Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/323830333a316233303a3a2f33322d3332203d3e20323735303139.roa
File:                     323830333a316233303a3a2f33322d3332203d3e20323735303139.roa (raw, json)
Hash identifier:          N9hbzfO2Rxpw05HppuF2aHG/N5YWYXXGbuYH52fGBjA=
Subject key identifier:   2F:BB:E6:88:37:65:B4:AD:85:07:A7:8A:BF:11:14:C6:40:9F:76:86
Certificate issuer:       /CN=E4D09D9108D5F16FB688051F876E64753F21C2F3
Certificate serial:       759E855072C350C8C51A801E381E79E3C3839729
Authority key identifier: E4:D0:9D:91:08:D5:F1:6F:B6:88:05:1F:87:6E:64:75:3F:21:C2:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/323830333a316233303a3a2f33322d3332203d3e20323735303139.roa
Signing time:             Wed 02 Sep 2026 12:20:00 +0000
ROA not before:           Wed 02 Sep 2026 12:15:00 +0000
ROA not after:            Wed 01 Sep 2027 12:20:00 +0000
asID:                     275019
IP address blocks:        2803:1b30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 18:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9e:85:50:72:c3:50:c8:c5:1a:80:1e:38:1e:79:e3:c3:83:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D09D9108D5F16FB688051F876E64753F21C2F3
        Validity
            Not Before: Sep  2 12:15:00 2026 GMT
            Not After : Sep  1 12:20:00 2027 GMT
        Subject: CN=2FBBE6883765B4AD8507A78ABF1114C6409F7686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:a8:76:5f:88:ab:0d:4f:3f:6e:12:06:f1:
                    84:58:63:0d:65:6e:ed:c5:6d:dd:1a:86:d8:e2:3e:
                    f2:dd:38:c8:48:76:f6:e2:53:70:d2:32:55:57:a4:
                    2f:30:1a:ec:df:c2:80:51:a8:8f:a0:03:51:c4:f2:
                    43:8c:55:1d:d4:d4:dd:00:ed:cc:5c:20:43:f6:a5:
                    16:65:4e:34:29:25:d2:8a:d2:d1:06:27:57:6b:eb:
                    17:bc:e3:f5:34:fd:1d:38:d8:39:ba:97:56:83:c5:
                    55:cb:2b:cf:09:6a:e3:26:e5:67:9e:88:bc:b2:2d:
                    ea:49:70:05:2e:cb:79:82:e4:f9:87:04:7e:2c:21:
                    39:39:d8:a6:c7:a4:5a:da:5e:2e:eb:91:b1:ab:df:
                    90:e0:6a:9d:43:62:14:fa:cd:98:20:aa:6a:12:d6:
                    d8:c5:f8:8e:00:91:f0:7f:ae:8d:3a:80:61:b0:db:
                    3f:46:bb:e8:43:2f:76:f2:30:00:04:24:10:aa:0f:
                    fa:ce:dd:72:0d:f4:7b:f7:91:e8:8b:23:45:49:50:
                    e2:2b:e8:d2:0f:10:9a:d6:fc:93:cf:88:21:4a:8b:
                    5f:d2:3b:b2:df:e1:46:21:a2:f1:28:4a:be:f3:44:
                    8a:7e:06:9e:2d:04:5f:fb:f6:c7:87:ce:23:e8:f6:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:E6:88:37:65:B4:AD:85:07:A7:8A:BF:11:14:C6:40:9F:76:86
            X509v3 Authority Key Identifier:
                keyid:E4:D0:9D:91:08:D5:F1:6F:B6:88:05:1F:87:6E:64:75:3F:21:C2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4D09D9108D5F16FB688051F876E64753F21C2F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F29016E223340DE0EF5FC5A0F6C2DA9C3ED74995C773366E593810E22DA36389/0/323830333a316233303a3a2f33322d3332203d3e20323735303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:63:bd:9e:dd:fa:a5:d3:c4:b1:53:27:35:41:41:e8:41:db:
         5c:1d:ec:e9:c4:e1:2e:ee:56:9f:73:13:44:75:ab:fc:ad:fd:
         58:25:da:f0:45:a5:37:de:71:f8:33:db:73:23:49:fb:c5:00:
         71:9a:29:dd:84:46:31:47:5b:f7:33:a7:dd:f8:7e:15:aa:76:
         dd:a8:0b:af:00:8c:9e:92:a6:c4:d9:17:b5:83:b0:bf:60:6a:
         52:4c:e3:ca:c3:fb:87:8c:79:30:70:c2:df:3e:de:02:7f:71:
         8d:79:22:5f:70:15:a5:91:ec:81:03:8c:3f:65:29:6f:a4:60:
         a5:9e:e3:4f:9f:d0:4f:9c:a0:44:1e:f5:92:dd:4c:8e:f3:e3:
         8c:8a:d7:b9:5a:c1:bd:c7:c5:af:04:11:46:e4:1a:db:b5:bd:
         3f:44:66:05:34:89:25:eb:9b:f1:9a:e1:6f:71:a2:62:06:9f:
         e8:66:50:9f:b5:6d:92:ac:fc:ba:45:05:7d:ad:4f:62:ea:68:
         80:0b:db:0c:62:e2:f0:9e:c0:a7:03:b3:68:01:4e:1d:4e:5f:
         83:45:3e:9f:f9:ef:13:a9:ee:05:70:0a:db:65:4f:60:c4:f7:
         95:b6:df:41:7c:f7:29:7b:0e:da:e5:40:72:df:4a:fd:e9:57:
         6c:a9:88:e1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdZ6FUHLDUMjFGoAeOB5548ODlykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREMDlEOTEwOEQ1RjE2RkI2ODgwNTFGODc2RTY0NzUz
RjIxQzJGMzAeFw0yNjA5MDIxMjE1MDBaFw0yNzA5MDExMjIwMDBaMDMxMTAvBgNV
BAMTKDJGQkJFNjg4Mzc2NUI0QUQ4NTA3QTc4QUJGMTExNEM2NDA5Rjc2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmqh2X4irDU8/bhIG8YRYYw1l
bu3Fbd0ahtjiPvLdOMhIdvbiU3DSMlVXpC8wGuzfwoBRqI+gA1HE8kOMVR3U1N0A
7cxcIEP2pRZlTjQpJdKK0tEGJ1dr6xe84/U0/R042Dm6l1aDxVXLK88JauMm5Wee
iLyyLepJcAUuy3mC5PmHBH4sITk52KbHpFraXi7rkbGr35Dgap1DYhT6zZggqmoS
1tjF+I4AkfB/ro06gGGw2z9Gu+hDL3byMAAEJBCqD/rO3XIN9Hv3keiLI0VJUOIr
6NIPEJrW/JPPiCFKi1/SO7Lf4UYhovEoSr7zRIp+Bp4tBF/79seHziPo9n+bAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUL7vmiDdltK2FB6eKvxEUxkCfdoYwHwYDVR0j
BBgwFoAU5NCdkQjV8W+2iAUfh25kdT8hwvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMjkwMTZFMjIzMzQwREUwRUY1RkM1QTBGNkMyREE5QzNF
RDc0OTk1Qzc3MzM2NkU1OTM4MTBFMjJEQTM2Mzg5LzAvRTREMDlEOTEwOEQ1RjE2
RkI2ODgwNTFGODc2RTY0NzUzRjIxQzJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNEQwOUQ5MTA4RDVGMTZGQjY4
ODA1MUY4NzZFNjQ3NTNGMjFDMkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjI5MDE2RTIyMzM0MERFMEVGNUZDNUEwRjZDMkRBOUMzRUQ3NDk5NUM3
NzMzNjZFNTkzODEwRTIyREEzNjM4OS8wLzMyMzgzMDMzM2EzMTYyMzMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNTMwMzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGzAw
DQYJKoZIhvcNAQELBQADggEBADljvZ7d+qXTxLFTJzVBQehB21wd7OnE4S7uVp9z
E0R1q/yt/Vgl2vBFpTfecfgz23MjSfvFAHGaKd2ERjFHW/czp934fhWqdt2oC68A
jJ6SpsTZF7WDsL9galJM48rD+4eMeTBwwt8+3gJ/cY15Il9wFaWR7IEDjD9lKW+k
YKWe40+f0E+coEQe9ZLdTI7z44yK17lawb3Hxa8EEUbkGtu1vT9EZgU0iSXrm/Ga
4W9xomIGn+hmUJ+1bZKs/LpFBX2tT2LqaIAL2wxi4vCewKcDs2gBTh1OX4NFPp/5
7xOp7gVwCttlT2DE95W230F89yl7DtrlQHLfSv3pV2ypiOE=
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:12:36 2026 by rpki-client