Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/323830333a373363303a3a2f33322d3438203d3e20323635373434.roa
File:                     323830333a373363303a3a2f33322d3438203d3e20323635373434.roa (raw, json)
Hash identifier:          Tq7fi3f/L8UN+W+illJ4JxO1SZrV3zrOJ+H1lBNI6iw=
Subject key identifier:   F7:0D:D2:09:B5:76:A4:E9:92:8D:41:F4:8F:EF:81:77:C5:63:C2:71
Certificate issuer:       /CN=CDC1946824603CDCD1A987658D89AF548BEE0551
Certificate serial:       7C994B1DD1B58226BAAF8F1B15F8165AE38F4154
Authority key identifier: CD:C1:94:68:24:60:3C:DC:D1:A9:87:65:8D:89:AF:54:8B:EE:05:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/323830333a373363303a3a2f33322d3438203d3e20323635373434.roa
Signing time:             Thu 12 Mar 2026 15:45:00 +0000
ROA not before:           Thu 12 Mar 2026 15:40:00 +0000
ROA not after:            Thu 11 Mar 2027 15:45:00 +0000
asID:                     265744
IP address blocks:        2803:73c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:99:4b:1d:d1:b5:82:26:ba:af:8f:1b:15:f8:16:5a:e3:8f:41:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC1946824603CDCD1A987658D89AF548BEE0551
        Validity
            Not Before: Mar 12 15:40:00 2026 GMT
            Not After : Mar 11 15:45:00 2027 GMT
        Subject: CN=F70DD209B576A4E9928D41F48FEF8177C563C271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:23:3f:d9:8f:48:eb:0c:af:25:48:bf:c2:
                    e4:36:28:ae:d5:44:bf:fc:a6:61:03:63:5e:98:79:
                    0d:06:db:74:a7:2c:af:34:e0:3d:87:6a:53:90:ba:
                    2a:bb:10:de:76:cd:45:0a:09:96:ed:69:b0:09:7c:
                    97:7f:8c:9a:7b:ac:3b:fe:a5:da:9c:f7:c6:4f:e9:
                    60:1e:97:10:65:1f:7e:fd:40:e0:69:ec:cc:fd:c7:
                    5b:4d:01:3e:d6:8a:c0:e5:23:1e:b7:f5:6b:e7:1e:
                    2f:c0:d2:72:b2:32:db:5d:8a:49:33:d2:a5:09:d3:
                    56:0a:8a:44:75:fa:1d:09:f3:01:94:42:10:60:31:
                    c3:2c:aa:ac:eb:bf:3e:da:c3:a8:f5:43:5d:43:0e:
                    c8:d7:35:a5:10:11:7d:65:51:fb:28:61:e6:7f:e4:
                    f6:b5:9f:0a:0b:e0:ee:2b:53:cd:c0:f9:85:4b:0c:
                    1c:0f:bc:d0:7c:ae:9f:f0:58:5f:59:82:61:0b:71:
                    07:82:51:c1:5b:74:15:28:ac:1f:f7:c2:9b:70:89:
                    25:e1:04:2a:59:00:dd:53:dd:1d:05:89:1d:05:86:
                    8a:4d:91:fa:95:c0:d2:bd:9b:d2:5c:4c:1b:ae:71:
                    0a:31:4a:da:63:c0:b5:2a:a8:08:bf:fc:03:cc:0b:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:D2:09:B5:76:A4:E9:92:8D:41:F4:8F:EF:81:77:C5:63:C2:71
            X509v3 Authority Key Identifier:
                keyid:CD:C1:94:68:24:60:3C:DC:D1:A9:87:65:8D:89:AF:54:8B:EE:05:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/323830333a373363303a3a2f33322d3438203d3e20323635373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:73c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:ab:2d:13:2a:96:94:fd:27:a1:8e:39:f2:5d:d7:e5:1e:
