Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/323830333a323464303a3a2f33322d3438203d3e20323734303039.roa
File:                     323830333a323464303a3a2f33322d3438203d3e20323734303039.roa (raw, json)
Hash identifier:          tYDoKX+U+LfUaiax3lRlT6d9uz7ZQeBimqBuGrNj3VM=
Subject key identifier:   D8:75:B3:87:02:4F:6F:86:5B:AC:79:7C:FB:7F:5D:06:B6:A3:13:0D
Certificate issuer:       /CN=3D1421E221C443B38363B942ED06EC19E7BF35D2
Certificate serial:       420E42EF8009FFB3EFB3F2FAD95A2A7047F237F6
Authority key identifier: 3D:14:21:E2:21:C4:43:B3:83:63:B9:42:ED:06:EC:19:E7:BF:35:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/323830333a323464303a3a2f33322d3438203d3e20323734303039.roa
Signing time:             Sat 18 Apr 2026 01:20:00 +0000
ROA not before:           Sat 18 Apr 2026 01:15:00 +0000
ROA not after:            Sat 17 Apr 2027 01:20:00 +0000
asID:                     274009
IP address blocks:        2803:24d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Apr 2026 18:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0e:42:ef:80:09:ff:b3:ef:b3:f2:fa:d9:5a:2a:70:47:f2:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D1421E221C443B38363B942ED06EC19E7BF35D2
        Validity
            Not Before: Apr 18 01:15:00 2026 GMT
            Not After : Apr 17 01:20:00 2027 GMT
        Subject: CN=D875B387024F6F865BAC797CFB7F5D06B6A3130D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:42:c8:27:f2:9f:af:a8:87:cb:09:60:16:
                    26:33:4c:f4:14:2a:0c:7a:ff:55:a1:0d:8f:b3:70:
                    ca:15:28:30:a2:7a:bf:90:48:7f:4e:4b:b5:18:4d:
                    17:68:81:8b:ac:46:98:7c:f4:ac:60:a9:13:64:c9:
                    73:7a:ac:bf:ac:8f:2c:85:a2:9d:7d:7a:27:13:b1:
                    ec:59:0f:3e:6f:e2:95:2e:65:1e:e5:6c:3e:00:d3:
                    22:c3:8b:42:0d:9d:aa:17:14:9a:f1:0e:98:9b:60:
                    d7:51:bc:0f:95:6b:e0:84:0d:7a:93:22:de:66:76:
                    d1:51:c6:31:ab:18:82:20:09:f1:af:9f:62:e6:94:
                    2b:ea:4e:f5:63:24:ad:85:be:2d:bf:9c:06:0d:0d:
                    4f:64:67:77:1b:28:17:e1:ba:a0:84:f1:4b:c2:1d:
                    05:03:23:49:f6:6d:80:26:32:bf:05:cb:22:eb:1f:
                    62:ce:e7:2e:53:22:b9:76:5f:33:3c:b5:2d:62:26:
                    5f:26:f7:11:1e:c3:fe:b1:62:9a:7c:01:77:16:cd:
                    84:a6:3d:cb:58:5f:99:89:a7:a2:7f:1b:9c:7f:0d:
                    2c:24:78:30:77:13:aa:ae:89:d1:c4:08:b3:1b:7e:
                    b1:86:cc:89:bc:ff:95:c2:21:85:da:2e:a3:c9:59:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:B3:87:02:4F:6F:86:5B:AC:79:7C:FB:7F:5D:06:B6:A3:13:0D
            X509v3 Authority Key Identifier:
                keyid:3D:14:21:E2:21:C4:43:B3:83:63:B9:42:ED:06:EC:19:E7:BF:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D1421E221C443B38363B942ED06EC19E7BF35D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F1D76ADF49C619CBEA8C2D9555C67217F196C5E61D2C7351F1C1BEE3762A2A3/0/323830333a323464303a3a2f33322d3438203d3e20323734303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:38:48:16:c9:9f:70:be:b1:bf:69:30:41:4a:98:7c:69:
         90:3e:ad:dc:6c:da:0e:ec:94:6b:f0:6c:90:6e:5b:bb:14:f4:
         87:98:50:cb:c4:05:80:5c:90:a5:51:df:8b:b8:34:b1:a8:b4:
         a8:e7:2e:3d:32:6e:3a:10:bc:10:2a:a0:c5:e0:bf:0e:f8:4e:
         55:6c:b9:e4:d6:3f:cc:7b:7f:51:07:53:6e:f4:85:86:5b:fe:
         4a:52:b8:4a:99:18:52:1d:9f:95:df:29:87:bb:99:8f:32:ac:
         3b:dd:4d:da:19:77:c5:c0:fe:17:e5:07:f0:28:f6:7a:0d:07:
         dc:9f:17:17:ab:ca:61:84:03:5b:d3:12:46:bf:3e:90:f9:a0:
         f0:67:5d:92:4f:37:a3:3f:1a:00:c6:06:04:82:26:c9:d6:e4:
         64:63:bf:b9:6a:2f:92:1c:f8:68:ea:52:42:cc:c8:5e:2e:ee:
         70:b7:de:55:ae:9d:de:00:79:21:0d:9d:4e:68:9a:32:9a:b6:
         72:3b:45:2f:c2:8c:04:85:f7:a3:de:18:3c:2f:be:25:78:fa:
         3c:65:dd:88:62:c0:a4:2a:58:52:4b:11:b7:d9:1b:b6:3c:aa:
         2f:4c:a8:79:71:71:1a:c5:9c:16:8e:10:4f:20:2a:95:45:10:
         5a:d7:c6:b1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQg5C74AJ/7Pvs/L62VoqcEfyN/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QxNDIxRTIyMUM0NDNCMzgzNjNCOTQyRUQwNkVDMTlF
N0JGMzVEMjAeFw0yNjA0MTgwMTE1MDBaFw0yNzA0MTcwMTIwMDBaMDMxMTAvBgNV
BAMTKEQ4NzVCMzg3MDI0RjZGODY1QkFDNzk3Q0ZCN0Y1RDA2QjZBMzEzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKkLIJ/Kfr6iHywlgFiYzTPQU
Kgx6/1WhDY+zcMoVKDCier+QSH9OS7UYTRdogYusRph89KxgqRNkyXN6rL+sjyyF
op19eicTsexZDz5v4pUuZR7lbD4A0yLDi0INnaoXFJrxDpibYNdRvA+Va+CEDXqT
It5mdtFRxjGrGIIgCfGvn2LmlCvqTvVjJK2Fvi2/nAYNDU9kZ3cbKBfhuqCE8UvC
HQUDI0n2bYAmMr8FyyLrH2LO5y5TIrl2XzM8tS1iJl8m9xEew/6xYpp8AXcWzYSm
PctYX5mJp6J/G5x/DSwkeDB3E6quidHECLMbfrGGzIm8/5XCIYXaLqPJWXtlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU2HWzhwJPb4ZbrHl8+39dBrajEw0wHwYDVR0j
BBgwFoAUPRQh4iHEQ7ODY7lC7QbsGee/NdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjFENzZBREY0OUM2MTlDQkVBOEMyRDk1NTVDNjcyMTdG
MTk2QzVFNjFEMkM3MzUxRjFDMUJFRTM3NjJBMkEzLzAvM0QxNDIxRTIyMUM0NDNC
MzgzNjNCOTQyRUQwNkVDMTlFN0JGMzVEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDE0MjFFMjIxQzQ0M0IzODM2
M0I5NDJFRDA2RUMxOUU3QkYzNUQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxRDc2QURGNDlDNjE5Q0JFQThDMkQ5NTU1QzY3MjE3RjE5NkM1RTYx
RDJDNzM1MUYxQzFCRUUzNzYyQTJBMy8wLzMyMzgzMDMzM2EzMjM0NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJNAw
DQYJKoZIhvcNAQELBQADggEBAIO5OEgWyZ9wvrG/aTBBSph8aZA+rdxs2g7slGvw
bJBuW7sU9IeYUMvEBYBckKVR34u4NLGotKjnLj0ybjoQvBAqoMXgvw74TlVsueTW
P8x7f1EHU270hYZb/kpSuEqZGFIdn5XfKYe7mY8yrDvdTdoZd8XA/hflB/Ao9noN
B9yfFxerymGEA1vTEka/PpD5oPBnXZJPN6M/GgDGBgSCJsnW5GRjv7lqL5Ic+Gjq
UkLMyF4u7nC33lWund4AeSENnU5omjKatnI7RS/CjASF96PeGDwvviV4+jxl3Yhi
wKQqWFJLEbfZG7Y8qi9MqHlxcRrFnBaOEE8gKpVFEFrXxrE=
-----END CERTIFICATE-----
Generated at Wed Apr 22 15:12:09 2026 by rpki-client