Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa
File:                     323830333a623330303a3a2f33322d3332203d3e203532343535.roa (raw, json)
Hash identifier:          QFK0C/HMreiRC5GGsu6yR2JLSo3M1ZVVGttTC6+fiqM=
Subject key identifier:   66:1D:E0:69:05:8A:95:48:6F:D6:7C:F2:AD:6A:36:0A:04:12:BF:1B
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       46EFE51E5CD8B1D5384FE9D82117FEE58A08C27B
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa
Signing time:             Thu 03 Sep 2026 12:33:32 +0000
ROA not before:           Thu 03 Sep 2026 12:28:32 +0000
ROA not after:            Thu 02 Sep 2027 12:33:32 +0000
asID:                     52455
IP address blocks:        2803:b300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:e5:1e:5c:d8:b1:d5:38:4f:e9:d8:21:17:fe:e5:8a:08:c2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Sep  3 12:28:32 2026 GMT
            Not After : Sep  2 12:33:32 2027 GMT
        Subject: CN=661DE069058A95486FD67CF2AD6A360A0412BF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:e3:f6:47:90:cb:9f:f4:38:fc:a7:4f:cc:
                    f3:07:97:10:f3:92:68:91:bb:f9:21:0c:bd:37:09:
                    25:cf:82:3e:74:b2:7f:9c:51:97:2d:88:80:e2:68:
                    07:63:a9:5d:74:61:f5:f5:c6:4a:12:19:d9:2a:7c:
                    5e:75:35:24:9a:76:f7:ce:c0:d7:ed:24:e8:ee:73:
                    2d:d0:c6:75:68:3a:26:39:be:3f:5e:23:6b:54:1d:
                    c2:b2:79:48:9b:12:33:7c:69:7b:6c:d9:df:27:9c:
                    77:f1:3d:53:e7:ef:87:a7:9b:59:17:a1:01:01:5d:
                    a6:90:75:1b:5a:16:f3:62:d2:16:8f:7a:d0:25:d1:
                    50:fb:af:0f:66:6f:7e:80:10:ac:fb:be:7d:22:2c:
                    8f:9a:28:5f:c4:a5:2e:32:94:68:c9:d0:54:24:cd:
                    a2:8a:68:a4:2a:f3:78:0d:3a:4f:f8:b1:1f:b7:78:
                    49:22:f5:91:3d:bd:99:44:c8:0b:ee:f7:ef:24:6e:
                    a5:4e:65:e0:25:d6:0f:a8:37:1d:61:1f:5b:d1:a9:
                    07:60:bd:35:38:7a:7b:fe:9b:f1:b7:7b:0c:93:61:
                    de:63:43:7d:c3:a6:fe:c9:f5:aa:9a:d4:a2:f6:2e:
                    6b:f6:3d:d2:b8:6b:cf:09:ea:c5:e8:3b:f5:0a:c7:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:E0:69:05:8A:95:48:6F:D6:7C:F2:AD:6A:36:0A:04:12:BF:1B
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3332203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:70:eb:59:cd:7b:51:d1:0e:95:b2:2a:ee:2d:ad:ca:88:cf:
         36:d7:4e:cf:ee:07:62:f2:57:13:fd:aa:52:ba:8f:31:71:a3:
         98:70:f9:d4:e1:15:1a:c4:b9:90:44:3d:7d:bf:1a:ac:e0:88:
         d7:a6:c1:29:08:24:62:d9:c3:6e:0a:38:0b:1b:0d:fd:a9:b0:
         f0:ae:c6:a2:ed:46:53:9d:15:90:28:d0:40:96:ab:ef:5d:33:
         f3:6d:09:4e:e8:b4:a5:cc:e7:4a:d5:c7:ec:42:b2:75:2e:7a:
         b6:e4:de:e0:8a:a3:06:c8:cd:63:52:4b:ca:81:1c:25:eb:22:
         6c:82:ae:1b:46:2e:ec:c3:f6:6f:a8:a4:e2:6f:01:13:cb:ec:
         8d:d3:60:e7:73:c0:35:8c:44:3c:a0:e7:2e:03:6e:2a:f8:41:
         92:16:fe:fb:db:f3:cb:a1:47:58:8e:cf:86:f4:cf:61:03:31:
         71:78:c3:dd:09:a9:52:b5:e7:fb:00:ca:37:3d:e1:70:e4:4a:
         b4:88:5f:59:95:e6:e5:eb:3e:b5:e7:35:6e:e3:47:34:6e:bf:
         1b:fc:76:39:b0:f3:26:8d:ca:6a:00:2a:95:9c:f1:6e:d9:c2:
         95:5b:38:bf:c1:ea:0b:bf:8a:29:7c:85:78:02:07:66:05:3d:
         f7:47:a1:8b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURu/lHlzYsdU4T+nYIRf+5YoIwnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNjA5MDMxMjI4MzJaFw0yNzA5MDIxMjMzMzJaMDMxMTAvBgNV
BAMTKDY2MURFMDY5MDU4QTk1NDg2RkQ2N0NGMkFENkEzNjBBMDQxMkJGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWeP2R5DLn/Q4/KdPzPMHlxDz
kmiRu/khDL03CSXPgj50sn+cUZctiIDiaAdjqV10YfX1xkoSGdkqfF51NSSadvfO
wNftJOjucy3QxnVoOiY5vj9eI2tUHcKyeUibEjN8aXts2d8nnHfxPVPn74enm1kX
oQEBXaaQdRtaFvNi0haPetAl0VD7rw9mb36AEKz7vn0iLI+aKF/EpS4ylGjJ0FQk
zaKKaKQq83gNOk/4sR+3eEki9ZE9vZlEyAvu9+8kbqVOZeAl1g+oNx1hH1vRqQdg
vTU4env+m/G3ewyTYd5jQ33Dpv7J9aqa1KL2Lmv2PdK4a88J6sXoO/UKx9VtAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUZh3gaQWKlUhv1nzyrWo2CgQSvxswHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMyMzgzMDMzM2E2MjMzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7MAMA0G
CSqGSIb3DQEBCwUAA4IBAQATcOtZzXtR0Q6VsiruLa3KiM82107P7gdi8lcT/apS
uo8xcaOYcPnU4RUaxLmQRD19vxqs4IjXpsEpCCRi2cNuCjgLGw39qbDwrsai7UZT
nRWQKNBAlqvvXTPzbQlO6LSlzOdK1cfsQrJ1Lnq25N7giqMGyM1jUkvKgRwl6yJs
gq4bRi7sw/ZvqKTibwETy+yN02Dnc8A1jEQ8oOcuA24q+EGSFv772/PLoUdYjs+G
9M9hAzFxeMPdCalStef7AMo3PeFw5Eq0iF9Zlebl6z615zVu40c0br8b/HY5sPMm
jcpqACqVnPFu2cKVWzi/weoLv4opfIV4AgdmBT33R6GL
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:37:28 2026 by rpki-client