Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa
File:                     323830333a613736303a3a2f33322d3438203d3e20323639383535.roa (raw, json)
Hash identifier:          8ieHTHmI8mSyOpugxA61UpuW3iO/7pOTJILIOPyXeC0=
Subject key identifier:   8F:02:C8:6C:32:86:5F:F2:1A:DB:FA:D4:A2:FA:79:DF:93:AE:C5:5F
Certificate issuer:       /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
Certificate serial:       18F6A3A87738667F8B6037A0ABBB7E7C02EE05B4
Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa
Signing time:             Mon 27 Jul 2026 01:47:12 +0000
ROA not before:           Mon 27 Jul 2026 01:42:12 +0000
ROA not after:            Mon 26 Jul 2027 01:47:12 +0000
asID:                     269855
IP address blocks:        2803:a760::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f6:a3:a8:77:38:66:7f:8b:60:37:a0:ab:bb:7e:7c:02:ee:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
        Validity
            Not Before: Jul 27 01:42:12 2026 GMT
            Not After : Jul 26 01:47:12 2027 GMT
        Subject: CN=8F02C86C32865FF21ADBFAD4A2FA79DF93AEC55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:e6:55:5c:12:36:c6:09:3d:69:d9:c9:78:
                    4c:bc:8c:6a:34:f8:18:db:2e:91:68:92:ca:8a:f0:
                    57:31:d3:37:0b:33:a1:c1:2e:51:78:7b:ff:a3:59:
                    7f:3b:93:46:96:68:aa:db:d6:a0:49:e1:22:a5:5e:
                    2e:01:1e:1a:b4:ea:f4:77:25:27:d1:70:0f:14:11:
                    17:de:ff:e2:73:2a:e3:09:83:0b:3d:98:15:f8:2d:
                    48:f9:cc:fe:e7:6b:e4:9a:e6:45:e1:42:45:d6:3a:
                    57:6c:86:d2:03:77:c9:83:a8:84:d7:d8:d8:bd:8b:
                    35:35:14:64:bf:72:5c:80:43:24:72:86:4e:0f:d0:
                    83:16:ce:e4:3b:29:07:e6:cc:a1:54:39:df:d3:0e:
                    8e:d5:28:49:31:f4:d8:5e:3b:5d:e5:c7:e9:ec:7d:
                    be:d4:0c:b3:75:df:64:38:2b:4f:91:0b:03:d9:60:
                    56:26:3d:6a:f8:c9:6a:13:3b:10:5d:29:cd:08:19:
                    21:e9:91:f0:6a:78:1e:6b:61:7a:cb:7e:99:ce:a9:
                    69:fa:4b:48:fc:75:d0:a9:e1:71:88:25:3a:99:7b:
                    e5:ee:01:8d:53:57:d6:2a:83:7b:a0:d4:18:e4:c9:
                    75:9b:95:c3:0f:72:d9:53:e2:6a:28:9f:5b:a4:e5:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:C8:6C:32:86:5F:F2:1A:DB:FA:D4:A2:FA:79:DF:93:AE:C5:5F
            X509v3 Authority Key Identifier:
                keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3438203d3e20323639383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a760::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:a2:e6:20:e3:b7:ca:ee:8b:29:ce:12:f4:b7:aa:6f:c7:
         fd:02:31:ca:4d:f0:98:18:77:4a:d6:d9:51:e0:70:5e:a2:79:
         31:fc:09:e6:8a:c0:fd:10:73:fa:64:61:8a:5c:13:7a:97:d2:
         6b:1e:06:b7:fd:ad:94:7f:70:32:ab:03:27:6e:6f:05:52:79:
         e2:68:9c:64:eb:3b:de:16:dd:bb:76:44:72:0e:36:86:bc:4c:
         f5:cb:33:d0:c6:ac:70:67:1d:85:c0:83:9a:e6:20:bf:40:ec:
         3a:da:df:07:c8:e2:df:b6:bd:23:79:3c:af:bb:ed:e5:01:19:
         18:35:28:f0:72:8c:03:a3:b8:99:70:c3:e1:23:05:c6:cb:67:
         1c:07:ab:9d:c1:fb:8d:0f:a9:07:45:b6:13:b2:84:0e:cd:be:
         e4:97:f2:b7:06:ff:ef:ed:2b:48:df:41:c4:67:ec:43:43:ce:
         de:26:69:6b:d5:ae:6e:66:8e:55:45:1b:71:ce:2c:6c:9e:8a:
         c1:47:f5:fe:18:15:6b:9f:b4:82:4e:64:1d:89:a4:27:5d:0f:
         ff:0b:f7:1b:50:c0:0a:fd:16:37:a2:32:38:cd:c3:c5:b2:cd:
         be:b0:87:14:28:4b:56:0f:31:19:47:13:ea:ca:36:f9:e1:75:
         1d:99:dd:db
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGPajqHc4Zn+LYDegq7t+fALuBbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRCRDVFNjQ0NUIxOEE0OUMwNzAzNzM3NjRFMjIxRkUy
RkYwQkU4NTAeFw0yNjA3MjcwMTQyMTJaFw0yNzA3MjYwMTQ3MTJaMDMxMTAvBgNV
BAMTKDhGMDJDODZDMzI4NjVGRjIxQURCRkFENEEyRkE3OURGOTNBRUM1NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcReZVXBI2xgk9adnJeEy8jGo0
+BjbLpFoksqK8Fcx0zcLM6HBLlF4e/+jWX87k0aWaKrb1qBJ4SKlXi4BHhq06vR3
JSfRcA8UERfe/+JzKuMJgws9mBX4LUj5zP7na+Sa5kXhQkXWOldshtIDd8mDqITX
2Ni9izU1FGS/clyAQyRyhk4P0IMWzuQ7KQfmzKFUOd/TDo7VKEkx9NheO13lx+ns
fb7UDLN132Q4K0+RCwPZYFYmPWr4yWoTOxBdKc0IGSHpkfBqeB5rYXrLfpnOqWn6
S0j8ddCp4XGIJTqZe+XuAY1TV9Yqg3ug1BjkyXWblcMPctlT4moon1uk5ZR5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjwLIbDKGX/Ia2/rUovp535OuxV8wHwYDVR0j
BBgwFoAULb1eZEWxiknAcDc3ZOIh/i/wvoUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMTEyRjM0M0YxNDUyRTM2QThBMTU2MzczQTZERjRBMUYw
ODg1M0M2Mjk3NkRGQUI3NEMwMjA2ODE2MUU4RUE5LzAvMkRCRDVFNjQ0NUIxOEE0
OUMwNzAzNzM3NjRFMjIxRkUyRkYwQkU4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREJENUU2NDQ1QjE4QTQ5QzA3
MDM3Mzc2NEUyMjFGRTJGRjBCRTg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDExMkYzNDNGMTQ1MkUzNkE4QTE1NjM3M0E2REY0QTFGMDg4NTNDNjI5
NzZERkFCNzRDMDIwNjgxNjFFOEVBOS8wLzMyMzgzMDMzM2E2MTM3MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDp2Aw
DQYJKoZIhvcNAQELBQADggEBAEW5ouYg47fK7ospzhL0t6pvx/0CMcpN8JgYd0rW
2VHgcF6ieTH8CeaKwP0Qc/pkYYpcE3qX0mseBrf9rZR/cDKrAydubwVSeeJonGTr
O94W3bt2RHIONoa8TPXLM9DGrHBnHYXAg5rmIL9A7Dra3wfI4t+2vSN5PK+77eUB
GRg1KPByjAOjuJlww+EjBcbLZxwHq53B+40PqQdFthOyhA7NvuSX8rcG/+/tK0jf
QcRn7ENDzt4maWvVrm5mjlVFG3HOLGyeisFH9f4YFWuftIJOZB2JpCddD/8L9xtQ
wAr9FjeiMjjNw8Wyzb6whxQoS1YPMRlHE+rKNvnhdR2Z3ds=
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:09:27 2026 by rpki-client