         e9:f7:a6:82:50:13:2c:54:f2:7d:a0:98:97:50:d1:f7:e7:87:
         10:77:b8:0f:ee:df:55:0c:71:31:c8:f7:f9:8b:00:e8:c2:b4:
         e1:06:b3:24:c6:2b:e8:d3:bd:73:ab:56:81:fe:3a:a6:bd:cd:
         5f:cb:f8:de:16:a5:45:3d:d9:4f:ed:2f:34:88:27:59:d0:bd:
         af:c9:97:79:9a:45:a0:ee:97:ad:ce:3d:e0:dc:b7:8d:cd:08:
         9b:a2:b8:6c:50:c8:3e:ab:83:13:f6:dc:10:90:f8:06:b6:ee:
         46:b3:04:b2:4f:ac:3c:fa:03:b8:eb:99:51:c1:7e:c4:8f:2e:
         3a:94:c4:bf:98:9c:0b:31:8f:a6:e0:b4:8a:0d:02:87:64:fc:
         5f:bd:e1:e6:6e:d2:db:d2:d9:6c:40:47:be:60:f7:a7:79:60:
         70:36:b0:17:c4:1a:11:64:43:f3:9b:58:2d:55:5b:00:6f:e1:
         da:d2:f0:99:8d:fa:53:de:7e:fd:2c:09:1b:9e:44:36:27:fe:
         95:cd:ba:07:63:80:9f:9c:0e:54:7f:1c:70:c8:3d:cd:5f:d2:
         09:8c:bd:02:8f:fe:7d:9b:98:fa:03:88:0d:83:b7:1d:2d:4c:
         46:13:38:43
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfJlLHdG1gia6r48bFfgWWuOPQVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMTk0NjgyNDYwM0NEQ0QxQTk4NzY1OEQ4OUFGNTQ4
QkVFMDU1MTAeFw0yNjAzMTIxNTQwMDBaFw0yNzAzMTExNTQ1MDBaMDMxMTAvBgNV
BAMTKEY3MEREMjA5QjU3NkE0RTk5MjhENDFGNDhGRUY4MTc3QzU2M0MyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pCM/2Y9I6wyvJUi/wuQ2KK7V
RL/8pmEDY16YeQ0G23SnLK804D2HalOQuiq7EN52zUUKCZbtabAJfJd/jJp7rDv+
pdqc98ZP6WAelxBlH379QOBp7Mz9x1tNAT7WisDlIx639WvnHi/A0nKyMttdikkz
0qUJ01YKikR1+h0J8wGUQhBgMcMsqqzrvz7aw6j1Q11DDsjXNaUQEX1lUfsoYeZ/
5Pa1nwoL4O4rU83A+YVLDBwPvNB8rp/wWF9ZgmELcQeCUcFbdBUorB/3wptwiSXh
BCpZAN1T3R0FiR0FhopNkfqVwNK9m9JcTBuucQoxStpjwLUqqAi//APMCzGxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9w3SCbV2pOmSjUH0j++Bd8VjwnEwHwYDVR0j
BBgwFoAUzcGUaCRgPNzRqYdljYmvVIvuBVEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RUMwNzEyNDA5RkYzOTg1RDhEQTY0MkMwM0ZBMzVENjRE
NjIyQjRDMkRBNkI1OUQ3QjE4Q0MwOEI1QUNFNjAxLzAvQ0RDMTk0NjgyNDYwM0NE
Q0QxQTk4NzY1OEQ4OUFGNTQ4QkVFMDU1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMxOTQ2ODI0NjAzQ0RDRDFB
OTg3NjU4RDg5QUY1NDhCRUUwNTUxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkVDMDcxMjQwOUZGMzk4NUQ4REE2NDJDMDNGQTM1RDY0RDYyMkI0QzJE
QTZCNTlEN0IxOENDMDhCNUFDRTYwMS8wLzMyMzgzMDMzM2EzNzMzNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDc8Aw
DQYJKoZIhvcNAQELBQADggEBAJbOqy0TKpaU/SehjjnyXdflHun3poJQEyxU8n2g
mJdQ0ffnhxB3uA/u31UMcTHI9/mLAOjCtOEGsyTGK+jTvXOrVoH+Oqa9zV/L+N4W
pUU92U/tLzSIJ1nQva/Jl3maRaDul63OPeDct43NCJuiuGxQyD6rgxP23BCQ+Aa2
7kazBLJPrDz6A7jrmVHBfsSPLjqUxL+YnAsxj6bgtIoNAodk/F+94eZu0tvS2WxA
R75g96d5YHA2sBfEGhFkQ/ObWC1VWwBv4drS8JmN+lPefv0sCRueRDYn/pXNugdj
gJ+cDlR/HHDIPc1f0gmMvQKP/n2bmPoDiA2Dtx0tTEYTOEM=
-----END CERTIFICATE-----
Generated at Mon Mar 16 04:53:06 2026 by rpki-client