Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a653738303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          8C2HTk6vfb4FzgA+yuz8tjGVCzzd7AtpXgSkRn0HT2s=
Subject key identifier:   63:6C:D0:81:16:C5:94:24:7F:74:D6:9B:DB:AA:B5:24:67:64:0F:FB
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       38D342257D9DC16E3150D78C096D078F080D9A06
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Mon 06 Jul 2026 12:05:02 +0000
ROA not before:           Mon 06 Jul 2026 12:00:02 +0000
ROA not after:            Mon 05 Jul 2027 12:05:02 +0000
asID:                     52468
IP address blocks:        2803:e780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 16 Jul 2026 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:42:25:7d:9d:c1:6e:31:50:d7:8c:09:6d:07:8f:08:0d:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jul  6 12:00:02 2026 GMT
            Not After : Jul  5 12:05:02 2027 GMT
        Subject: CN=636CD08116C594247F74D69BDBAAB52467640FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:c6:d9:60:1a:ff:16:15:97:79:f3:9b:04:
                    c2:17:c7:71:e8:8c:ab:49:3e:9a:9a:38:bd:c1:89:
                    2e:2c:71:12:e6:f0:4b:9b:90:73:60:b1:d0:7b:89:
                    39:78:97:da:27:80:0c:6b:a9:dd:a8:14:36:53:6f:
                    15:16:70:b7:43:1f:b6:65:75:be:6f:61:6c:6c:ed:
                    e1:5d:87:6c:80:7c:6f:bd:fb:47:00:d3:f3:af:f5:
                    2b:69:e4:bd:f3:35:8e:b0:63:f2:b7:56:2f:1c:c1:
                    f1:a5:e0:3c:a1:5c:b5:ac:f5:06:b8:65:0b:ee:e9:
                    50:0b:0a:02:c8:39:0e:3b:54:ab:c4:74:9e:94:74:
                    28:a8:b3:90:79:dd:9f:4d:e8:1b:23:51:33:43:b0:
                    7a:21:b0:07:c4:b0:80:92:44:78:2a:b6:d6:37:72:
                    66:90:42:be:2c:d1:0d:4a:88:d1:33:17:f8:ef:7f:
                    f9:82:3b:09:14:b5:90:2a:d7:99:0a:94:dc:14:95:
                    7e:20:1f:fa:13:99:ab:14:ee:76:2d:df:dc:f2:37:
                    82:11:86:c1:a8:8f:17:58:31:71:bd:30:21:04:7d:
                    c8:04:43:a1:6c:8c:48:f4:4c:27:7d:d3:55:53:f2:
                    c3:b7:ae:07:8a:23:3e:8b:80:de:12:1f:88:9e:68:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:D0:81:16:C5:94:24:7F:74:D6:9B:DB:AA:B5:24:67:64:0F:FB
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e780::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:94:0b:73:aa:34:f9:31:3d:1d:5c:7e:62:ae:e2:7e:6a:
         87:cf:19:ad:e7:cb:24:f3:37:3d:35:b2:8f:05:e0:6b:8b:89:
         0f:fd:56:b3:1b:bb:69:4a:6d:d7:4d:1b:0f:59:ec:b5:f4:64:
         91:69:b7:95:7d:c1:57:61:6f:fb:e1:bb:d0:7a:1e:ca:d0:52:
         a6:88:5a:53:59:8a:68:4d:1a:e7:1f:8b:93:c6:bd:4a:ed:2d:
         8b:10:01:31:a8:af:0b:2e:5f:a0:29:e8:b5:98:c3:5c:e4:ff:
         16:41:a1:56:20:ce:0b:26:0d:60:eb:3b:54:c2:02:35:49:28:
         a5:b6:a9:1f:4f:ad:58:b2:4b:57:58:f8:58:ef:4e:9e:66:9e:
         e9:ff:8c:1a:b6:40:5e:5e:19:fc:d2:85:78:2a:a2:cd:df:06:
         14:50:f2:95:cf:7f:10:6d:8a:dd:f9:d2:82:83:18:9e:15:ae:
         6d:7a:1c:fc:78:39:6c:84:d7:7e:fb:4b:ab:87:71:23:2e:8c:
         cc:a9:3b:5d:03:eb:d6:12:ba:e9:b6:ed:0a:18:81:29:c7:9f:
         69:8f:1a:2c:b5:d4:5d:87:d2:66:e0:b3:f9:68:ea:a3:5b:c0:
         b0:5a:12:eb:05:a2:a7:88:9d:12:36:34:9e:94:01:f1:76:93:
         e7:30:0c:ef
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUONNCJX2dwW4xUNeMCW0HjwgNmgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDQjIxNjUwOENFRjM4Q0IyQTY4RTQ1RUJGNEQ0MTg1
MzFFMzc5OTAeFw0yNjA3MDYxMjAwMDJaFw0yNzA3MDUxMjA1MDJaMDMxMTAvBgNV
BAMTKDYzNkNEMDgxMTZDNTk0MjQ3Rjc0RDY5QkRCQUFCNTI0Njc2NDBGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+8bZYBr/FhWXefObBMIXx3Ho
jKtJPpqaOL3BiS4scRLm8EubkHNgsdB7iTl4l9ongAxrqd2oFDZTbxUWcLdDH7Zl
db5vYWxs7eFdh2yAfG+9+0cA0/Ov9Stp5L3zNY6wY/K3Vi8cwfGl4DyhXLWs9Qa4
ZQvu6VALCgLIOQ47VKvEdJ6UdCios5B53Z9N6BsjUTNDsHohsAfEsICSRHgqttY3
cmaQQr4s0Q1KiNEzF/jvf/mCOwkUtZAq15kKlNwUlX4gH/oTmasU7nYt39zyN4IR
hsGojxdYMXG9MCEEfcgEQ6FsjEj0TCd901VT8sO3rgeKIz6LgN4SH4ieaF7DAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUY2zQgRbFlCR/dNab26q1JGdkD/swHwYDVR0j
BBgwFoAUicshZQjO84yypo5F6/TUGFMeN5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMjYzNjk1OTAyNkQ1QTY4N0Q2RjA2OEJFQ0E1Q0FCRTVF
OEU5QUI2MEEwOEYzMEVBQzNGMzI0OUY0MzcyQjdELzAvODlDQjIxNjUwOENFRjM4
Q0IyQTY4RTQ1RUJGNEQ0MTg1MzFFMzc5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUNCMjE2NTA4Q0VGMzhDQjJB
NjhFNDVFQkY0RDQxODUzMUUzNzk5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzI2MzY5NTkwMjZENUE2ODdENkYwNjhCRUNBNUNBQkU1RThFOUFCNjBB
MDhGMzBFQUMzRjMyNDlGNDM3MkI3RC8wLzMyMzgzMDMzM2E2NTM3MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA+eAMA0G
CSqGSIb3DQEBCwUAA4IBAQAm1pQLc6o0+TE9HVx+Yq7ifmqHzxmt58sk8zc9NbKP
BeBri4kP/VazG7tpSm3XTRsPWey19GSRabeVfcFXYW/74bvQeh7K0FKmiFpTWYpo
TRrnH4uTxr1K7S2LEAExqK8LLl+gKei1mMNc5P8WQaFWIM4LJg1g6ztUwgI1SSil
tqkfT61YsktXWPhY706eZp7p/4watkBeXhn80oV4KqLN3wYUUPKVz38QbYrd+dKC
gxieFa5tehz8eDlshNd++0urh3EjLozMqTtdA+vWErrptu0KGIEpx59pjxostdRd
h9Jm4LP5aOqjW8CwWhLrBaKniJ0SNjSelAHxdpPnMAzv
-----END CERTIFICATE-----
Generated at Mon Jul 13 07:00:09 2026 by rpki-client