Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa
File:                     323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa (raw, json)
Hash identifier:          RgN97nMUWacy+Yv85MI4iUl5QDXHKj4B2sqSRr/X7VU=
Subject key identifier:   D3:D7:87:D5:56:0F:D0:E2:74:9C:FF:C2:DD:E7:80:07:25:95:FE:AB
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       24ECD6285854662BDC04F05F04259A73CF3DC144
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa
Signing time:             Tue 18 Aug 2026 23:25:56 +0000
ROA not before:           Tue 18 Aug 2026 23:20:56 +0000
ROA not after:            Tue 17 Aug 2027 23:25:56 +0000
asID:                     26673
IP address blocks:        2803:bc40:8135::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Sep 2026 10:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ec:d6:28:58:54:66:2b:dc:04:f0:5f:04:25:9a:73:cf:3d:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Aug 18 23:20:56 2026 GMT
            Not After : Aug 17 23:25:56 2027 GMT
        Subject: CN=D3D787D5560FD0E2749CFFC2DDE780072595FEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:73:8e:75:50:17:97:b9:fb:04:1e:e3:b9:
                    b2:ff:a9:ec:76:e6:c1:e7:3a:85:aa:47:06:33:51:
                    03:f8:e2:96:56:94:e4:45:cc:9d:8b:89:d5:6d:ef:
                    1b:7a:b6:3c:81:3b:c7:ad:e7:40:f8:ce:04:82:7c:
                    3d:51:e1:4e:53:10:39:37:b6:11:c1:30:1a:eb:a4:
                    e4:77:92:8a:10:d5:2a:96:77:1d:2f:93:fc:92:de:
                    f0:ab:b8:b0:bc:62:72:75:8d:05:b7:55:ec:4a:40:
                    1b:ce:55:74:6f:20:52:a3:c3:d3:90:6f:71:e9:a4:
                    02:38:c3:2a:62:b8:cd:cd:ae:57:80:06:a0:18:b1:
                    11:c5:e6:ad:b7:01:73:47:44:ce:3b:b8:d2:92:bd:
                    02:68:28:3e:50:a5:02:24:94:10:88:6c:6b:e4:5c:
                    10:01:d6:a5:6a:19:f0:49:bb:d2:a5:1f:db:19:f7:
                    21:93:5a:96:db:f5:ac:e3:52:aa:8f:6e:8e:44:84:
                    a7:67:ab:37:2d:ba:fa:7a:65:3b:d8:81:be:d7:9a:
                    53:39:3f:30:e6:18:be:94:9f:b1:4b:c5:19:32:0b:
                    b2:bb:96:26:26:36:d8:c0:e0:dc:d5:c0:5b:89:31:
                    79:18:f2:32:51:9d:8d:52:06:a8:0a:d6:eb:24:5d:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D7:87:D5:56:0F:D0:E2:74:9C:FF:C2:DD:E7:80:07:25:95:FE:AB
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a383133353a3a2f36342d3634203d3e203236363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc40:8135::/64

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:31:7a:8f:31:90:67:95:f1:aa:e0:23:64:c7:45:ed:61:
         54:90:5c:1a:7b:b3:18:59:c7:c7:77:97:ec:40:14:55:af:19:
