Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/323830333a323533303a3a2f33322d3438203d3e20323734393634.roa
File:                     323830333a323533303a3a2f33322d3438203d3e20323734393634.roa (raw, json)
Hash identifier:          CEK9piscfHLgUoImuLC7eSMZ13/ul3qeW70IhRx0De8=
Subject key identifier:   2B:67:20:AF:B8:5C:47:40:9A:5D:B8:50:17:25:ED:F7:6C:0E:21:D7
Certificate issuer:       /CN=0948AB7090C05C6AC91A9F869530C1CF41808E1A
Certificate serial:       4677BB5FB837AD78BE19551B27D0855E1A460BBD
Authority key identifier: 09:48:AB:70:90:C0:5C:6A:C9:1A:9F:86:95:30:C1:CF:41:80:8E:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/323830333a323533303a3a2f33322d3438203d3e20323734393634.roa
Signing time:             Tue 04 Aug 2026 16:15:00 +0000
ROA not before:           Tue 04 Aug 2026 16:10:00 +0000
ROA not after:            Tue 03 Aug 2027 16:15:00 +0000
asID:                     274964
IP address blocks:        2803:2530::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Aug 2026 19:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:77:bb:5f:b8:37:ad:78:be:19:55:1b:27:d0:85:5e:1a:46:0b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0948AB7090C05C6AC91A9F869530C1CF41808E1A
        Validity
            Not Before: Aug  4 16:10:00 2026 GMT
            Not After : Aug  3 16:15:00 2027 GMT
        Subject: CN=2B6720AFB85C47409A5DB8501725EDF76C0E21D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:37:e8:fa:47:02:5c:f3:30:ae:d7:c8:7a:
                    34:65:ae:14:f1:15:49:55:95:67:13:86:bd:49:74:
                    f9:11:5e:c4:15:7a:e2:58:c5:81:10:19:39:48:ed:
                    a4:cb:3f:19:3d:a7:44:ef:63:50:6c:4d:06:6e:ff:
                    fb:69:e8:8e:37:a9:37:24:9a:e4:2f:8b:8a:06:da:
                    07:7a:14:cb:75:4c:df:ec:50:20:67:3f:22:04:69:
                    99:f8:30:f5:ce:b4:a1:09:bd:6b:08:b9:e6:8f:da:
                    60:51:0e:08:b7:90:72:f1:c2:e2:58:e3:39:4c:58:
                    e7:3b:b8:5a:e6:dd:9e:f3:04:d8:2f:fb:66:93:6a:
                    32:dd:49:03:8b:20:74:e0:93:8a:85:af:dc:95:39:
                    12:07:5f:23:c6:79:fd:b7:ab:b2:5e:21:e8:ab:34:
                    1f:77:64:d5:5a:97:41:e9:a6:8d:21:80:52:ff:9c:
                    92:1f:f7:d7:38:28:24:d4:a7:19:56:5c:22:fa:83:
                    3e:3d:5a:d9:49:f6:02:d5:5d:95:49:7e:26:ad:72:
                    28:c0:7b:7b:c8:49:70:94:7c:d8:78:33:ef:af:2f:
                    5f:df:05:e8:10:3e:be:d6:7f:a1:19:59:ff:b2:95:
                    6b:c5:7f:12:87:1a:31:c6:05:1b:c4:ab:fd:da:44:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:20:AF:B8:5C:47:40:9A:5D:B8:50:17:25:ED:F7:6C:0E:21:D7
            X509v3 Authority Key Identifier:
                keyid:09:48:AB:70:90:C0:5C:6A:C9:1A:9F:86:95:30:C1:CF:41:80:8E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0948AB7090C05C6AC91A9F869530C1CF41808E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/871F9CDC66DE6B4F968727E400731EF700CA9908F919B16E9784EC79ED5FE511/0/323830333a323533303a3a2f33322d3438203d3e20323734393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2530::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:04:12:33:1c:5c:8c:e5:3a:f5:f2:d5:eb:af:c0:7d:e7:
