Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/323830333a653333303a3a2f33322d3430203d3e20323735303031.roa
File:                     323830333a653333303a3a2f33322d3430203d3e20323735303031.roa (raw, json)
Hash identifier:          xI7imXrSoO9jfcOtHvwTc3jAxSsrTPHNtZTB8Shn5mU=
Subject key identifier:   3A:62:CA:1B:23:50:1C:9E:A4:A0:5C:03:8B:D3:DD:C5:73:02:08:6D
Certificate issuer:       /CN=B1520274A68D6024AE3E76D63F66D792273CF239
Certificate serial:       3E724A506D4E4F09101E1BACB60BBA36F9A236EE
Authority key identifier: B1:52:02:74:A6:8D:60:24:AE:3E:76:D6:3F:66:D7:92:27:3C:F2:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1520274A68D6024AE3E76D63F66D792273CF239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/323830333a653333303a3a2f33322d3430203d3e20323735303031.roa
Signing time:             Wed 21 Oct 2026 14:35:00 +0000
ROA not before:           Wed 21 Oct 2026 14:30:00 +0000
ROA not after:            Wed 20 Oct 2027 14:35:00 +0000
asID:                     275001
IP address blocks:        2803:e330::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/B1520274A68D6024AE3E76D63F66D792273CF239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/B1520274A68D6024AE3E76D63F66D792273CF239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1520274A68D6024AE3E76D63F66D792273CF239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 22:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:4a:50:6d:4e:4f:09:10:1e:1b:ac:b6:0b:ba:36:f9:a2:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1520274A68D6024AE3E76D63F66D792273CF239
        Validity
            Not Before: Oct 21 14:30:00 2026 GMT
            Not After : Oct 20 14:35:00 2027 GMT
        Subject: CN=3A62CA1B23501C9EA4A05C038BD3DDC57302086D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:39:08:8a:00:11:06:a5:c1:93:9e:0c:d8:
                    12:8b:b7:92:73:78:02:f5:dc:16:72:c2:44:eb:2f:
                    c4:5f:e3:4e:f9:b0:17:78:1f:ce:08:a8:35:a9:01:
                    f0:b5:03:b9:37:4f:9f:f9:65:72:9b:c4:0d:5d:27:
                    95:c2:41:62:3c:1a:3f:ff:ca:bd:2e:59:fa:5e:c6:
                    b2:c1:0a:46:44:bd:d3:7e:4a:a7:b2:e0:84:df:8c:
                    be:09:70:c4:f8:0e:b1:13:22:86:66:8e:34:f7:41:
                    a0:2b:41:e4:d6:a2:ec:74:73:1e:65:b1:ce:f1:3d:
                    a1:68:b8:de:d9:41:14:71:d9:ec:5c:83:d2:6b:17:
                    c6:13:8f:7b:39:74:ca:5d:58:17:ec:24:b9:f4:6e:
                    cc:9c:cc:be:2e:69:d0:2d:96:c3:52:ba:e0:6c:56:
                    95:53:3b:9e:05:6d:74:e9:4b:4d:0c:c0:e0:83:09:
                    73:b3:f4:a2:2e:61:e5:53:36:d4:53:c9:28:e1:16:
                    96:11:2f:ba:a3:00:f6:8e:48:3c:3e:2c:42:78:74:
                    c4:75:16:28:c6:70:7c:93:61:35:4a:e8:d5:78:43:
                    58:24:ba:87:09:80:f3:7e:c2:b1:64:79:fc:de:95:
                    36:59:0b:e8:dd:a3:21:a2:60:72:8c:8c:64:7e:90:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:CA:1B:23:50:1C:9E:A4:A0:5C:03:8B:D3:DD:C5:73:02:08:6D
            X509v3 Authority Key Identifier:
                keyid:B1:52:02:74:A6:8D:60:24:AE:3E:76:D6:3F:66:D7:92:27:3C:F2:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/B1520274A68D6024AE3E76D63F66D792273CF239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1520274A68D6024AE3E76D63F66D792273CF239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F1E9E8BEA7F19B2C1B6BCAEB6797B1694725E7ABDA9222E12F7AF415A55C1C/0/323830333a653333303a3a2f33322d3430203d3e20323735303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e330::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:1b:ad:5e:05:47:00:be:b6:f4:13:b2:2e:42:69:74:78:
         58:d4:e8:b1:c1:e5:aa:e0:a2:35:cd:b0:10:9f:d6:2a:85:7f:
         9e:d6:92:d3:c5:23:3f:b8:c9:a0:93:71:87:ea:d3:24:d1:3d:
         bb:fc:ce:65:d1:d1:b5:3c:5a:b2:4b:13:30:46:b7:d9:20:e3:
         bb:52:7d:c2:55:2c:1b:46:0d:a3:ac:fc:60:72:b8:e9:5f:7f:
         82:c6:c4:29:b3:d5:c2:db:d8:c0:0c:4b:dc:52:d6:2c:7d:c6:
         d3:bc:8c:61:1f:8d:5c:29:21:de:96:f8:01:5b:76:a0:0d:1e:
         51:28:ad:5e:28:34:14:aa:db:c1:f2:4f:9d:fb:ee:3f:6f:10:
         02:40:9d:94:6f:9c:97:6f:b7:25:28:ec:c0:09:e7:53:1a:26:
         82:22:ae:19:5a:ec:4a:72:ea:99:51:b0:cf:d1:c7:e6:2d:82:
         60:ba:8f:b0:7c:37:42:c2:a0:3f:d1:bc:59:a2:b4:73:13:2e:
         64:6e:a3:3f:1a:7d:a5:1b:65:51:f3:3e:09:58:08:8f:8b:c0:
         c3:54:e6:ae:57:6e:2d:2e:dc:dd:4a:10:e2:72:48:45:bf:83:
         f4:f8:71:ad:72:db:68:bb:e8:c0:db:fa:3c:e2:f7:40:92:d4:
         4f:f1:cf:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPnJKUG1OTwkQHhustgu6NvmiNu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1MjAyNzRBNjhENjAyNEFFM0U3NkQ2M0Y2NkQ3OTIy
NzNDRjIzOTAeFw0yNjEwMjExNDMwMDBaFw0yNzEwMjAxNDM1MDBaMDMxMTAvBgNV
BAMTKDNBNjJDQTFCMjM1MDFDOUVBNEEwNUMwMzhCRDNEREM1NzMwMjA4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRjkIigARBqXBk54M2BKLt5Jz
eAL13BZywkTrL8Rf4075sBd4H84IqDWpAfC1A7k3T5/5ZXKbxA1dJ5XCQWI8Gj//
yr0uWfpexrLBCkZEvdN+Sqey4ITfjL4JcMT4DrETIoZmjjT3QaArQeTWoux0cx5l
sc7xPaFouN7ZQRRx2excg9JrF8YTj3s5dMpdWBfsJLn0bsyczL4uadAtlsNSuuBs
VpVTO54FbXTpS00MwOCDCXOz9KIuYeVTNtRTySjhFpYRL7qjAPaOSDw+LEJ4dMR1
FijGcHyTYTVK6NV4Q1gkuocJgPN+wrFkefzelTZZC+jdoyGiYHKMjGR+kK/lAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOmLKGyNQHJ6koFwDi9PdxXMCCG0wHwYDVR0j
BBgwFoAUsVICdKaNYCSuPnbWP2bXkic88jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkYxRTlFOEJFQTdGMTlCMkMxQjZCQ0FFQjY3OTdCMTY5
NDcyNUU3QUJEQTkyMjJFMTJGN0FGNDE1QTU1QzFDLzAvQjE1MjAyNzRBNjhENjAy
NEFFM0U3NkQ2M0Y2NkQ3OTIyNzNDRjIzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTUyMDI3NEE2OEQ2MDI0QUUz
RTc2RDYzRjY2RDc5MjI3M0NGMjM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJGMUU5RThCRUE3RjE5QjJDMUI2QkNBRUI2Nzk3QjE2OTQ3MjVFN0FC
REE5MjIyRTEyRjdBRjQxNUE1NUMxQy8wLzMyMzgzMDMzM2E2NTMzMzMzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzczNTMwMzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4zAw
DQYJKoZIhvcNAQELBQADggEBAFTsG61eBUcAvrb0E7IuQml0eFjU6LHB5argojXN
sBCf1iqFf57WktPFIz+4yaCTcYfq0yTRPbv8zmXR0bU8WrJLEzBGt9kg47tSfcJV
LBtGDaOs/GByuOlff4LGxCmz1cLb2MAMS9xS1ix9xtO8jGEfjVwpId6W+AFbdqAN
HlEorV4oNBSq28HyT5377j9vEAJAnZRvnJdvtyUo7MAJ51MaJoIirhla7Epy6plR
sM/Rx+YtgmC6j7B8N0LCoD/RvFmitHMTLmRuoz8afaUbZVHzPglYCI+LwMNU5q5X
bi0u3N1KEOJySEW/g/T4ca1y22i76MDb+jzi90CS1E/xz50=
-----END CERTIFICATE-----
Generated at Sat Oct 31 03:28:08 2026 by rpki-client