Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/323830333a336135303a3a2f33322d3332203d3e20323733313837.roa
File:                     323830333a336135303a3a2f33322d3332203d3e20323733313837.roa (raw, json)
Hash identifier:          wNHy5R9HA7WIsEW1nXSJ/n8KC1MpAt5sbiiWeLf08Qk=
Subject key identifier:   A8:59:85:31:AE:65:AD:DB:01:F8:C8:9A:FB:BB:68:75:7C:E9:BF:23
Certificate issuer:       /CN=E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841
Certificate serial:       7DB726F8CA740E5C0E3E87317BBC4F65D20FCB99
Authority key identifier: E0:FB:92:04:93:5C:5E:1B:70:E9:05:DC:EF:2B:FE:AD:39:C8:D8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/323830333a336135303a3a2f33322d3332203d3e20323733313837.roa
Signing time:             Thu 20 Aug 2026 23:10:00 +0000
ROA not before:           Thu 20 Aug 2026 23:05:00 +0000
ROA not after:            Thu 19 Aug 2027 23:10:00 +0000
asID:                     273187
IP address blocks:        2803:3a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:26:f8:ca:74:0e:5c:0e:3e:87:31:7b:bc:4f:65:d2:0f:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841
        Validity
            Not Before: Aug 20 23:05:00 2026 GMT
            Not After : Aug 19 23:10:00 2027 GMT
        Subject: CN=A8598531AE65ADDB01F8C89AFBBB68757CE9BF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:0d:cc:51:29:31:97:76:a1:d4:85:bf:c6:
                    74:92:07:46:94:91:1b:99:f5:e8:1b:98:40:0b:39:
                    b7:31:35:35:a2:5a:6b:70:0a:7c:7c:a0:62:83:89:
                    0d:41:3c:ef:05:28:54:97:5d:4a:2f:8e:c3:6f:a5:
                    e0:f9:2e:ab:12:af:a5:6e:a8:93:6b:cc:a4:1f:65:
                    79:d7:50:86:3b:34:f1:63:36:f3:60:ec:c9:de:e9:
                    8c:3f:fc:f2:56:37:26:62:80:fb:cd:43:a5:2c:ac:
                    4a:a3:3b:52:c8:9f:e0:f7:4a:a9:48:96:76:47:91:
                    f1:6a:fa:69:91:5d:9d:00:9d:2a:1c:d6:cc:4f:e4:
                    40:63:ca:8c:22:d2:66:13:16:e8:36:d8:cb:2d:1e:
                    90:1c:c3:75:21:5e:08:2d:ae:1e:3a:90:3e:e7:62:
                    32:ba:59:20:5b:26:0d:ca:b9:87:81:9c:2a:9c:95:
                    94:09:c7:b8:e4:c8:8e:1f:0a:f6:5c:69:66:74:ef:
                    34:92:07:03:6a:db:e2:e6:f6:b9:0e:34:e1:44:a3:
                    df:8b:00:53:87:46:b0:d2:97:be:dd:e5:cd:d8:6d:
                    11:55:b1:c5:4d:b2:aa:07:99:51:86:aa:26:d0:99:
                    fd:48:03:f3:87:97:df:ae:a9:5b:43:3e:39:2c:82:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:59:85:31:AE:65:AD:DB:01:F8:C8:9A:FB:BB:68:75:7C:E9:BF:23
            X509v3 Authority Key Identifier:
                keyid:E0:FB:92:04:93:5C:5E:1B:70:E9:05:DC:EF:2B:FE:AD:39:C8:D8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/323830333a336135303a3a2f33322d3332203d3e20323733313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:24:59:ea:2c:f8:5a:1c:73:07:ef:89:69:b5:ac:17:2c:40:
         c7:67:10:85:c8:e7:0d:d2:c7:a3:4f:c6:73:43:a8:74:a5:fb:
         f1:4f:65:69:71:90:9c:06:d6:1a:94:65:ca:1a:14:ca:7c:52:
         e4:40:af:c2:05:0f:77:45:4c:e2:46:c2:12:b9:ce:fc:c8:6d:
         0f:ef:72:43:7d:71:b5:25:e0:74:6f:be:fa:f2:02:4d:38:66:
         d2:2d:05:0d:70:e3:1b:62:97:7b:e5:db:99:de:47:ba:22:66:
         34:a8:c1:b3:e2:1d:e0:1e:75:f9:9b:d6:16:6f:7e:18:43:31:
         e3:ab:4a:44:9f:dc:81:56:b6:c0:aa:54:fe:19:e0:78:47:eb:
         1c:51:ec:05:23:29:63:65:40:a0:71:81:33:91:d6:6d:cc:0b:
         71:08:cb:2c:bd:85:8f:df:6a:c5:58:92:38:44:59:97:fa:cd:
         ec:90:4e:53:7f:b6:05:e9:e7:07:15:49:8c:25:28:50:f8:d9:
         c3:76:7f:2b:e7:5c:86:ed:5d:f0:7f:d7:1a:5f:28:ca:3d:f5:
         e8:e5:6a:a0:04:2e:ab:a4:1e:fe:44:bd:ba:bf:06:33:43:15:
         ed:c4:46:d8:d0:29:f9:a2:cd:8d:ec:62:81:57:c6:96:37:63:
         4b:31:1f:64
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfbcm+Mp0DlwOPocxe7xPZdIPy5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBGQjkyMDQ5MzVDNUUxQjcwRTkwNURDRUYyQkZFQUQz
OUM4RDg0MTAeFw0yNjA4MjAyMzA1MDBaFw0yNzA4MTkyMzEwMDBaMDMxMTAvBgNV
BAMTKEE4NTk4NTMxQUU2NUFEREIwMUY4Qzg5QUZCQkI2ODc1N0NFOUJGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oA3MUSkxl3ah1IW/xnSSB0aU
kRuZ9egbmEALObcxNTWiWmtwCnx8oGKDiQ1BPO8FKFSXXUovjsNvpeD5LqsSr6Vu
qJNrzKQfZXnXUIY7NPFjNvNg7Mne6Yw//PJWNyZigPvNQ6UsrEqjO1LIn+D3SqlI
lnZHkfFq+mmRXZ0AnSoc1sxP5EBjyowi0mYTFug22MstHpAcw3UhXggtrh46kD7n
YjK6WSBbJg3KuYeBnCqclZQJx7jkyI4fCvZcaWZ07zSSBwNq2+Lm9rkONOFEo9+L
AFOHRrDSl77d5c3YbRFVscVNsqoHmVGGqibQmf1IA/OHl9+uqVtDPjksgmNbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqFmFMa5lrdsB+Mia+7todXzpvyMwHwYDVR0j
BBgwFoAU4PuSBJNcXhtw6QXc7yv+rTnI2EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTAwODAyOUEwRDdGMzFFN0NBNUI1N0JDNTQyODc5NTgy
QzcwMDM4NUMwRkFDMzkzRkVENEEwNTc0MzFBQTg3LzAvRTBGQjkyMDQ5MzVDNUUx
QjcwRTkwNURDRUYyQkZFQUQzOUM4RDg0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMEZCOTIwNDkzNUM1RTFCNzBF
OTA1RENFRjJCRkVBRDM5QzhEODQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREEwMDgwMjlBMEQ3RjMxRTdDQTVCNTdCQzU0Mjg3OTU4MkM3MDAzODVD
MEZBQzM5M0ZFRDRBMDU3NDMxQUE4Ny8wLzMyMzgzMDMzM2EzMzYxMzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMxMzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOlAw
DQYJKoZIhvcNAQELBQADggEBAFYkWeos+FoccwfviWm1rBcsQMdnEIXI5w3Sx6NP
xnNDqHSl+/FPZWlxkJwG1hqUZcoaFMp8UuRAr8IFD3dFTOJGwhK5zvzIbQ/vckN9
cbUl4HRvvvryAk04ZtItBQ1w4xtil3vl25neR7oiZjSowbPiHeAedfmb1hZvfhhD
MeOrSkSf3IFWtsCqVP4Z4HhH6xxR7AUjKWNlQKBxgTOR1m3MC3EIyyy9hY/fasVY
kjhEWZf6zeyQTlN/tgXp5wcVSYwlKFD42cN2fyvnXIbtXfB/1xpfKMo99ejlaqAE
LqukHv5Evbq/BjNDFe3ERtjQKfmizY3sYoFXxpY3Y0sxH2Q=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:31:50 2026 by rpki-client