Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f34342d3434203d3e20323635383633.roa
File:                     323830333a363632303a3a2f34342d3434203d3e20323635383633.roa (raw, json)
Hash identifier:          mYQS7r5tPnPXeBO0imxy/vFE3jUE5XYtDzrj45TRt5E=
Subject key identifier:   6E:97:94:E4:01:32:08:EA:43:62:0D:C5:53:F3:88:31:9E:FA:65:E3
Certificate issuer:       /CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
Certificate serial:       52C93883635F9A57CC21B08E22BDB29286D8E7C6
Authority key identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f34342d3434203d3e20323635383633.roa
Signing time:             Wed 11 Mar 2026 22:50:00 +0000
ROA not before:           Wed 11 Mar 2026 22:45:00 +0000
ROA not after:            Wed 10 Mar 2027 22:50:00 +0000
asID:                     265863
IP address blocks:        2803:6620::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 00:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c9:38:83:63:5f:9a:57:cc:21:b0:8e:22:bd:b2:92:86:d8:e7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
        Validity
            Not Before: Mar 11 22:45:00 2026 GMT
            Not After : Mar 10 22:50:00 2027 GMT
        Subject: CN=6E9794E4013208EA43620DC553F388319EFA65E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:b2:bc:35:18:de:23:33:34:68:7e:ee:44:
                    39:16:b4:01:6d:be:93:e5:53:cd:73:7c:b5:17:80:
                    2d:9e:e6:ab:f0:0f:0a:69:17:22:60:0c:aa:17:0e:
                    18:d0:c8:04:8f:d0:52:5e:1f:2d:de:bc:17:02:54:
                    98:45:21:6d:73:4f:a0:bc:da:42:94:56:f9:2d:92:
                    47:00:7d:6f:f1:5b:f4:d3:78:ab:01:64:ad:f3:ce:
                    6c:65:2d:48:14:8e:06:46:a9:04:65:2d:fc:c7:18:
                    43:84:7d:8f:d7:03:05:53:22:61:a2:7e:19:ef:38:
                    cd:06:ad:ab:d0:23:4e:86:00:a1:7d:34:69:a8:15:
                    00:d7:77:f6:ba:4b:76:bc:55:55:eb:e4:3f:83:b8:
                    d2:15:dc:2f:81:49:e5:bc:a0:2c:0c:82:73:3c:24:
                    36:49:a1:b6:61:9e:90:c1:90:26:83:cc:4e:55:5a:
                    7b:c7:29:e0:39:4a:d6:1b:59:8a:21:bc:1b:77:2c:
                    5e:0f:7b:59:ff:dc:e9:b5:6c:4b:87:5c:0e:c0:20:
                    c8:9c:6b:e6:51:46:3f:25:ce:dd:b4:f2:41:9a:2c:
                    93:70:25:0d:6a:d0:fd:ce:8a:06:65:d8:19:0a:1d:
                    96:13:5a:3f:b3:5e:05:cb:c3:8b:74:a0:fa:74:91:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:94:E4:01:32:08:EA:43:62:0D:C5:53:F3:88:31:9E:FA:65:E3
            X509v3 Authority Key Identifier:
                keyid:61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/323830333a363632303a3a2f34342d3434203d3e20323635383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6620::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:34:e8:26:1c:c4:6b:b5:22:aa:84:2d:e2:d6:53:a7:9f:
         6d:d7:1c:93:a9:d1:fd:83:0d:aa:fa:66:74:6c:97:de:ad:cf:
         7b:99:ba:83:81:1c:13:b3:c0:35:08:8a:15:06:69:75:ec:79:
         16:54:4f:4d:c9:2e:87:29:1e:cf:ba:0e:b5:92:21:eb:f4:2b:
         ce:27:ac:d1:3a:92:30:45:96:1e:28:e5:c2:75:11:19:1a:7a:
         f8:31:06:41:37:59:ed:e4:36:ca:67:40:09:8b:96:a7:2f:54:
         81:83:44:c9:59:a2:d5:d6:2e:ca:9e:82:b6:dd:2c:93:28:fa:
         5f:b5:81:d2:de:1a:35:f5:f3:e0:48:6a:eb:a2:fe:83:af:85:
         ae:75:ba:de:8f:9b:83:0f:08:4c:e5:b6:54:73:e4:7d:84:8d:
         38:79:73:71:b7:f5:a8:0d:b2:d8:83:0a:be:8c:2d:d3:05:14:
         96:d2:55:40:ab:b4:9e:79:a8:ed:8b:15:14:2d:3a:4b:33:7c:
         9c:57:cd:45:e0:69:7f:6b:74:1e:a3:34:91:ec:f2:a3:09:eb:
         69:5c:db:3b:e3:d1:cc:ba:b0:49:46:f2:6e:9e:51:38:66:8c:
         93:6f:de:66:c4:5c:1a:19:26:01:4f:eb:04:9e:b7:68:47:1a:
         37:30:79:fc
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUUsk4g2NfmlfMIbCOIr2ykobY58YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFBQzREMTQ1OTRBMjgzNkUwNjNFRjQ0RUM0RTIyNDhG
NDZCRkI3NDAeFw0yNjAzMTEyMjQ1MDBaFw0yNzAzMTAyMjUwMDBaMDMxMTAvBgNV
BAMTKDZFOTc5NEU0MDEzMjA4RUE0MzYyMERDNTUzRjM4ODMxOUVGQTY1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudLK8NRjeIzM0aH7uRDkWtAFt
vpPlU81zfLUXgC2e5qvwDwppFyJgDKoXDhjQyASP0FJeHy3evBcCVJhFIW1zT6C8
2kKUVvktkkcAfW/xW/TTeKsBZK3zzmxlLUgUjgZGqQRlLfzHGEOEfY/XAwVTImGi
fhnvOM0GravQI06GAKF9NGmoFQDXd/a6S3a8VVXr5D+DuNIV3C+BSeW8oCwMgnM8
JDZJobZhnpDBkCaDzE5VWnvHKeA5StYbWYohvBt3LF4Pe1n/3Om1bEuHXA7AIMic
a+ZRRj8lzt208kGaLJNwJQ1q0P3OigZl2BkKHZYTWj+zXgXLw4t0oPp0kXX1AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUbpeU5AEyCOpDYg3FU/OIMZ76ZeMwHwYDVR0j
BBgwFoAUYaxNFFlKKDbgY+9E7E4iSPRr+3QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQTYzMUI0Mjk0REU5QTg5QjAwQ0Q3RTA5QUYwMjM4QzE2
RTI5RjU4QjJBNzEwNjk4N0MyOTlGNTNDNTQ2RTVBLzAvNjFBQzREMTQ1OTRBMjgz
NkUwNjNFRjQ0RUM0RTIyNDhGNDZCRkI3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MUFDNEQxNDU5NEEyODM2RTA2
M0VGNDRFQzRFMjI0OEY0NkJGQjc0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0E2MzFCNDI5NERFOUE4OUIwMENEN0UwOUFGMDIzOEMxNkUyOUY1OEIy
QTcxMDY5ODdDMjk5RjUzQzU0NkU1QS8wLzMyMzgzMDMzM2EzNjM2MzIzMDNhM2Ey
ZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzYzNTM4MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgDZiAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAdvY06CYcxGu1IqqELeLWU6efbdcck6nR/YMN
qvpmdGyX3q3Pe5m6g4EcE7PANQiKFQZpdex5FlRPTckuhykez7oOtZIh6/Qrzies
0TqSMEWWHijlwnURGRp6+DEGQTdZ7eQ2ymdACYuWpy9UgYNEyVmi1dYuyp6Ctt0s
kyj6X7WB0t4aNfXz4Ehq66L+g6+FrnW63o+bgw8ITOW2VHPkfYSNOHlzcbf1qA2y
2IMKvowt0wUUltJVQKu0nnmo7YsVFC06SzN8nFfNReBpf2t0HqM0kezyownraVzb
O+PRzLqwSUbybp5ROGaMk2/eZsRcGhkmAU/rBJ63aEcaNzB5/A==
-----END CERTIFICATE-----
Generated at Thu Mar 12 05:00:34 2026 by rpki-client