Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/323830333a613635303a3a2f33322d3438203d3e20323733313938.roa
File:                     323830333a613635303a3a2f33322d3438203d3e20323733313938.roa (raw, json)
Hash identifier:          6o1c3G65C/bDRK/QugrRGIoS5FwAIjYvVuug+7t/mq0=
Subject key identifier:   94:FB:BC:39:7F:89:34:08:22:D8:BA:E1:49:0F:5C:00:2A:D9:A8:7C
Certificate issuer:       /CN=A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2
Certificate serial:       27AB0DBAC79EF161EE35AB50177CABA249359563
Authority key identifier: A5:5E:01:CA:27:AC:DA:0D:06:2E:E9:CE:25:EF:E4:70:BC:BD:9E:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/323830333a613635303a3a2f33322d3438203d3e20323733313938.roa
Signing time:             Wed 05 Aug 2026 21:10:00 +0000
ROA not before:           Wed 05 Aug 2026 21:05:00 +0000
ROA not after:            Wed 04 Aug 2027 21:10:00 +0000
asID:                     273198
IP address blocks:        2803:a650::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:0d:ba:c7:9e:f1:61:ee:35:ab:50:17:7c:ab:a2:49:35:95:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2
        Validity
            Not Before: Aug  5 21:05:00 2026 GMT
            Not After : Aug  4 21:10:00 2027 GMT
        Subject: CN=94FBBC397F89340822D8BAE1490F5C002AD9A87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:99:c8:bb:f4:fc:44:6f:d9:48:77:5a:d3:
                    44:97:3e:79:c3:9d:80:c0:6b:a1:4c:8c:ea:1c:b1:
                    41:18:85:5d:e4:bb:a0:d6:9a:60:db:53:50:0f:2e:
                    98:62:eb:16:c9:de:48:c9:79:ff:be:ec:f4:82:74:
                    c7:0b:52:5d:69:da:d7:d7:cd:b0:f9:98:c8:87:d5:
                    6c:78:3c:1f:07:e3:e7:d9:7b:4c:65:fd:2e:4f:e3:
                    33:7a:a0:2b:2d:9b:22:38:6f:d3:14:96:c2:65:db:
                    76:a6:f8:9e:98:07:5a:73:74:9f:2f:87:e2:da:17:
                    ec:88:1e:f3:b5:5d:f0:ce:bf:c5:f8:b7:79:4a:61:
                    26:2d:44:f6:57:13:3f:09:09:a5:c2:d3:e5:81:1e:
                    d6:9d:98:af:6b:84:e6:e1:45:71:1e:68:8a:82:37:
                    1a:d6:df:ad:ce:be:ee:fa:67:cc:ce:f4:e4:23:8b:
                    00:5e:bf:d7:4b:cb:31:42:9c:36:3c:65:7b:df:7a:
                    a8:3a:0d:51:0d:24:44:8d:8d:75:2f:31:03:93:11:
                    5c:c9:0e:a7:80:59:47:55:14:20:a2:44:9b:24:2e:
                    58:47:ca:bc:2b:eb:7a:85:d0:88:f9:68:88:6a:7a:
                    c5:7c:58:b3:bd:ea:50:b2:6f:b1:0d:82:f0:a8:a0:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:BC:39:7F:89:34:08:22:D8:BA:E1:49:0F:5C:00:2A:D9:A8:7C
            X509v3 Authority Key Identifier:
                keyid:A5:5E:01:CA:27:AC:DA:0D:06:2E:E9:CE:25:EF:E4:70:BC:BD:9E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A55E01CA27ACDA0D062EE9CE25EFE470BCBD9ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02D911B557D86DE4FE8BCD65652627233F3580F404A456C97C056A0A4ABA0ADA/0/323830333a613635303a3a2f33322d3438203d3e20323733313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a650::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:67:a1:4d:64:15:c6:1c:9e:81:ad:2f:8f:fd:74:26:52:
         80:63:19:42:e6:d1:c2:0e:67:62:76:c9:0e:80:ce:a6:77:7c:
         02:90:f1:d4:43:c5:28:61:15:4b:b1:8c:72:7c:bd:48:cf:3e:
         27:2d:d3:28:bf:8e:fe:bc:82:c0:75:1a:9d:53:85:69:be:ec:
         d7:0b:0e:bc:9e:28:98:9f:74:22:25:89:c4:e7:cb:cb:92:84:
         be:75:08:69:e3:ea:7f:8c:5f:fe:3e:52:21:19:82:1d:75:1f:
         fc:f2:8e:8d:53:90:6f:b5:eb:58:9b:fa:ce:dc:39:12:30:3f:
         cd:75:57:19:3c:5b:6c:c4:6b:6d:fc:47:d4:12:17:15:4b:39:
         15:04:cd:78:59:8a:67:7e:99:6f:82:25:6d:97:b4:90:7d:9a:
         08:9d:ac:6c:ce:1d:e1:e9:e5:f6:d9:79:1a:c2:ff:7b:7c:53:
         8b:56:8c:b5:5d:c7:be:9c:ed:df:57:56:7f:eb:b3:e4:0f:32:
         77:6d:82:0c:b6:5c:ed:11:cd:f6:93:42:20:b8:b7:bb:3e:f5:
         e7:8d:97:f1:78:51:58:f0:7e:ea:b3:e7:f4:24:05:5e:35:4c:
         46:75:10:eb:9d:bd:2b:17:0c:ac:d7:0e:80:da:c9:e5:91:31:
         7f:18:f2:13
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJ6sNusee8WHuNatQF3yrokk1lWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RTAxQ0EyN0FDREEwRDA2MkVFOUNFMjVFRkU0NzBC
Q0JEOUVEMjAeFw0yNjA4MDUyMTA1MDBaFw0yNzA4MDQyMTEwMDBaMDMxMTAvBgNV
BAMTKDk0RkJCQzM5N0Y4OTM0MDgyMkQ4QkFFMTQ5MEY1QzAwMkFEOUE4N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbJnIu/T8RG/ZSHda00SXPnnD
nYDAa6FMjOocsUEYhV3ku6DWmmDbU1APLphi6xbJ3kjJef++7PSCdMcLUl1p2tfX
zbD5mMiH1Wx4PB8H4+fZe0xl/S5P4zN6oCstmyI4b9MUlsJl23am+J6YB1pzdJ8v
h+LaF+yIHvO1XfDOv8X4t3lKYSYtRPZXEz8JCaXC0+WBHtadmK9rhObhRXEeaIqC
NxrW363Ovu76Z8zO9OQjiwBev9dLyzFCnDY8ZXvfeqg6DVENJESNjXUvMQOTEVzJ
DqeAWUdVFCCiRJskLlhHyrwr63qF0Ij5aIhqesV8WLO96lCyb7ENgvCooNEnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUlPu8OX+JNAgi2LrhSQ9cACrZqHwwHwYDVR0j
BBgwFoAUpV4Byies2g0GLunOJe/kcLy9ntIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMkQ5MTFCNTU3RDg2REU0RkU4QkNENjU2NTI2MjcyMzNG
MzU4MEY0MDRBNDU2Qzk3QzA1NkEwQTRBQkEwQURBLzAvQTU1RTAxQ0EyN0FDREEw
RDA2MkVFOUNFMjVFRkU0NzBCQ0JEOUVEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTVFMDFDQTI3QUNEQTBEMDYy
RUU5Q0UyNUVGRTQ3MEJDQkQ5RUQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDJEOTExQjU1N0Q4NkRFNEZFOEJDRDY1NjUyNjI3MjMzRjM1ODBGNDA0
QTQ1NkM5N0MwNTZBMEE0QUJBMEFEQS8wLzMyMzgzMDMzM2E2MTM2MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDplAw
DQYJKoZIhvcNAQELBQADggEBALcxZ6FNZBXGHJ6BrS+P/XQmUoBjGULm0cIOZ2J2
yQ6AzqZ3fAKQ8dRDxShhFUuxjHJ8vUjPPict0yi/jv68gsB1Gp1ThWm+7NcLDrye
KJifdCIlicTny8uShL51CGnj6n+MX/4+UiEZgh11H/zyjo1TkG+161ib+s7cORIw
P811Vxk8W2zEa238R9QSFxVLORUEzXhZimd+mW+CJW2XtJB9mgidrGzOHeHp5fbZ
eRrC/3t8U4tWjLVdx76c7d9XVn/rs+QPMndtggy2XO0RzfaTQiC4t7s+9eeNl/F4
UVjwfuqz5/QkBV41TEZ1EOudvSsXDKzXDoDayeWRMX8Y8hM=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:17 2026 by rpki-client