Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/323830333a353638303a3a2f33322d3438203d3e20323633323233.roa
File:                     323830333a353638303a3a2f33322d3438203d3e20323633323233.roa (raw, json)
Hash identifier:          rPAvTL44JFh8wjDrFb+0jGqqtLpAUegsuP8fM/QuNyQ=
Subject key identifier:   74:C0:23:F8:FE:46:16:55:6E:9C:2C:02:D3:29:07:81:46:FD:A5:00
Certificate issuer:       /CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
Certificate serial:       48A6968AB88455A83CF8041A9147F9EA4A74576E
Authority key identifier: 38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/323830333a353638303a3a2f33322d3438203d3e20323633323233.roa
Signing time:             Thu 04 Jun 2026 14:46:34 +0000
ROA not before:           Thu 04 Jun 2026 14:41:34 +0000
ROA not after:            Thu 03 Jun 2027 14:46:34 +0000
asID:                     263223
IP address blocks:        2803:5680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a6:96:8a:b8:84:55:a8:3c:f8:04:1a:91:47:f9:ea:4a:74:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
        Validity
            Not Before: Jun  4 14:41:34 2026 GMT
            Not After : Jun  3 14:46:34 2027 GMT
        Subject: CN=74C023F8FE4616556E9C2C02D329078146FDA500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:c0:10:a8:bc:11:b2:64:fc:a8:07:a0:13:
                    f7:59:32:aa:fc:21:76:11:35:3a:47:43:6f:68:96:
                    94:a5:f6:22:fc:cd:fb:c0:93:64:c3:d3:65:2a:65:
                    83:1e:3f:47:80:46:7c:c5:8a:bf:28:eb:a8:0b:a5:
                    49:10:ee:b4:2f:36:a3:d4:45:d9:0d:51:d0:3b:78:
                    7a:4d:83:3b:ee:5c:ad:37:30:7f:ba:3e:05:f8:d0:
                    7b:50:46:3e:7a:a7:7f:10:af:2a:13:b6:62:f5:a9:
                    be:ed:b3:41:91:09:47:f9:8b:00:90:1e:e8:90:fa:
                    bf:fb:fe:0f:09:b7:50:a5:69:6b:1b:99:4b:e3:eb:
                    78:09:c2:d7:f1:8a:05:c5:14:76:55:b4:c3:ab:ba:
                    42:fa:38:96:4e:68:12:be:ed:49:0b:46:86:ae:84:
                    e2:1e:a4:95:16:42:1c:6a:11:ed:02:0c:5d:bd:9f:
                    bc:29:63:f8:d9:42:e7:2b:72:54:f5:e7:2e:3b:5e:
                    e2:74:a2:ee:26:c6:e6:fd:42:e2:21:02:22:5b:68:
                    71:5a:b5:4c:06:5a:77:00:79:8a:bd:39:07:d9:61:
                    45:0e:78:bb:27:3f:8a:cc:9c:4e:f4:3c:eb:d9:58:
                    8e:2a:7c:9a:8b:38:ae:1c:51:87:27:8c:cd:84:0a:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:23:F8:FE:46:16:55:6E:9C:2C:02:D3:29:07:81:46:FD:A5:00
            X509v3 Authority Key Identifier:
                keyid:38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/323830333a353638303a3a2f33322d3438203d3e20323633323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5680::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:19:4d:19:c1:60:88:34:d7:2e:a1:32:2f:7f:46:24:60:33:
