i/RjdwQ4poXQpwBIdVabPyRcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNjA1MjYyMDAwMDBaFw0yNzA1MjUyMDA1MDBaMDMxMTAvBgNV
BAMTKDY2NTZBMjFDQkVDQjBFMDc5ODVEQUQ1N0NDNEI0MTc0ODREQzRBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWJVzETomiMDn3CFrXmhAbrVW
FLU1R8OALVeWVz94F7jRBkzSIbF5FSj2wbSYuMf9iMvNTOj+2bqutbvICVfuJU14
43O6qzW0tDS2EB+cxq1jQKaMfs/Qw8UL4OaLScvtlyQqu1lhKvfM6SLweL52v7oM
deIvEgPraDPjziJHsCsCOTt/z/zyaDs03u89QjVCdKyggrFPOtNC+byt2NMhqGL7
DIl4tu1aNZUaZ1SkxXTpOyW8zdukNlBNpwBR88O1FFuRYFF2Use6HbIjgVz0TpaI
50Wwm24m6cTNDFQ/tqaI1QMSPJKiHTtcEWS9gqWtOl1jw/EWOW6eW7NtK9bRAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUZlaiHL7LDgeYXa1XzEtBdITcSu8wHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzMyMzgzMDMzM2E2NTYzMzYzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNjM3MzgzNTMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPsYAEwDQYJKoZIhvcNAQELBQADggEBAMioKfvRW7rwuyqVwOEIt+hJyCND
YTMWrbD6yNVJZyRhgNzHI4JF2AQK88eAppmAPpSEfcBhOgW48qLxE509jJhE0Q8G
141uozbfQnTyr46CjyD3mq5pzVRnUJ6mgG2ipmnkAoO6n6MZ6qSqmzjRvLY55A1h
fFVe6pUkUGYnF77cdt9Hv+uFLo/QqYPSQwgg/GIGyhT9YCXzynPqnGFfiTEpRuoz
/0NuCWOe9X0yymkF2bvF2C2V2k2HIdnyq7qJEgGYXRdI3mI7aqp5oWs31pAlnBpH
s+ymC5N6w5gvW86YJzAmrXKdIbAg5qbSsBXucFBkrmqDo+QR1I4XE+uwsoo=
-----END CERTIFICATE-----
Generated at Sat May 30 00:02:02 2026 by rpki-client