Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
File:                     323830333a666434303a3a2f33322d3332203d3e20323635373830.roa (raw, json)
Hash identifier:          epp3Jk5fy8WXAZRjm5q1gR1wHXXChSAsv3o8UV+x9Qo=
Subject key identifier:   CC:EC:9F:D8:35:A1:31:CB:F8:F2:D3:70:8B:19:18:68:26:AA:2D:B6
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       776AA8537A56F7FC311D01CCB20249ECEB5C6AF7
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
Signing time:             Tue 01 Sep 2026 16:33:17 +0000
ROA not before:           Tue 01 Sep 2026 16:28:17 +0000
ROA not after:            Tue 31 Aug 2027 16:33:17 +0000
asID:                     265780
IP address blocks:        2803:fd40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:a8:53:7a:56:f7:fc:31:1d:01:cc:b2:02:49:ec:eb:5c:6a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Sep  1 16:28:17 2026 GMT
            Not After : Aug 31 16:33:17 2027 GMT
        Subject: CN=CCEC9FD835A131CBF8F2D3708B19186826AA2DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:93:c0:c0:56:bb:70:f5:0b:a9:ae:0d:11:
                    7d:85:e7:d7:fe:4a:90:a7:fb:a9:c6:25:15:3a:8c:
                    5f:41:c5:bb:7e:0d:41:9b:d1:17:64:92:d2:0a:53:
                    ae:86:67:b8:6d:53:48:cf:b0:4c:96:05:c1:f7:64:
                    8c:0f:3c:b0:48:bd:20:01:16:7a:33:5d:78:87:3d:
                    ba:2a:76:d3:27:00:f2:bf:7b:d8:ed:d5:ee:a4:13:
                    3d:91:f4:00:68:9f:28:5f:81:d1:42:0e:d0:06:c9:
                    b0:da:ca:89:a2:bd:52:10:32:1c:42:05:4c:c5:86:
                    d7:87:0c:df:4a:e2:14:4f:7a:2b:b7:52:29:d6:02:
                    0d:82:8f:e9:83:c3:5f:c4:92:d4:03:d2:6d:cd:9f:
                    14:2b:ea:9a:5c:26:30:58:fc:f6:d5:4c:68:cf:a1:
                    5a:9d:ea:7d:36:13:32:ba:4c:d6:90:94:35:54:0d:
                    e2:25:00:b3:f1:39:56:db:16:b4:c8:ee:12:d8:ca:
                    16:56:31:ac:e0:9f:fe:b4:ff:62:08:bb:96:83:db:
                    33:be:29:17:a6:85:dd:85:47:ae:8b:d0:f2:16:6d:
                    88:eb:87:0e:5f:1c:74:6e:43:59:7e:20:81:db:96:
                    1b:b8:b9:a8:31:de:1a:93:dd:67:1d:fe:cb:5b:6e:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:9F:D8:35:A1:31:CB:F8:F2:D3:70:8B:19:18:68:26:AA:2D:B6
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:69:f7:2a:c2:7a:b7:b9:01:29:f5:38:8c:cb:57:95:b9:6c:
         f3:4e:b1:ed:60:55:a2:67:50:a3:53:ca:e3:7e:6c:9a:de:a9:
         e4:08:5f:3a:62:e7:8c:42:80:13:ed:51:6a:6b:9b:fc:9d:30:
         70:49:8b:d3:64:9e:88:e4:b4:94:ec:3f:6a:81:9b:5c:f4:81:
         98:72:97:f4:d7:08:4f:b6:c8:e3:e4:94:98:8c:36:e4:b5:9b:
         53:30:98:cc:82:78:2f:63:e2:d8:7f:df:ca:35:92:12:59:d3:
         21:0e:47:c8:be:03:42:3d:b3:1c:ee:4a:d1:d1:45:7d:de:6c:
         d7:c4:9f:9b:45:06:fc:74:fc:90:c1:c6:f6:c8:88:4e:9b:cf:
         3c:f4:e3:b3:f0:18:69:35:46:84:0a:27:38:e8:ee:c4:0e:fb:
         3f:77:82:8d:d2:9e:0f:34:23:51:81:15:06:95:37:e8:f7:1b:
         38:e5:c5:6f:85:b0:af:bc:91:0d:0d:11:5c:25:cf:9d:1a:fc:
         e5:1c:95:eb:38:f9:bc:4b:be:76:8d:34:2a:50:cd:ea:05:e2:
         38:c6:70:3b:23:7f:b6:9b:98:ae:fa:b3:e3:24:4c:75:88:e2:
         20:87:43:27:18:f0:86:cd:c9:29:5e:58:63:65:02:df:89:d4:
         4a:f3:eb:93
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUd2qoU3pW9/wxHQHMsgJJ7OtcavcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNjA5MDExNjI4MTdaFw0yNzA4MzExNjMzMTdaMDMxMTAvBgNV
BAMTKENDRUM5RkQ4MzVBMTMxQ0JGOEYyRDM3MDhCMTkxODY4MjZBQTJEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5pPAwFa7cPULqa4NEX2F59f+
SpCn+6nGJRU6jF9Bxbt+DUGb0RdkktIKU66GZ7htU0jPsEyWBcH3ZIwPPLBIvSAB
FnozXXiHPboqdtMnAPK/e9jt1e6kEz2R9ABonyhfgdFCDtAGybDayomivVIQMhxC
BUzFhteHDN9K4hRPeiu3UinWAg2Cj+mDw1/EktQD0m3NnxQr6ppcJjBY/PbVTGjP
oVqd6n02EzK6TNaQlDVUDeIlALPxOVbbFrTI7hLYyhZWMazgn/60/2IIu5aD2zO+
KRemhd2FR66L0PIWbYjrhw5fHHRuQ1l+IIHblhu4uagx3hqT3Wcd/stbbrmrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzOyf2DWhMcv48tNwixkYaCaqLbYwHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMyMzgzMDMzM2E2NjY0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM3MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/UAw
DQYJKoZIhvcNAQELBQADggEBAANp9yrCere5ASn1OIzLV5W5bPNOse1gVaJnUKNT
yuN+bJreqeQIXzpi54xCgBPtUWprm/ydMHBJi9NknojktJTsP2qBm1z0gZhyl/TX
CE+2yOPklJiMNuS1m1MwmMyCeC9j4th/38o1khJZ0yEOR8i+A0I9sxzuStHRRX3e
bNfEn5tFBvx0/JDBxvbIiE6bzzz047PwGGk1RoQKJzjo7sQO+z93go3Sng80I1GB
FQaVN+j3GzjlxW+FsK+8kQ0NEVwlz50a/OUcles4+bxLvnaNNCpQzeoF4jjGcDsj
f7abmK76s+MkTHWI4iCHQycY8IbNySleWGNlAt+J1Erz65M=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:31:35 2026 by rpki-client