Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3438203d3e20323634373434.roa
File:                     323830333a616634303a3a2f33322d3438203d3e20323634373434.roa (raw, json)
Hash identifier:          vidDj1gs5TspdxMOxJieaFzANxYfxbcwUa1EYbqj3xw=
Subject key identifier:   29:A9:10:FA:BD:15:14:70:54:58:99:5D:3D:35:4B:1F:29:DE:C9:3E
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       2D832EAE633E978076F89A6CD082512DA0CF22A8
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3438203d3e20323634373434.roa
Signing time:             Wed 11 Mar 2026 21:30:00 +0000
ROA not before:           Wed 11 Mar 2026 21:25:00 +0000
ROA not after:            Wed 10 Mar 2027 21:30:00 +0000
asID:                     264744
IP address blocks:        2803:af40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 21:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:83:2e:ae:63:3e:97:80:76:f8:9a:6c:d0:82:51:2d:a0:cf:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Mar 11 21:25:00 2026 GMT
            Not After : Mar 10 21:30:00 2027 GMT
        Subject: CN=29A910FABD1514705458995D3D354B1F29DEC93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:4e:33:92:77:24:61:83:11:89:c8:3f:e1:
                    be:d9:50:45:ea:7e:d7:ad:1a:78:21:0d:45:04:fd:
                    1e:96:37:b7:14:c5:e6:cc:ee:84:fe:d3:6c:0c:38:
                    dc:4a:d4:39:3a:90:a2:b5:8a:c9:1c:8f:c1:9c:52:
                    6a:17:62:ba:d9:7b:f6:d0:0d:f4:a3:91:d0:e8:1c:
                    0b:06:c5:99:fa:77:b7:9c:e9:c1:d1:1e:6a:e7:7c:
                    06:23:d4:62:6d:eb:25:13:ae:a1:d0:7f:c9:03:66:
                    89:4d:9b:cb:08:50:52:d5:79:48:fe:b1:5b:85:3c:
                    9b:3c:36:4d:8b:f1:46:c6:b4:29:7f:32:e4:a6:de:
                    09:19:25:8e:5e:ab:ba:b1:0b:60:bc:0b:0d:18:9a:
                    a7:0d:c4:04:dc:6e:b3:87:31:14:60:1a:f2:94:51:
                    a2:3c:7d:5f:1e:95:53:11:86:c2:74:f0:84:63:66:
                    41:d8:61:94:f7:39:aa:ae:ac:70:29:11:2d:c4:82:
                    83:a8:cf:2b:55:04:9c:f7:87:77:c5:3e:d3:e9:71:
                    bf:49:f0:e6:5e:18:b0:27:82:00:42:90:d3:11:e6:
                    90:03:82:fa:0c:9c:17:08:00:5b:5b:7d:8d:ea:42:
                    0f:ce:9d:49:35:28:eb:aa:9a:16:35:65:fd:10:ae:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A9:10:FA:BD:15:14:70:54:58:99:5D:3D:35:4B:1F:29:DE:C9:3E
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3438203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af40::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:b7:bd:d8:d6:92:d8:b8:d0:9c:4c:95:d9:0d:94:c1:18:
         2b:ec:e4:5e:7b:10:2a:9e:69:ad:c9:e2:b9:68:ea:95:3f:04:
         9e:9b:6d:e4:66:7a:dc:1f:b8:1e:b6:ab:12:8c:6b:c4:b2:f2:
         76:25:0f:ac:a5:60:11:85:5f:7c:1d:40:d5:53:20:67:97:9d:
         28:55:f4:d8:bd:89:ac:0e:1d:57:e7:75:15:60:5c:4e:b4:ae:
         4e:2e:e2:1d:26:70:d9:ca:85:43:4b:df:e5:7a:50:5b:de:e6:
         84:0f:5c:90:fb:57:a1:fd:a2:ac:d0:ac:44:62:3c:47:7f:63:
         da:17:a7:ac:0f:7c:70:8f:c4:3a:f6:59:7b:dd:27:bf:84:bf:
         7d:5c:f6:fb:a6:f0:f6:2c:63:48:7e:a3:45:a2:f9:fa:b0:9c:
         28:45:fe:10:7b:e3:02:34:e6:6b:3f:bb:3a:15:b6:f5:c6:ff:
         41:c0:6a:21:1c:f2:76:61:81:4e:4c:1d:54:8a:d1:db:32:69:
         f0:f2:bc:de:12:11:5c:8c:34:a5:6a:64:0c:05:6f:7b:ff:ad:
         d4:16:41:0e:a0:20:86:4c:e9:43:40:8d:5f:85:42:d4:7e:a3:
         d7:62:88:77:0f:e1:04:96:96:04:b8:c5:c3:79:60:7d:c9:c2:
         a4:4a:6d:bb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULYMurmM+l4B2+Jps0IJRLaDPIqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgzRDBCMTM0QkYyNTYzNjdEM0ZEQTVFMzkyNTY1Q0FB
ODlENUQzQzAeFw0yNjAzMTEyMTI1MDBaFw0yNzAzMTAyMTMwMDBaMDMxMTAvBgNV
BAMTKDI5QTkxMEZBQkQxNTE0NzA1NDU4OTk1RDNEMzU0QjFGMjlERUM5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6E4zknckYYMRicg/4b7ZUEXq
ftetGnghDUUE/R6WN7cUxebM7oT+02wMONxK1Dk6kKK1iskcj8GcUmoXYrrZe/bQ
DfSjkdDoHAsGxZn6d7ec6cHRHmrnfAYj1GJt6yUTrqHQf8kDZolNm8sIUFLVeUj+
sVuFPJs8Nk2L8UbGtCl/MuSm3gkZJY5eq7qxC2C8Cw0YmqcNxATcbrOHMRRgGvKU
UaI8fV8elVMRhsJ08IRjZkHYYZT3OaqurHApES3EgoOozytVBJz3h3fFPtPpcb9J
8OZeGLAnggBCkNMR5pADgvoMnBcIAFtbfY3qQg/OnUk1KOuqmhY1Zf0QrqGDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKakQ+r0VFHBUWJldPTVLHyneyT4wHwYDVR0j
BBgwFoAU6D0LE0vyVjZ9P9peOSVlyqidXTwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkVBNUMzNkNDNDY2RENFMEMxOEI3QUUwOURDRDk2MzEz
QzQ0QjVCNUM2ODhENDRBQ0Q0RjM2Rjc5QjlFNEQzLzAvRTgzRDBCMTM0QkYyNTYz
NjdEM0ZEQTVFMzkyNTY1Q0FBODlENUQzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODNEMEIxMzRCRjI1NjM2N0Qz
RkRBNUUzOTI1NjVDQUE4OUQ1RDNDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZFQTVDMzZDQzQ2NkRDRTBDMThCN0FFMDlEQ0Q5NjMxM0M0NEI1QjVD
Njg4RDQ0QUNENEYzNkY3OUI5RTREMy8wLzMyMzgzMDMzM2E2MTY2MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDr0Aw
DQYJKoZIhvcNAQELBQADggEBACGrt73Y1pLYuNCcTJXZDZTBGCvs5F57ECqeaa3J
4rlo6pU/BJ6bbeRmetwfuB62qxKMa8Sy8nYlD6ylYBGFX3wdQNVTIGeXnShV9Ni9
iawOHVfndRVgXE60rk4u4h0mcNnKhUNL3+V6UFve5oQPXJD7V6H9oqzQrERiPEd/
Y9oXp6wPfHCPxDr2WXvdJ7+Ev31c9vum8PYsY0h+o0Wi+fqwnChF/hB74wI05ms/
uzoVtvXG/0HAaiEc8nZhgU5MHVSK0dsyafDyvN4SEVyMNKVqZAwFb3v/rdQWQQ6g
IIZM6UNAjV+FQtR+o9diiHcP4QSWlgS4xcN5YH3JwqRKbbs=
-----END CERTIFICATE-----
Generated at Tue Mar 17 14:57:12 2026 by rpki-client