Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a3a2f33322d3438203d3e20323734383737.roa
File:                     323830333a336133303a3a2f33322d3438203d3e20323734383737.roa (raw, json)
Hash identifier:          2/KVpb1I7I+QJhgqHgO6BEgZdVPKr6AlRUF0JedKcqI=
Subject key identifier:   B6:8F:29:EC:7E:CD:98:59:97:3C:58:39:02:D3:53:FE:21:4A:92:C8
Certificate issuer:       /CN=5EE7B720EC9BA11065DA9392423ADAA229B6571D
Certificate serial:       13DAAF32BD392A0251ACE2B384C7B4BAB6C2AED7
Authority key identifier: 5E:E7:B7:20:EC:9B:A1:10:65:DA:93:92:42:3A:DA:A2:29:B6:57:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a3a2f33322d3438203d3e20323734383737.roa
Signing time:             Sun 02 Aug 2026 16:15:00 +0000
ROA not before:           Sun 02 Aug 2026 16:10:00 +0000
ROA not after:            Sun 01 Aug 2027 16:15:00 +0000
asID:                     274877
IP address blocks:        2803:3a30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:af:32:bd:39:2a:02:51:ac:e2:b3:84:c7:b4:ba:b6:c2:ae:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EE7B720EC9BA11065DA9392423ADAA229B6571D
        Validity
            Not Before: Aug  2 16:10:00 2026 GMT
            Not After : Aug  1 16:15:00 2027 GMT
        Subject: CN=B68F29EC7ECD9859973C583902D353FE214A92C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:eb:3b:52:3f:84:34:7d:a7:56:9e:11:a2:
                    d2:59:f9:3f:b2:d6:a5:66:f7:c3:33:27:ad:0f:df:
                    3d:4e:f7:c8:43:98:50:e4:18:9d:66:21:d3:4c:ea:
                    02:cd:a7:8c:9c:b7:4f:f3:70:6f:c7:96:84:b6:2a:
                    c1:eb:31:1d:02:d3:d7:f7:8e:e1:ff:55:f9:33:23:
                    25:ec:75:3c:38:a7:bb:e0:3b:89:2c:a3:8a:f1:38:
                    51:73:14:4a:ba:c1:e7:8c:a0:be:9c:19:64:6a:2c:
                    3a:9a:7f:55:b3:2f:88:44:68:6e:d3:68:60:c9:62:
                    3f:e9:56:0e:c2:f8:7f:61:e0:00:a6:92:13:0f:2c:
                    c1:72:29:2a:4c:3f:12:ec:55:d3:df:99:19:f7:19:
                    92:41:c2:b4:17:4d:63:7b:44:4a:dd:f6:ad:47:71:
                    88:e3:32:f6:45:f2:79:67:c6:14:ba:59:c5:6d:f0:
                    0d:64:8a:db:64:aa:fc:04:90:5a:ca:ee:40:05:4c:
                    45:43:a1:11:da:4f:b7:fb:cb:93:5c:dd:2d:c9:35:
                    3d:40:e3:9c:03:8e:40:97:31:91:5a:28:31:0c:15:
                    cd:de:03:ee:95:31:2b:9b:e3:c5:c0:34:b6:a2:bf:
                    97:ae:be:5e:01:b5:c2:4c:b6:54:c1:71:48:c8:7f:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:29:EC:7E:CD:98:59:97:3C:58:39:02:D3:53:FE:21:4A:92:C8
            X509v3 Authority Key Identifier:
                keyid:5E:E7:B7:20:EC:9B:A1:10:65:DA:93:92:42:3A:DA:A2:29:B6:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a3a2f33322d3438203d3e20323734383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:6f:c3:04:25:52:98:e6:55:6b:27:d2:10:95:3b:07:76:
         a6:77:5e:e9:1e:5c:3a:7d:bf:67:1b:d8:ba:fe:97:56:16:56:
         f3:6c:f0:12:db:8b:c3:e0:97:e8:93:45:c7:40:65:6b:24:d1:
         6f:3b:4b:38:a0:94:40:d1:d3:a4:0c:59:03:8f:42:82:c3:02:
         a6:be:de:ba:6d:23:92:44:05:55:b4:0f:ee:81:1c:a0:ee:3d:
         9e:d4:08:3b:1d:fe:c3:1d:ba:e0:17:71:50:16:a5:12:db:89:
         3f:ad:ed:78:2d:f0:2f:30:3b:1b:cc:c0:74:9c:ef:5d:ee:34:
         e9:ec:ed:10:00:95:76:91:9b:f9:9a:76:87:1c:ae:c4:7c:0f:
         95:2d:a5:72:39:ce:d1:09:43:96:3c:4c:f9:7d:22:74:a0:dc:
         df:ce:d3:22:6b:ef:6c:47:f6:d4:42:47:e1:c7:b0:7f:90:3f:
         d5:b7:bc:c7:87:30:5d:b9:1f:c8:3a:75:6e:96:89:07:36:4f:
         67:50:c3:16:23:f2:c3:4f:ff:d3:4b:3f:49:b3:ac:96:b6:a6:
         a5:35:6c:de:02:9d:14:45:c5:98:c3:e1:c7:78:3b:fb:b8:a8:
         d5:4e:32:4d:8b:d2:a0:f0:ed:05:09:c6:b5:b9:df:ed:bf:81:
         18:7a:17:21
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUE9qvMr05KgJRrOKzhMe0urbCrtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVFN0I3MjBFQzlCQTExMDY1REE5MzkyNDIzQURBQTIy
OUI2NTcxRDAeFw0yNjA4MDIxNjEwMDBaFw0yNzA4MDExNjE1MDBaMDMxMTAvBgNV
BAMTKEI2OEYyOUVDN0VDRDk4NTk5NzNDNTgzOTAyRDM1M0ZFMjE0QTkyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9us7Uj+ENH2nVp4RotJZ+T+y
1qVm98MzJ60P3z1O98hDmFDkGJ1mIdNM6gLNp4yct0/zcG/HloS2KsHrMR0C09f3
juH/VfkzIyXsdTw4p7vgO4kso4rxOFFzFEq6weeMoL6cGWRqLDqaf1WzL4hEaG7T
aGDJYj/pVg7C+H9h4ACmkhMPLMFyKSpMPxLsVdPfmRn3GZJBwrQXTWN7RErd9q1H
cYjjMvZF8nlnxhS6WcVt8A1kittkqvwEkFrK7kAFTEVDoRHaT7f7y5Nc3S3JNT1A
45wDjkCXMZFaKDEMFc3eA+6VMSub48XANLaiv5euvl4BtcJMtlTBcUjIfwdhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUto8p7H7NmFmXPFg5AtNT/iFKksgwHwYDVR0j
BBgwFoAUXue3IOyboRBl2pOSQjraoim2Vx0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkUxRDY0QjlBMEZDNkE5REZGQzRFRkQ1NjRDMzRERTc2
N0NBREM4NEVBOEE2QUZCMTdENjFBMDJEMzdCN0QwLzAvNUVFN0I3MjBFQzlCQTEx
MDY1REE5MzkyNDIzQURBQTIyOUI2NTcxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUU3QjcyMEVDOUJBMTEwNjVE
QTkzOTI0MjNBREFBMjI5QjY1NzFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZFMUQ2NEI5QTBGQzZBOURGRkM0RUZENTY0QzM0REU3NjdDQURDODRF
QThBNkFGQjE3RDYxQTAyRDM3QjdEMC8wLzMyMzgzMDMzM2EzMzYxMzMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDM4MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOjAw
DQYJKoZIhvcNAQELBQADggEBAFo9b8MEJVKY5lVrJ9IQlTsHdqZ3XukeXDp9v2cb
2Lr+l1YWVvNs8BLbi8Pgl+iTRcdAZWsk0W87SziglEDR06QMWQOPQoLDAqa+3rpt
I5JEBVW0D+6BHKDuPZ7UCDsd/sMduuAXcVAWpRLbiT+t7Xgt8C8wOxvMwHSc713u
NOns7RAAlXaRm/madoccrsR8D5UtpXI5ztEJQ5Y8TPl9InSg3N/O0yJr72xH9tRC
R+HHsH+QP9W3vMeHMF25H8g6dW6WiQc2T2dQwxYj8sNP/9NLP0mzrJa2pqU1bN4C
nRRFxZjD4cd4O/u4qNVOMk2L0qDw7QUJxrW53+2/gRh6FyE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:39:58 2026 by rpki-client