Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a653030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a653030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          zirpLZMD/KZ2YT9ISqxsBne+oSEzv6AJyNHyHYtrKaw=
Subject key identifier:   74:5A:71:F8:A0:73:50:46:B0:7D:A2:FA:B2:0A:EA:D8:9B:DD:3D:B9
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       016E2F5DC5FBDE2246135ED94D1F552135BC76A1
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a653030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 07 Aug 2026 07:20:09 +0000
ROA not before:           Fri 07 Aug 2026 07:15:09 +0000
ROA not after:            Fri 06 Aug 2027 07:20:09 +0000
asID:                     265780
IP address blocks:        2803:fd40:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6e:2f:5d:c5:fb:de:22:46:13:5e:d9:4d:1f:55:21:35:bc:76:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Aug  7 07:15:09 2026 GMT
            Not After : Aug  6 07:20:09 2027 GMT
        Subject: CN=745A71F8A0735046B07DA2FAB20AEAD89BDD3DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:02:df:23:0b:42:93:0b:7a:02:35:55:a8:
                    7d:29:64:2f:bb:6e:25:1e:d3:82:f6:03:80:e6:e5:
                    e2:6c:23:65:f3:82:ad:0f:0f:16:49:b1:11:4e:d8:
                    4e:01:d0:c1:8a:5d:63:3c:c0:82:e1:92:9f:be:f4:
                    22:4e:5d:e3:f9:8f:f1:03:6a:7f:8d:d6:31:99:fd:
                    4d:57:d5:fb:43:92:23:f8:f1:d0:c9:07:53:82:16:
                    22:7e:4f:b6:04:30:6c:7b:f7:c7:d2:16:a0:ab:98:
                    fd:4b:b2:1c:27:86:27:8d:c5:72:90:a7:b6:8c:db:
                    61:34:b3:f8:b2:74:0d:03:a9:40:c8:90:58:16:d2:
                    b3:c9:42:eb:2e:b9:09:0a:d3:a8:da:d3:16:38:30:
                    a4:c0:67:1d:64:e6:b8:38:9b:ff:7b:27:fc:1a:df:
                    be:26:bc:c8:e0:96:7c:df:40:b6:0a:3c:62:fa:24:
                    b0:2d:d2:4d:20:88:5b:97:b7:55:63:bf:10:dd:bc:
                    cc:0a:fa:81:5a:9e:dd:79:54:70:da:8e:96:61:2e:
                    0a:11:1a:d1:9b:4b:d0:8e:11:5f:b1:51:6f:a5:e2:
                    dc:3b:63:da:a3:35:21:c2:6f:a6:c9:d3:8e:df:5b:
                    d5:16:ee:ab:5b:b7:4f:dc:10:07:7a:c7:63:98:90:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:71:F8:A0:73:50:46:B0:7D:A2:FA:B2:0A:EA:D8:9B:DD:3D:B9
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a653030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:e4:b5:4d:6f:50:cf:fb:2d:85:9f:f2:fe:a3:60:21:fa:
         46:5f:63:a3:cb:23:d2:7f:c9:16:e3:39:4a:83:d7:f8:d9:37:
         3c:59:56:86:96:0a:c7:51:97:cd:88:7b:7d:0b:39:c5:ee:3f:
         3b:aa:e8:8f:6e:d2:df:99:94:1d:18:a0:22:d1:9c:fe:08:29:
         ed:b6:1f:75:34:c1:2c:cc:8b:7c:eb:2d:01:c3:f5:a8:f5:f2:
         d7:63:24:b1:13:06:2c:43:31:7c:94:8c:fd:af:66:a2:c3:b3:
         a2:00:c4:77:5b:3c:4d:a6:99:b0:70:05:91:8c:32:b7:6d:f9:
         ec:21:e7:69:d9:b4:5d:ba:12:aa:66:84:8d:fa:ce:fd:26:1f:
         48:f2:ec:e1:84:86:f3:f8:ae:61:65:92:fa:8a:86:07:bf:ea:
         e4:51:e2:19:97:a2:3e:ce:23:7a:18:56:dd:eb:4c:66:e5:d3:
         6f:1c:c6:e8:6c:67:d4:71:4e:f5:7e:19:bc:78:82:fd:f8:ef:
         b3:bd:91:d4:3c:a0:23:86:e6:a1:18:ae:dd:b7:5b:c7:cd:ec:
         4d:80:b9:3b:27:31:2d:93:be:67:a2:de:b5:f2:db:63:42:6c:
         bf:ef:dd:06:f1:53:55:f5:9e:26:31:e7:7b:af:c2:b0:e0:87:
         ab:c9:59:e1
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUAW4vXcX73iJGE17ZTR9VITW8dqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNjA4MDcwNzE1MDlaFw0yNzA4MDYwNzIwMDlaMDMxMTAvBgNV
BAMTKDc0NUE3MUY4QTA3MzUwNDZCMDdEQTJGQUIyMEFFQUQ4OUJERDNEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3QLfIwtCkwt6AjVVqH0pZC+7
biUe04L2A4Dm5eJsI2Xzgq0PDxZJsRFO2E4B0MGKXWM8wILhkp++9CJOXeP5j/ED
an+N1jGZ/U1X1ftDkiP48dDJB1OCFiJ+T7YEMGx798fSFqCrmP1LshwnhieNxXKQ
p7aM22E0s/iydA0DqUDIkFgW0rPJQusuuQkK06ja0xY4MKTAZx1k5rg4m/97J/wa
374mvMjglnzfQLYKPGL6JLAt0k0giFuXt1VjvxDdvMwK+oFant15VHDajpZhLgoR
GtGbS9COEV+xUW+l4tw7Y9qjNSHCb6bJ047fW9UW7qtbt0/cEAd6x2OYkD7XAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUdFpx+KBzUEawfaL6sgrq2JvdPbkwHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMyMzgzMDMzM2E2NjY0MzQzMDNhNjUz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzUzNzM4MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUoA/1A4DANBgkqhkiG9w0BAQsFAAOCAQEAONPktU1vUM/7LYWf8v6jYCH6
Rl9jo8sj0n/JFuM5SoPX+Nk3PFlWhpYKx1GXzYh7fQs5xe4/O6roj27S35mUHRig
ItGc/ggp7bYfdTTBLMyLfOstAcP1qPXy12MksRMGLEMxfJSM/a9mosOzogDEd1s8
TaaZsHAFkYwyt2357CHnadm0XboSqmaEjfrO/SYfSPLs4YSG8/iuYWWS+oqGB7/q
5FHiGZeiPs4jehhW3etMZuXTbxzG6Gxn1HFO9X4ZvHiC/fjvs72R1DygI4bmoRiu
3bdbx83sTYC5OycxLZO+Z6LetfLbY0Jsv+/dBvFTVfWeJjHne6/CsOCHq8lZ4Q==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:16:21 2026 by rpki-client