Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/323830363a3333333a3a2f33322d3438203d3e20323635353739.roa
File:                     323830363a3333333a3a2f33322d3438203d3e20323635353739.roa (raw, json)
Hash identifier:          SF+Sa8KwE22nU3t/gJxqYvRhwu7jkcGjORfNikhA2M4=
Subject key identifier:   17:7B:B3:E9:A1:52:CA:F4:6E:C8:A7:E0:CF:C0:BA:20:04:12:56:92
Certificate issuer:       /CN=B7D75EA1B657A15E2404774E73C664657087C7E8
Certificate serial:       0C7E14C312142C01181A93C539F49CDDE4A85148
Authority key identifier: B7:D7:5E:A1:B6:57:A1:5E:24:04:77:4E:73:C6:64:65:70:87:C7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/323830363a3333333a3a2f33322d3438203d3e20323635353739.roa
Signing time:             Fri 06 Mar 2026 23:33:13 +0000
ROA not before:           Fri 06 Mar 2026 23:28:13 +0000
ROA not after:            Fri 05 Mar 2027 23:33:13 +0000
asID:                     265579
IP address blocks:        2806:333::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7e:14:c3:12:14:2c:01:18:1a:93:c5:39:f4:9c:dd:e4:a8:51:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D75EA1B657A15E2404774E73C664657087C7E8
        Validity
            Not Before: Mar  6 23:28:13 2026 GMT
            Not After : Mar  5 23:33:13 2027 GMT
        Subject: CN=177BB3E9A152CAF46EC8A7E0CFC0BA2004125692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:2a:b2:2b:f3:3e:3b:ef:80:49:24:24:87:
                    00:1f:98:60:34:97:5a:db:aa:1c:aa:d7:3d:1e:65:
                    35:fc:eb:cc:94:24:d4:83:5a:3f:78:cb:2e:5a:97:
                    ac:b7:5b:29:1b:24:40:1c:33:57:fb:0e:4c:7d:0f:
                    d8:f2:e6:55:d3:a6:71:7f:19:44:ee:d4:e3:b7:08:
                    40:0e:26:e2:f0:31:4d:4b:b8:3e:5d:d4:c3:91:2d:
                    bb:90:85:64:82:83:bd:64:da:fc:8e:ed:7b:ca:d1:
                    86:71:21:9e:01:ed:f8:3a:f2:26:c3:8a:00:35:0e:
                    83:4d:f9:c5:50:4e:3b:66:c0:6a:be:5d:b0:6c:6a:
                    66:94:99:6d:8f:ea:3a:fc:d6:1b:bd:53:6c:88:88:
                    b7:53:3a:6e:0f:cd:47:a0:a8:24:12:65:c5:06:5d:
                    62:ac:60:0e:d4:1a:0d:b2:51:bf:8f:77:40:7d:02:
                    a2:90:cc:3d:7c:9d:68:bd:1a:07:1a:c2:6d:63:01:
                    cb:8b:ff:98:f7:80:1d:2e:eb:2c:b5:2c:d9:79:26:
                    1a:0a:d2:50:ea:87:67:62:70:66:8f:0b:4d:69:0c:
                    da:b6:92:2f:7b:2f:91:e8:8b:87:5e:32:d4:fe:86:
                    c5:0e:af:93:67:d9:dd:5b:4c:19:22:66:e3:cb:ac:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:B3:E9:A1:52:CA:F4:6E:C8:A7:E0:CF:C0:BA:20:04:12:56:92
            X509v3 Authority Key Identifier:
                keyid:B7:D7:5E:A1:B6:57:A1:5E:24:04:77:4E:73:C6:64:65:70:87:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/323830363a3333333a3a2f33322d3438203d3e20323635353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:333::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:11:9b:7a:78:72:37:00:59:4b:68:1e:41:da:4e:95:7f:49:
