Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/323830313a31353a633830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31353a633830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          mkfAoOnjjNOiAiFSu59f+luG8MRCoyvJUZJ1GVEVDKY=
Subject key identifier:   4D:A3:5E:83:5B:85:BD:B9:2C:48:F8:15:C0:8D:A0:D8:60:5A:B0:FA
Certificate issuer:       /CN=01840D78FD2DDCCAF1A2A6056C7733A606DC34F3
Certificate serial:       7722995F502DDCCDC2D9A93A3332EE0B815EA3C7
Authority key identifier: 01:84:0D:78:FD:2D:DC:CA:F1:A2:A6:05:6C:77:33:A6:06:DC:34:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/323830313a31353a633830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Wed 11 Mar 2026 15:15:00 +0000
ROA not before:           Wed 11 Mar 2026 15:10:00 +0000
ROA not after:            Wed 10 Mar 2027 15:15:00 +0000
asID:                     27951
IP address blocks:        2801:15:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Mar 2026 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:22:99:5f:50:2d:dc:cd:c2:d9:a9:3a:33:32:ee:0b:81:5e:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01840D78FD2DDCCAF1A2A6056C7733A606DC34F3
        Validity
            Not Before: Mar 11 15:10:00 2026 GMT
            Not After : Mar 10 15:15:00 2027 GMT
        Subject: CN=4DA35E835B85BDB92C48F815C08DA0D8605AB0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:98:62:93:9d:c4:4d:85:8f:db:df:f8:e5:
                    40:9b:7e:c8:56:55:df:da:8b:64:fc:6d:23:66:f2:
                    ad:91:f2:5f:9a:9b:76:1b:ef:19:94:a2:4d:0e:89:
                    e1:95:bb:ea:88:1b:ec:a6:f5:c8:53:c5:d0:23:64:
                    da:00:3b:9c:d1:be:23:84:94:af:cf:b8:d1:b1:50:
                    45:03:7f:b3:fd:e8:23:93:f8:e8:45:5e:30:b0:f0:
                    f9:b3:f6:3f:f9:7e:c0:7b:a9:36:98:31:18:ce:71:
                    a1:c8:75:a6:b1:de:2d:84:18:1a:bc:74:9b:90:8e:
                    2c:97:18:5e:8d:0c:fa:55:44:66:fa:55:6f:c3:cc:
                    a8:01:92:b2:1a:b7:c2:cf:09:7e:ba:0a:c8:b7:7e:
                    4f:31:21:3e:df:2d:1b:4f:1c:63:51:a1:ac:93:f2:
                    1f:06:fc:73:18:e1:e0:28:88:b5:fc:73:ac:f0:7d:
                    8e:22:59:d4:18:53:47:cc:31:f6:c6:27:48:c0:d2:
                    00:d4:71:ce:fc:df:99:4a:00:66:8e:26:57:ab:24:
                    e6:56:fb:89:08:62:78:85:a7:b3:d7:0e:58:bf:43:
                    90:7b:76:23:20:4a:64:91:ec:2a:81:24:d7:1a:38:
                    6a:da:f7:ca:4f:17:38:f5:29:29:4a:e6:a8:68:cd:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:5E:83:5B:85:BD:B9:2C:48:F8:15:C0:8D:A0:D8:60:5A:B0:FA
            X509v3 Authority Key Identifier:
                keyid:01:84:0D:78:FD:2D:DC:CA:F1:A2:A6:05:6C:77:33:A6:06:DC:34:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01840D78FD2DDCCAF1A2A6056C7733A606DC34F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA076391508CE9DC269A4C9E5EAB1E05DFA56D0A1D09851C27ED6D282B7FA6B/0/323830313a31353a633830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:14:db:ac:0e:24:a6:3b:5d:2e:2e:b8:25:d1:d5:cf:89:
         fc:f5:a6:ec:ba:6b:86:0e:7b:41:8e:11:10:ef:62:1d:58:84:
         98:e8:80:ee:f3:e6:e0:97:07:55:6b:92:3e:60:50:a5:c5:dd:
         5e:96:44:76:96:bc:3b:1e:50:20:15:99:fe:fe:0b:53:0c:25:
         99:e2:ec:6e:9a:37:73:33:5c:ff:d8:75:07:6f:8e:5f:a7:da:
         22:e1:78:ec:d4:52:50:d5:19:cd:28:98:16:ac:7d:eb:b9:4f:
         ce:a0:61:af:75:90:37:98:5b:a3:78:e6:f8:eb:6c:6e:f8:f2:
         3d:df:65:84:70:e4:84:a4:9f:d4:5c:84:fb:7f:80:63:e5:11:
         a1:a7:c3:d1:06:b9:05:2d:24:6c:e4:08:08:92:eb:b3:a8:e4:
         cb:a7:ef:75:d5:cf:43:f7:75:bf:bd:37:16:10:ed:70:26:7c:
         16:38:80:12:50:ba:0f:d7:b7:3a:96:6a:60:e9:9e:c0:0d:77:
         41:4c:37:b8:73:cb:6b:1a:2a:1f:13:34:99:8c:78:db:cf:8c:
         71:3d:55:ab:b5:1d:c9:be:fc:95:f7:01:4e:bf:e4:df:7d:18:
         26:ae:47:fb:f2:5b:a9:4f:8c:12:21:34:e6:d7:c0:d7:09:2a:
         a4:8f:53:b1
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdyKZX1At3M3C2ak6MzLuC4Feo8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE4NDBENzhGRDJERENDQUYxQTJBNjA1NkM3NzMzQTYw
NkRDMzRGMzAeFw0yNjAzMTExNTEwMDBaFw0yNzAzMTAxNTE1MDBaMDMxMTAvBgNV
BAMTKDREQTM1RTgzNUI4NUJEQjkyQzQ4RjgxNUMwOERBMEQ4NjA1QUIwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcphik53ETYWP29/45UCbfshW
Vd/ai2T8bSNm8q2R8l+am3Yb7xmUok0OieGVu+qIG+ym9chTxdAjZNoAO5zRviOE
lK/PuNGxUEUDf7P96COT+OhFXjCw8Pmz9j/5fsB7qTaYMRjOcaHIdaax3i2EGBq8
dJuQjiyXGF6NDPpVRGb6VW/DzKgBkrIat8LPCX66Csi3fk8xIT7fLRtPHGNRoayT
8h8G/HMY4eAoiLX8c6zwfY4iWdQYU0fMMfbGJ0jA0gDUcc7835lKAGaOJlerJOZW
+4kIYniFp7PXDli/Q5B7diMgSmSR7CqBJNcaOGra98pPFzj1KSlK5qhozWN9AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUTaNeg1uFvbksSPgVwI2g2GBasPowHwYDVR0j
BBgwFoAUAYQNeP0t3MrxoqYFbHczpgbcNPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkEwNzYzOTE1MDhDRTlEQzI2OUE0QzlFNUVBQjFFMDVE
RkE1NkQwQTFEMDk4NTFDMjdFRDZEMjgyQjdGQTZCLzAvMDE4NDBENzhGRDJEREND
QUYxQTJBNjA1NkM3NzMzQTYwNkRDMzRGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTg0MEQ3OEZEMkREQ0NBRjFB
MkE2MDU2Qzc3MzNBNjA2REMzNEYzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJBMDc2MzkxNTA4Q0U5REMyNjlBNEM5RTVFQUIxRTA1REZBNTZEMEEx
RDA5ODUxQzI3RUQ2RDI4MkI3RkE2Qi8wLzMyMzgzMDMxM2EzMTM1M2E2MzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczOTM1MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAVyAAwDQYJKoZIhvcNAQELBQADggEBADSmFNusDiSmO10uLrgl0dXPifz1puy6
a4YOe0GOERDvYh1YhJjogO7z5uCXB1Vrkj5gUKXF3V6WRHaWvDseUCAVmf7+C1MM
JZni7G6aN3MzXP/YdQdvjl+n2iLheOzUUlDVGc0omBasfeu5T86gYa91kDeYW6N4
5vjrbG748j3fZYRw5ISkn9RchPt/gGPlEaGnw9EGuQUtJGzkCAiS67Oo5Mun73XV
z0P3db+9NxYQ7XAmfBY4gBJQug/XtzqWamDpnsANd0FMN7hzy2saKh8TNJmMeNvP
jHE9Vau1Hcm+/JX3AU6/5N99GCauR/vyW6lPjBIhNObXwNcJKqSPU7E=
-----END CERTIFICATE-----
Generated at Sat Mar 14 16:22:21 2026 by rpki-client