         e7:87:14:68:b8:3c:9f:ec:fc:88:24:4c:05:32:3d:4f:1e:d5:
         b3:7f:36:b9:56:4b:c4:f3:ae:d3:fa:42:f9:a0:b0:ea:a2:37:
         7b:b7:eb:ef:a8:ec:6c:b5:67:54:2c:8c:ff:51:d5:44:17:8b:
         7b:2e:4b:a2:8f:18:1f:b0:47:b4:d3:e3:75:fa:b2:67:52:92:
         b9:5f:d0:5c:62:bd:18:7f:a1:ac:dd:80:14:69:c7:84:80:a6:
         95:d6:f5:89:f8:e1:e3:dd:ab:a1:9a:a0:10:4e:c6:d7:51:e1:
         2c:b8:49:3e:4a:70:03:52:be:b1:d9:52:9d:61:42:69:1e:7a:
         27:a9:e4:fc:e5:91:2d:de:21:11:12:75:30:c8:a5:26:b3:ef:
         f0:c8:c7:1a:97:ed:49:82:0d:d8:59:e7:1f:a7:cf:f4:f8:04:
         60:ba:82:c1:ac:5c:6b:84:01:90:c3:f8:6a:a4:48:6f:cb:17:
         f9:3b:57:97:dd:af:50:f6:1a:57:15:4c:ac:7c:3b:04:a3:51:
         45:b4:79:3e:32:a6:4a:da:a3:78:c7:37:c4:51:d4:b2:2a:66:
         28:8d:18:02:59:7e:23:c3:4b:a5:11:f0:ae:21:c0:bc:77:7e:
         a7:2d:fb:44
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSKaWiriEVag8+AQakUf56kp0V24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg1RDVCQzVCRDk2QUEwOEZCRjQxQzQ4ODczNjBCMjRB
OEJGOTAzNjAeFw0yNjA2MDQxNDQxMzRaFw0yNzA2MDMxNDQ2MzRaMDMxMTAvBgNV
BAMTKDc0QzAyM0Y4RkU0NjE2NTU2RTlDMkMwMkQzMjkwNzgxNDZGREE1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHMAQqLwRsmT8qAegE/dZMqr8
IXYRNTpHQ29olpSl9iL8zfvAk2TD02UqZYMeP0eARnzFir8o66gLpUkQ7rQvNqPU
RdkNUdA7eHpNgzvuXK03MH+6PgX40HtQRj56p38QryoTtmL1qb7ts0GRCUf5iwCQ
HuiQ+r/7/g8Jt1ClaWsbmUvj63gJwtfxigXFFHZVtMOrukL6OJZOaBK+7UkLRoau
hOIepJUWQhxqEe0CDF29n7wpY/jZQucrclT15y47XuJ0ou4mxub9QuIhAiJbaHFa
tUwGWncAeYq9OQfZYUUOeLsnP4rMnE70POvZWI4qfJqLOK4cUYcnjM2ECumDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUdMAj+P5GFlVunCwC0ykHgUb9pQAwHwYDVR0j
BBgwFoAUOF1bxb2Wqgj79BxIhzYLJKi/kDYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTk2MTYwQkQ3Q0Y3ODg3REM2QjQyMDBFQURBRTc5MDFB
Q0EwQTk5ODhFRUQ3N0VENTc0OUVFRDU3RTJCODQxLzAvMzg1RDVCQzVCRDk2QUEw
OEZCRjQxQzQ4ODczNjBCMjRBOEJGOTAzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODVENUJDNUJEOTZBQTA4RkJG
NDFDNDg4NzM2MEIyNEE4QkY5MDM2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU5NjE2MEJEN0NGNzg4N0RDNkI0MjAwRUFEQUU3OTAxQUNBMEE5OTg4
RUVENzdFRDU3NDlFRUQ1N0UyQjg0MS8wLzMyMzgzMDMzM2EzNTM2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMyMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDVoAw
DQYJKoZIhvcNAQELBQADggEBAHQZTRnBYIg01y6hMi9/RiRgM+eHFGi4PJ/s/Igk
TAUyPU8e1bN/NrlWS8TzrtP6QvmgsOqiN3u36++o7Gy1Z1QsjP9R1UQXi3suS6KP
GB+wR7TT43X6smdSkrlf0FxivRh/oazdgBRpx4SAppXW9Yn44ePdq6GaoBBOxtdR
4Sy4ST5KcANSvrHZUp1hQmkeeiep5PzlkS3eIRESdTDIpSaz7/DIxxqX7UmCDdhZ
5x+nz/T4BGC6gsGsXGuEAZDD+GqkSG/LF/k7V5fdr1D2GlcVTKx8OwSjUUW0eT4y
pkrao3jHN8RR1LIqZiiNGAJZfiPDS6UR8K4hwLx3fqct+0Q=
-----END CERTIFICATE-----
Generated at Sat Jun 6 21:25:49 2026 by rpki-client