Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/323830363a3437333a313030303a3a2f33362d3336203d3e20323734343339.roa
File:                     323830363a3437333a313030303a3a2f33362d3336203d3e20323734343339.roa (raw, json)
Hash identifier:          aWw9QMU88NTXa/uUwkYzYmZEWZ5XGL2M8qhSKGmwyzo=
Subject key identifier:   ED:AE:2F:09:65:A0:85:21:0B:7C:F6:B8:59:09:5B:5B:40:DE:2B:5B
Certificate issuer:       /CN=9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968
Certificate serial:       63D48F5F7401D0E564F509BCB7A9217A1D3B5B84
Authority key identifier: 9E:75:EF:0C:47:CE:68:4B:C9:0C:D1:FC:D4:CF:C3:D9:15:EE:69:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/323830363a3437333a313030303a3a2f33362d3336203d3e20323734343339.roa
Signing time:             Sat 12 Sep 2026 18:00:00 +0000
ROA not before:           Sat 12 Sep 2026 17:55:00 +0000
ROA not after:            Sat 11 Sep 2027 18:00:00 +0000
asID:                     274439
IP address blocks:        2806:473:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:8f:5f:74:01:d0:e5:64:f5:09:bc:b7:a9:21:7a:1d:3b:5b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968
        Validity
            Not Before: Sep 12 17:55:00 2026 GMT
            Not After : Sep 11 18:00:00 2027 GMT
        Subject: CN=EDAE2F0965A085210B7CF6B859095B5B40DE2B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:27:77:51:d5:c7:9a:3a:e0:40:63:3f:fd:
                    83:53:5c:c5:82:1d:ea:ed:80:55:24:9b:f2:ef:77:
                    01:06:33:35:7b:8b:4e:2b:56:de:cb:14:58:93:56:
                    d9:42:ea:81:7d:70:d4:d7:17:f1:8c:fd:3e:29:dd:
                    da:23:e0:2a:60:75:2f:62:c1:9f:73:cb:e5:75:17:
                    49:40:dd:4a:17:14:31:aa:17:15:71:44:e9:7c:e6:
                    46:f8:05:45:99:1d:a7:01:13:c6:84:b8:b3:14:9a:
                    ae:a5:6c:5f:fd:58:99:3d:bd:4e:cd:5e:c5:1b:d1:
                    a9:bf:bd:16:c3:f8:16:ba:22:b1:18:85:97:42:07:
                    a8:2e:32:fa:5f:18:53:9a:66:2e:b9:ed:42:2f:f1:
                    c5:fa:f0:7a:cc:e6:ac:e9:5e:b0:49:17:f9:0c:97:
                    85:4b:99:25:a2:62:81:d7:8d:a1:44:a1:2d:78:5f:
                    e7:1f:7b:e0:7c:f4:12:c3:8a:e7:4e:04:be:0e:6b:
                    4b:37:70:b9:ad:bb:67:5e:5a:fb:24:83:cd:79:13:
                    d0:ec:2d:9c:82:f4:b7:34:fe:40:c3:c7:9a:b0:8b:
                    bb:da:9b:eb:98:37:cb:4c:34:f7:1d:34:5f:cb:b9:
                    6a:17:7d:5e:6d:f2:cf:5a:bf:c7:8c:e1:98:fb:c6:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AE:2F:09:65:A0:85:21:0B:7C:F6:B8:59:09:5B:5B:40:DE:2B:5B
            X509v3 Authority Key Identifier:
                keyid:9E:75:EF:0C:47:CE:68:4B:C9:0C:D1:FC:D4:CF:C3:D9:15:EE:69:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E75EF0C47CE684BC90CD1FCD4CFC3D915EE6968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4176D4567015AD3C5C452DC420AF9EE4A11698434ABE00320F79A322173A3022/0/323830363a3437333a313030303a3a2f33362d3336203d3e20323734343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:473:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:99:d7:00:68:2e:d9:db:c8:0e:3c:b8:50:e5:bd:75:3e:f2:
         a1:71:da:6e:3f:a0:94:45:69:2c:03:de:c9:21:0a:d7:d3:5f:
         54:90:d2:cb:6e:b7:98:f3:b7:76:3e:0d:a5:b8:2b:79:c6:de:
         4b:9f:14:9b:e9:80:09:46:52:48:6c:4b:21:44:64:78:24:89:
         bf:6b:ef:c6:b4:52:e0:58:2d:30:91:2e:85:09:cd:7c:da:00:
         67:66:8e:c4:d1:0f:d4:42:21:36:d1:ab:4f:7f:8f:3d:c8:65:
         a1:ae:00:a8:c5:56:2e:6a:ab:bf:53:78:62:f7:a1:c0:6c:4e:
         ac:33:4d:a2:9e:aa:c0:2c:9a:53:07:fe:02:ef:0e:53:f1:b0:
         f4:3b:dd:28:b8:2d:ad:d1:ff:21:13:03:e6:2b:f0:b6:4e:a7:
         05:08:e4:4b:64:7c:29:67:e9:92:3b:63:91:55:aa:bb:22:67:
         fc:48:81:31:c0:c8:53:03:18:3e:f6:c5:ca:64:ea:52:f8:f6:
         a2:38:d3:00:c5:e4:9e:33:be:98:cb:2d:d7:f6:03:d3:ec:7d:
         45:fc:b8:94:df:87:10:48:41:8f:12:84:aa:75:76:86:41:f6:
         52:e5:88:72:ac:57:a0:32:26:27:47:c4:03:25:d4:3e:66:3c:
         40:71:6b:b2
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUY9SPX3QB0OVk9Qm8t6kheh07W4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3NUVGMEM0N0NFNjg0QkM5MENEMUZDRDRDRkMzRDkx
NUVFNjk2ODAeFw0yNjA5MTIxNzU1MDBaFw0yNzA5MTExODAwMDBaMDMxMTAvBgNV
BAMTKEVEQUUyRjA5NjVBMDg1MjEwQjdDRjZCODU5MDk1QjVCNDBERTJCNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/Cd3UdXHmjrgQGM//YNTXMWC
HertgFUkm/LvdwEGMzV7i04rVt7LFFiTVtlC6oF9cNTXF/GM/T4p3doj4CpgdS9i
wZ9zy+V1F0lA3UoXFDGqFxVxROl85kb4BUWZHacBE8aEuLMUmq6lbF/9WJk9vU7N
XsUb0am/vRbD+Ba6IrEYhZdCB6guMvpfGFOaZi657UIv8cX68HrM5qzpXrBJF/kM
l4VLmSWiYoHXjaFEoS14X+cfe+B89BLDiudOBL4Oa0s3cLmtu2deWvskg815E9Ds
LZyC9Lc0/kDDx5qwi7vam+uYN8tMNPcdNF/LuWoXfV5t8s9av8eM4Zj7xia1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU7a4vCWWghSELfPa4WQlbW0DeK1swHwYDVR0j
BBgwFoAUnnXvDEfOaEvJDNH81M/D2RXuaWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTc2RDQ1NjcwMTVBRDNDNUM0NTJEQzQyMEFGOUVFNEEx
MTY5ODQzNEFCRTAwMzIwRjc5QTMyMjE3M0EzMDIyLzAvOUU3NUVGMEM0N0NFNjg0
QkM5MENEMUZDRDRDRkMzRDkxNUVFNjk2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTc1RUYwQzQ3Q0U2ODRCQzkw
Q0QxRkNENENGQzNEOTE1RUU2OTY4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDE3NkQ0NTY3MDE1QUQzQzVDNDUyREM0MjBBRjlFRTRBMTE2OTg0MzRB
QkUwMDMyMEY3OUEzMjIxNzNBMzAyMi8wLzMyMzgzMDM2M2EzNDM3MzMzYTMxMzAz
MDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNzM0MzQzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAYEcxAwDQYJKoZIhvcNAQELBQADggEBABqZ1wBoLtnbyA48uFDlvXU+8qFx
2m4/oJRFaSwD3skhCtfTX1SQ0stut5jzt3Y+DaW4K3nG3kufFJvpgAlGUkhsSyFE
ZHgkib9r78a0UuBYLTCRLoUJzXzaAGdmjsTRD9RCITbRq09/jz3IZaGuAKjFVi5q
q79TeGL3ocBsTqwzTaKeqsAsmlMH/gLvDlPxsPQ73Si4La3R/yETA+Yr8LZOpwUI
5EtkfCln6ZI7Y5FVqrsiZ/xIgTHAyFMDGD72xcpk6lL49qI40wDF5J4zvpjLLdf2
A9PsfUX8uJTfhxBIQY8ShKp1doZB9lLliHKsV6AyJidHxAMl1D5mPEBxa7I=
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:26 2026 by rpki-client