Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          TNCVvUcO5yOl6XnrAF4Xn6jvW/HlJKLXOnKIb6GRnX0=
Subject key identifier:   DD:7D:56:A3:83:F9:41:A2:AA:FA:5C:55:57:3D:FF:8E:95:C6:65:5A
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       21C503E752FFE53A04988003D5814A2D1E390B5D
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 30 Apr 2026 04:40:19 +0000
ROA not before:           Thu 30 Apr 2026 04:35:19 +0000
ROA not after:            Thu 29 Apr 2027 04:40:19 +0000
asID:                     273858
IP address blocks:        2803:3550:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c5:03:e7:52:ff:e5:3a:04:98:80:03:d5:81:4a:2d:1e:39:0b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Apr 30 04:35:19 2026 GMT
            Not After : Apr 29 04:40:19 2027 GMT
        Subject: CN=DD7D56A383F941A2AAFA5C55573DFF8E95C6655A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:a4:d9:04:9e:4c:10:49:a1:4e:ec:4d:6b:
                    4f:f0:7e:e8:20:c2:b4:e9:e3:9d:a9:2b:93:31:a6:
                    2d:a2:c6:d7:c6:68:e1:fc:3b:7c:91:42:a1:65:81:
                    b0:79:f5:ef:fc:94:42:99:bc:b1:54:22:01:5a:6a:
                    30:b5:76:74:45:04:3f:cb:f5:eb:82:79:d6:fd:17:
                    58:dc:bb:39:87:bc:fa:5f:ce:bd:a4:66:71:a7:d5:
                    66:ff:73:dd:b3:e1:af:ab:03:af:96:41:27:f4:a5:
                    5d:0d:f1:43:fb:cb:b5:2c:0c:d2:66:46:82:34:bb:
                    64:cc:e6:74:8a:7a:af:8d:30:22:6c:cc:cf:58:cf:
                    2d:41:55:fd:80:0e:57:37:a6:93:7d:9b:b5:57:cc:
                    29:0c:09:3c:76:c2:9f:ef:ad:30:59:1f:6a:16:92:
                    ec:83:90:d1:d6:a0:4e:36:55:33:7b:df:37:ce:c3:
                    87:1a:77:e8:4f:6c:7a:1c:9d:0a:47:45:d7:0b:d7:
                    87:02:6c:ca:8f:e1:8c:ad:d6:ef:34:8c:e9:04:ab:
                    f1:42:e6:69:2c:65:b8:03:9e:74:47:d1:59:74:61:
                    2e:46:39:62:a8:7b:47:7a:33:f0:aa:18:92:36:87:
                    02:b3:b0:3d:0d:6e:e0:02:b5:7c:36:85:a1:c1:70:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:56:A3:83:F9:41:A2:AA:FA:5C:55:57:3D:FF:8E:95:C6:65:5A
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:dc:96:c7:05:3e:38:26:22:cf:78:cc:c5:06:b1:69:49:
         64:c7:47:2c:91:58:6e:3c:0d:5f:d3:5e:99:b1:14:6d:dc:63:
         bb:dc:9a:58:2f:55:4d:40:aa:0c:56:b3:1f:13:26:f9:ae:c3:
         2a:2d:b5:34:2d:11:2d:56:e4:72:c4:cb:5a:e2:bc:4c:00:cc:
         47:28:11:9a:00:bb:f8:43:bf:e5:be:ff:9f:72:fb:54:6d:7e:
         7c:5e:32:d8:d8:9d:3f:72:91:14:99:c1:73:d3:a3:14:b2:16:
         db:8b:76:1c:da:bd:55:a7:3c:b6:d3:6b:ce:a3:40:38:66:91:
         af:51:7a:dd:8a:62:73:56:ac:20:2d:a2:85:28:a6:f2:42:ea:
         ba:09:45:3b:18:59:5e:de:6f:66:54:5b:e9:1d:45:b8:ad:9b:
         4f:b9:2a:b4:f7:66:3d:ef:c8:d0:79:53:61:a8:26:b8:91:15:
         0e:32:a6:60:33:f8:6e:fb:f6:4a:1f:8f:30:ed:bf:17:26:4d:
         6d:b7:ea:f7:d9:fc:62:11:ad:19:28:75:29:a8:cf:48:b0:8d:
         97:10:ff:bf:97:95:3b:df:92:9f:11:2b:99:4b:73:3a:a2:6d:
         4e:88:5e:24:45:17:c4:07:fe:db:47:dc:57:3e:6b:5d:0d:a5:
         36:23:97:59
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIcUD51L/5ToEmIAD1YFKLR45C10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDM0ZDNkZBNUQ5RDAzNDNBQjkzN0UzMEE0RDZFREFB
NUM4N0Q1QzAeFw0yNjA0MzAwNDM1MTlaFw0yNzA0MjkwNDQwMTlaMDMxMTAvBgNV
BAMTKEREN0Q1NkEzODNGOTQxQTJBQUZBNUM1NTU3M0RGRjhFOTVDNjY1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0caTZBJ5MEEmhTuxNa0/wfugg
wrTp452pK5Mxpi2ixtfGaOH8O3yRQqFlgbB59e/8lEKZvLFUIgFaajC1dnRFBD/L
9euCedb9F1jcuzmHvPpfzr2kZnGn1Wb/c92z4a+rA6+WQSf0pV0N8UP7y7UsDNJm
RoI0u2TM5nSKeq+NMCJszM9Yzy1BVf2ADlc3ppN9m7VXzCkMCTx2wp/vrTBZH2oW
kuyDkNHWoE42VTN73zfOw4cad+hPbHocnQpHRdcL14cCbMqP4Yyt1u80jOkEq/FC
5mksZbgDnnRH0Vl0YS5GOWKoe0d6M/CqGJI2hwKzsD0NbuACtXw2haHBcHlDAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU3X1Wo4P5QaKq+lxVVz3/jpXGZVowHwYDVR0j
BBgwFoAUXsP8b6XZ0DQ6uTfjCk1u2qXIfVwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTEzMkU2Njk3QzRFOEFGOEYzRkU2NUE5N0UxOTA5NTk3
MDdCMEMwRUI3OTkwMEFEMkM4Q0JENjE1QkY0QjY2LzAvNUVDM0ZDNkZBNUQ5RDAz
NDNBQjkzN0UzMEE0RDZFREFBNUM4N0Q1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUMzRkM2RkE1RDlEMDM0M0FC
OTM3RTMwQTRENkVEQUE1Qzg3RDVDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExMzJFNjY5N0M0RThBRjhGM0ZFNjVBOTdFMTkwOTU5NzA3QjBDMEVC
Nzk5MDBBRDJDOENCRDYxNUJGNEI2Ni8wLzMyMzgzMDMzM2EzMzM1MzUzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzgzNTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAM1UAEwDQYJKoZIhvcNAQELBQADggEBAA7U3JbHBT44JiLPeMzFBrFpSWTH
RyyRWG48DV/TXpmxFG3cY7vcmlgvVU1AqgxWsx8TJvmuwyottTQtES1W5HLEy1ri
vEwAzEcoEZoAu/hDv+W+/59y+1RtfnxeMtjYnT9ykRSZwXPToxSyFtuLdhzavVWn
PLbTa86jQDhmka9Ret2KYnNWrCAtooUopvJC6roJRTsYWV7eb2ZUW+kdRbitm0+5
KrT3Zj3vyNB5U2GoJriRFQ4ypmAz+G779kofjzDtvxcmTW236vfZ/GIRrRkodSmo
z0iwjZcQ/7+XlTvfkp8RK5lLczqibU6IXiRFF8QH/ttH3Fc+a10NpTYjl1k=
-----END CERTIFICATE-----
Generated at Thu Apr 30 06:34:55 2026 by rpki-client