Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa
File:                     323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          8G22RqnZAlDwOtcQnrWZh1ER41mS1d8MyHJa2vLAF4I=
Subject key identifier:   E8:C8:1E:54:22:D9:CD:14:F1:97:55:3B:4D:02:9E:34:F1:79:4A:58
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       7037DF8CEE149E0CFEB0D11563DD877D28504494
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa
Signing time:             Fri 10 Apr 2026 17:38:26 +0000
ROA not before:           Fri 10 Apr 2026 17:33:26 +0000
ROA not after:            Fri 09 Apr 2027 17:38:26 +0000
asID:                     270095
IP address blocks:        2803:87e0:c002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:37:df:8c:ee:14:9e:0c:fe:b0:d1:15:63:dd:87:7d:28:50:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Apr 10 17:33:26 2026 GMT
            Not After : Apr  9 17:38:26 2027 GMT
        Subject: CN=E8C81E5422D9CD14F197553B4D029E34F1794A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:6b:5d:d2:65:c7:d3:77:31:73:7c:3e:74:
                    1e:d9:e3:b5:47:54:b0:da:79:5f:19:6e:8a:a1:b7:
                    45:39:01:8d:26:79:9b:1c:d2:d1:07:3b:cd:74:6d:
                    0e:ef:47:72:6c:30:90:40:f8:d9:c2:a8:c9:02:c3:
                    ce:5c:c6:3d:59:5b:21:af:bd:64:03:a3:18:02:f5:
                    2b:f2:0b:65:19:d3:ba:e5:fc:37:9c:18:b9:47:98:
                    2a:45:9d:88:31:46:94:ec:59:9e:06:53:d7:7b:cc:
                    c3:49:2a:9b:fa:8b:cc:ac:2c:69:8a:9b:35:10:fe:
                    67:24:b8:83:3d:5d:c5:dc:f9:5b:91:13:45:96:04:
                    8b:7e:25:46:51:1f:d2:47:cd:40:56:8e:14:35:50:
                    2d:87:bc:7a:e4:ba:23:86:6a:df:fa:d2:ab:1c:b4:
                    9b:d1:f6:1e:23:de:23:8e:4a:26:d8:6c:76:3e:46:
                    f3:a6:b9:03:ea:f1:7e:f1:09:46:29:e1:69:58:c3:
                    c2:95:a9:1e:90:c7:30:59:57:d2:c8:6c:ec:36:44:
                    54:cb:08:f6:7c:93:c1:74:51:c9:1e:a7:eb:d4:80:
                    12:4c:a2:92:13:bb:18:d1:84:9a:0c:b9:cc:18:03:
                    d8:c3:7e:bf:08:d9:ff:ba:1e:5f:b1:71:06:a1:45:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:1E:54:22:D9:CD:14:F1:97:55:3B:4D:02:9E:34:F1:79:4A:58
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:74:92:c6:8b:28:20:ff:2f:42:fa:d6:38:cb:c0:4b:48:
         d5:82:9d:9f:1f:9e:cb:c2:15:10:3f:5e:1b:c6:54:f6:f8:fd:
         c9:46:04:b9:f0:1c:a6:6f:0a:ae:23:71:d0:8b:06:11:c9:8d:
         1e:91:65:ce:89:64:ca:08:f7:53:32:28:e2:c6:71:18:7b:81:
         80:ba:2e:52:ec:5e:32:ff:c8:14:92:3d:6e:5d:c9:3c:20:b0:
         8b:8d:cf:9f:03:b3:f2:45:f6:c7:67:93:31:19:ea:87:81:68:
         9d:f3:21:b3:ef:4c:44:a2:21:e7:f2:c7:03:1c:9b:81:2a:65:
         75:65:8d:67:d3:78:0c:a5:ee:ad:dd:df:ed:e7:c7:44:ce:88:
         da:c1:3a:30:e7:0e:3a:87:c7:20:db:6c:2b:65:8c:e7:eb:8b:
         53:1e:e8:c9:df:71:69:44:f3:83:9b:f6:68:74:d3:d1:c1:0b:
         f3:4c:d1:cf:f7:03:cc:fb:50:52:f5:77:5b:1d:3a:33:78:3a:
         a5:db:3c:ba:89:68:30:3e:65:d2:da:e4:e3:7d:66:be:c6:13:
         2a:c3:da:33:f8:88:82:a4:33:d9:40:46:4b:1d:5e:e5:ed:49:
         8e:3b:b1:3d:18:8e:ba:d5:d7:80:09:2d:ae:81:56:27:5b:f0:
         ac:79:f1:df
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUcDffjO4Ungz+sNEVY92HfShQRJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhBMTg3MzM5OTk2ODU5MjFFQkI5MkQyNkJFMzk3NDY5
NDUxQUY4QjAeFw0yNjA0MTAxNzMzMjZaFw0yNzA0MDkxNzM4MjZaMDMxMTAvBgNV
BAMTKEU4QzgxRTU0MjJEOUNEMTRGMTk3NTUzQjREMDI5RTM0RjE3OTRBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDWtd0mXH03cxc3w+dB7Z47VH
VLDaeV8Zboqht0U5AY0meZsc0tEHO810bQ7vR3JsMJBA+NnCqMkCw85cxj1ZWyGv
vWQDoxgC9SvyC2UZ07rl/DecGLlHmCpFnYgxRpTsWZ4GU9d7zMNJKpv6i8ysLGmK
mzUQ/mckuIM9XcXc+VuRE0WWBIt+JUZRH9JHzUBWjhQ1UC2HvHrkuiOGat/60qsc
tJvR9h4j3iOOSibYbHY+RvOmuQPq8X7xCUYp4WlYw8KVqR6QxzBZV9LIbOw2RFTL
CPZ8k8F0Uckep+vUgBJMopITuxjRhJoMucwYA9jDfr8I2f+6Hl+xcQahRYtRAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU6MgeVCLZzRTxl1U7TQKeNPF5SlgwHwYDVR0j
BBgwFoAU2KGHM5mWhZIeu5LSa+OXRpRRr4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTE4QTJEOURCN0JBNUVDMTE4QUIzODU4QUZGNjJFNkMy
MUM3NjlDRDgzOTAwN0MzODQ0MzU5NzkwQ0FCMDU2LzAvRDhBMTg3MzM5OTk2ODU5
MjFFQkI5MkQyNkJFMzk3NDY5NDUxQUY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEExODczMzk5OTY4NTkyMUVC
QjkyRDI2QkUzOTc0Njk0NTFBRjhCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExOEEyRDlEQjdCQTVFQzExOEFCMzg1OEFGRjYyRTZDMjFDNzY5Q0Q4
MzkwMDdDMzg0NDM1OTc5MENBQjA1Ni8wLzMyMzgzMDMzM2EzODM3NjUzMDNhNjMz
MDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzAzMDM5MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA4fgwAIwDQYJKoZIhvcNAQELBQADggEBAB2ldJLGiygg/y9C+tY4y8BL
SNWCnZ8fnsvCFRA/XhvGVPb4/clGBLnwHKZvCq4jcdCLBhHJjR6RZc6JZMoI91My
KOLGcRh7gYC6LlLsXjL/yBSSPW5dyTwgsIuNz58Ds/JF9sdnkzEZ6oeBaJ3zIbPv
TESiIefyxwMcm4EqZXVljWfTeAyl7q3d3+3nx0TOiNrBOjDnDjqHxyDbbCtljOfr
i1Me6MnfcWlE84Ob9mh009HBC/NM0c/3A8z7UFL1d1sdOjN4OqXbPLqJaDA+ZdLa
5ON9Zr7GEyrD2jP4iIKkM9lARksdXuXtSY47sT0YjrrV14AJLa6BVidb8Kx58d8=
-----END CERTIFICATE-----
Generated at Thu Apr 30 06:37:12 2026 by rpki-client