         dc:58:81:54:e9:dd:b3:7a:da:1b:5d:2a:bf:ad:00:42:d3:83:
         54:79:82:a5:f8:99:ae:f1:4a:0d:5e:93:04:9d:dc:dd:6a:38:
         3f:ae:d6:74:66:a3:f9:44:71:ee:6d:7f:ed:b3:36:90:99:63:
         52:28:79:a5:a1:6d:bb:2a:3e:5c:10:fe:91:d6:4f:1e:34:f8:
         07:6c:5a:2e:8f:aa:8b:09:09:3a:ce:6e:8f:5a:3c:d5:06:73:
         89:4d:0e:a1:ec:37:aa:31:7a:e8:a4:13:ca:34:a0:0c:24:02:
         91:02:28:e3:a0:d7:a1:26:b3:f2:0f:99:42:57:90:98:ef:47:
         b5:33:37:31:5b:8e:30:6f:a1:49:e8:52:82:6e:d0:99:e2:e6:
         30:45:18:f3:9e:b9:e3:85:eb:dc:f9:d2:41:2a:ae:a7:f2:f5:
         45:7a:d3:57:2e:f6:9f:80:72:ae:99:86:21:fa:da:84:37:84:
         54:e9:3c:f5:f6:11:60:f1:96:c8:26:a6:5c:05:de:17:cd:3c:
         69:8e:14:a2:c2:02:bd:f9:ac:f9:de:76:3a:41:85:fc:6c:7f:
         04:17:33:7f:a2:83:74:76:95:72:8a:b1:f6:4e:96:9f:8e:7e:
         9d:20:87:5a
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDH4UwxIULAEYGpPFOfSc3eSoUUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdENzVFQTFCNjU3QTE1RTI0MDQ3NzRFNzNDNjY0NjU3
MDg3QzdFODAeFw0yNjAzMDYyMzI4MTNaFw0yNzAzMDUyMzMzMTNaMDMxMTAvBgNV
BAMTKDE3N0JCM0U5QTE1MkNBRjQ2RUM4QTdFMENGQzBCQTIwMDQxMjU2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZSqyK/M+O++ASSQkhwAfmGA0
l1rbqhyq1z0eZTX868yUJNSDWj94yy5al6y3WykbJEAcM1f7Dkx9D9jy5lXTpnF/
GUTu1OO3CEAOJuLwMU1LuD5d1MORLbuQhWSCg71k2vyO7XvK0YZxIZ4B7fg68ibD
igA1DoNN+cVQTjtmwGq+XbBsamaUmW2P6jr81hu9U2yIiLdTOm4PzUegqCQSZcUG
XWKsYA7UGg2yUb+Pd0B9AqKQzD18nWi9Ggcawm1jAcuL/5j3gB0u6yy1LNl5JhoK
0lDqh2dicGaPC01pDNq2ki97L5Hoi4deMtT+hsUOr5Nn2d1bTBkiZuPLrJKrAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUF3uz6aFSyvRuyKfgz8C6IAQSVpIwHwYDVR0j
BBgwFoAUt9deobZXoV4kBHdOc8ZkZXCHx+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0QwRUQxQTRDQjg1NzgyNzgyODM0Nzg1QkQwRTExRTg1
QTE2MzFFODAxNUY0RUNBQUJGNzJBMzcwMjUxNTdELzAvQjdENzVFQTFCNjU3QTE1
RTI0MDQ3NzRFNzNDNjY0NjU3MDg3QzdFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0Q3NUVBMUI2NTdBMTVFMjQw
NDc3NEU3M0M2NjQ2NTcwODdDN0U4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdEMEVEMUE0Q0I4NTc4Mjc4MjgzNDc4NUJEMEUxMUU4NUExNjMxRTgw
MTVGNEVDQUFCRjcyQTM3MDI1MTU3RC8wLzMyMzgzMDM2M2EzMzMzMzMzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzUzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgMzMA0G
CSqGSIb3DQEBCwUAA4IBAQAzEZt6eHI3AFlLaB5B2k6Vf0ncWIFU6d2zetobXSq/
rQBC04NUeYKl+Jmu8UoNXpMEndzdajg/rtZ0ZqP5RHHubX/tszaQmWNSKHmloW27
Kj5cEP6R1k8eNPgHbFouj6qLCQk6zm6PWjzVBnOJTQ6h7DeqMXropBPKNKAMJAKR
AijjoNehJrPyD5lCV5CY70e1MzcxW44wb6FJ6FKCbtCZ4uYwRRjznrnjhevc+dJB
Kq6n8vVFetNXLvafgHKumYYh+tqEN4RU6Tz19hFg8ZbIJqZcBd4XzTxpjhSiwgK9
+az53nY6QYX8bH8EFzN/ooN0dpVyirH2Tpafjn6dIIda
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:20:49 2026 by rpki-client