         e9:ca:b0:64:92:32:40:c2:ff:c7:5f:cd:37:6e:d2:d7:6e:b7:
         fe:93:0a:d0:27:d3:c9:e8:98:e7:e4:5f:ed:f8:7f:3d:af:57:
         ee:e4:2c:54:01:e8:80:f9:e8:e8:76:bf:e3:bb:54:f4:e4:3d:
         c3:c1:f6:5f:81:2d:5b:67:ee:d2:f7:a3:ee:8b:c6:c1:07:12:
         da:c2:90:8a:43:77:58:41:4a:89:b5:5a:21:ad:cf:e7:da:49:
         d4:50:a5:a3:7c:58:2a:fe:04:2d:4b:a1:2b:a0:12:a4:40:b4:
         3a:ba:d8:d8:0f:c3:c4:d4:74:a8:76:49:b0:9a:c4:06:97:01:
         c5:62:a9:93:b3:86:12:e1:0a:00:0f:73:e0:21:2a:3b:e3:5e:
         10:2c:60:24:2f:22:6a:7d:4b:d7:25:ed:90:d2:75:8b:16:67:
         be:3e:8b:c9:f0:be:72:26:32:95:10:03:07:e6:36:76:09:80:
         1f:4b:2a:e1:08:89:1d:51:b9:6b:87:1f:c0:64:ff:fd:c3:fa:
         88:85:7d:4f:32:34:c6:0b:e9:b2:c5:ab:57:cc:e8:d2:38:0d:
         71:56:89:f9
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUJOzWKFhUZivcBPBfBCWac889wUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxNkFGRUVFMzdBRTYzNDBBNjUyNEQ5MjBBQTQ3NEVF
RDZCNkE3MDAeFw0yNjA4MTgyMzIwNTZaFw0yNzA4MTcyMzI1NTZaMDMxMTAvBgNV
BAMTKEQzRDc4N0Q1NTYwRkQwRTI3NDlDRkZDMkRERTc4MDA3MjU5NUZFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OHOOdVAXl7n7BB7jubL/qex2
5sHnOoWqRwYzUQP44pZWlORFzJ2LidVt7xt6tjyBO8et50D4zgSCfD1R4U5TEDk3
thHBMBrrpOR3kooQ1SqWdx0vk/yS3vCruLC8YnJ1jQW3VexKQBvOVXRvIFKjw9OQ
b3HppAI4wypiuM3NrleABqAYsRHF5q23AXNHRM47uNKSvQJoKD5QpQIklBCIbGvk
XBAB1qVqGfBJu9KlH9sZ9yGTWpbb9azjUqqPbo5EhKdnqzctuvp6ZTvYgb7XmlM5
PzDmGL6Un7FLxRkyC7K7liYmNtjA4NzVwFuJMXkY8jJRnY1SBqgK1uskXd2tAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU09eH1VYP0OJ0nP/C3eeAByWV/qswHwYDVR0j
BBgwFoAUhhav7uN65jQKZSTZIKpHTu1ranAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjYzM0E4NzMyRkMyRkJCMUZDODIxRDNBNzM5MEI1RTFC
MDIyMEEwNzY3MjUzMkI1M0UzMjUwNjA0MEMwQjQ0LzAvODYxNkFGRUVFMzdBRTYz
NDBBNjUyNEQ5MjBBQTQ3NEVFRDZCNkE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjE2QUZFRUUzN0FFNjM0MEE2
NTI0RDkyMEFBNDc0RUVENkI2QTcwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY2MzNBODczMkZDMkZCQjFGQzgyMUQzQTczOTBCNUUxQjAyMjBBMDc2
NzI1MzJCNTNFMzI1MDYwNDBDMEI0NC8wLzMyMzgzMDMzM2E2MjYzMzQzMDNhMzgz
MTMzMzUzYTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMjM2MzYzNzMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjAL
AwkAKAO8QIE1AAAwDQYJKoZIhvcNAQELBQADggEBAKUdMXqPMZBnlfGq4CNkx0Xt
YVSQXBp7sxhZx8d3l+xAFFWvGenKsGSSMkDC/8dfzTdu0tdut/6TCtAn08nomOfk
X+34fz2vV+7kLFQB6ID56Oh2v+O7VPTkPcPB9l+BLVtn7tL3o+6LxsEHEtrCkIpD
d1hBSom1WiGtz+faSdRQpaN8WCr+BC1LoSugEqRAtDq62NgPw8TUdKh2SbCaxAaX
AcViqZOzhhLhCgAPc+AhKjvjXhAsYCQvImp9S9cl7ZDSdYsWZ74+i8nwvnImMpUQ
AwfmNnYJgB9LKuEIiR1RuWuHH8Bk//3D+oiFfU8yNMYL6bLFq1fM6NI4DXFWifk=
-----END CERTIFICATE-----
Generated at Mon Sep 7 05:48:01 2026 by rpki-client