         d0:f1:0b:5d:5a:85:31:ca:44:4a:1e:ec:cc:43:58:86:bb:6b:
         50:0d:3c:92:58:a2:1e:04:3b:d1:04:60:d0:f5:21:6c:8f:5a:
         a6:59:ae:b1:96:90:cb:c9:3c:6f:e5:0c:e5:dc:5a:61:83:0b:
         11:36:26:11:7e:30:b8:07:fa:fd:31:80:80:fe:b3:33:f1:0a:
         78:6d:82:b4:2b:a7:a8:67:ae:4f:af:d4:26:a2:38:ee:6e:e4:
         37:9a:29:e6:22:2a:4f:b8:d2:18:fc:5a:ac:62:86:53:b9:46:
         59:d0:84:36:52:b3:eb:84:fd:69:4d:59:fa:f8:91:c9:4c:64:
         72:20:c3:ba:23:2c:aa:d8:fd:7e:0b:06:14:f3:0b:c9:e7:1a:
         50:ad:32:c2:41:73:8d:00:d7:09:1b:61:92:9c:f9:90:f4:e2:
         fe:d8:de:d3:98:e3:8d:b5:a5:9c:ab:b3:6a:7e:7c:f5:47:84:
         23:36:c9:3c:fd:f3:67:c5:bd:89:7b:d1:f6:c4:cf:79:75:e9:
         94:ce:67:ca:09:10:88:e4:37:c1:2a:e6:29:21:84:fc:6b:b2:
         9f:4c:c9:83:84:f8:7b:51:ab:2b:65:42:95:4e:53:a5:39:89:
         2e:bb:65:ab
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIURne7X7g3rXi+GVUbJ9CFXhpGC70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0OEFCNzA5MEMwNUM2QUM5MUE5Rjg2OTUzMEMxQ0Y0
MTgwOEUxQTAeFw0yNjA4MDQxNjEwMDBaFw0yNzA4MDMxNjE1MDBaMDMxMTAvBgNV
BAMTKDJCNjcyMEFGQjg1QzQ3NDA5QTVEQjg1MDE3MjVFREY3NkMwRTIxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/Dfo+kcCXPMwrtfIejRlrhTx
FUlVlWcThr1JdPkRXsQVeuJYxYEQGTlI7aTLPxk9p0TvY1BsTQZu//tp6I43qTck
muQvi4oG2gd6FMt1TN/sUCBnPyIEaZn4MPXOtKEJvWsIueaP2mBRDgi3kHLxwuJY
4zlMWOc7uFrm3Z7zBNgv+2aTajLdSQOLIHTgk4qFr9yVORIHXyPGef23q7JeIeir
NB93ZNVal0Hppo0hgFL/nJIf99c4KCTUpxlWXCL6gz49WtlJ9gLVXZVJfiatcijA
e3vISXCUfNh4M++vL1/fBegQPr7Wf6EZWf+ylWvFfxKHGjHGBRvEq/3aROLFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUK2cgr7hcR0CaXbhQFyXt92wOIdcwHwYDVR0j
BBgwFoAUCUircJDAXGrJGp+GlTDBz0GAjhowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NzFGOUNEQzY2REU2QjRGOTY4NzI3RTQwMDczMUVGNzAw
Q0E5OTA4RjkxOUIxNkU5Nzg0RUM3OUVENUZFNTExLzAvMDk0OEFCNzA5MEMwNUM2
QUM5MUE5Rjg2OTUzMEMxQ0Y0MTgwOEUxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTQ4QUI3MDkwQzA1QzZBQzkx
QTlGODY5NTMwQzFDRjQxODA4RTFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODcxRjlDREM2NkRFNkI0Rjk2ODcyN0U0MDA3MzFFRjcwMENBOTkwOEY5
MTlCMTZFOTc4NEVDNzlFRDVGRTUxMS8wLzMyMzgzMDMzM2EzMjM1MzMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDM5MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJTAw
DQYJKoZIhvcNAQELBQADggEBAIDPBBIzHFyM5Tr18tXrr8B959DxC11ahTHKREoe
7MxDWIa7a1ANPJJYoh4EO9EEYND1IWyPWqZZrrGWkMvJPG/lDOXcWmGDCxE2JhF+
MLgH+v0xgID+szPxCnhtgrQrp6hnrk+v1CaiOO5u5DeaKeYiKk+40hj8WqxihlO5
RlnQhDZSs+uE/WlNWfr4kclMZHIgw7ojLKrY/X4LBhTzC8nnGlCtMsJBc40A1wkb
YZKc+ZD04v7Y3tOY4421pZyrs2p+fPVHhCM2yTz982fFvYl70fbEz3l16ZTOZ8oJ
EIjkN8Eq5ikhhPxrsp9MyYOE+HtRqytlQpVOU6U5iS67Zas=
-----END CERTIFICATE-----
Generated at Sat Aug 8 04:58:38 2026 by rpki-client