Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          wt68VTN7HejVPUKMM8KBU4ReFjrPHjVp6jBVeFRRaww=
Subject key identifier:   D3:6A:0F:C5:40:F5:4A:49:72:B4:02:9F:40:99:8C:66:89:13:DB:24
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       197BAB025F10BB592B05C1EA6D41FB1859F28A70
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Fri 03 Apr 2026 05:37:20 +0000
ROA not before:           Fri 03 Apr 2026 05:32:20 +0000
ROA not after:            Fri 02 Apr 2027 05:37:20 +0000
asID:                     272373
IP address blocks:        2806:419:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 14:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7b:ab:02:5f:10:bb:59:2b:05:c1:ea:6d:41:fb:18:59:f2:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Apr  3 05:32:20 2026 GMT
            Not After : Apr  2 05:37:20 2027 GMT
        Subject: CN=D36A0FC540F54A4972B4029F40998C668913DB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:9d:a5:81:c6:90:dc:a3:1d:bb:83:5f:fe:
                    ae:0b:c0:51:ff:bc:8c:da:8b:2a:1c:a9:7a:3e:8b:
                    b5:d2:46:40:62:d1:47:c4:ff:9e:be:e8:93:3c:1e:
                    ac:cf:f0:2a:2a:29:e0:3d:c8:12:a6:eb:88:99:51:
                    1d:9b:54:1c:40:bb:7d:5a:e1:ef:d6:6f:59:ea:ba:
                    2a:86:44:57:3a:ec:96:36:ec:7a:c1:03:2e:7b:f5:
                    81:80:7a:c0:7b:72:44:50:ff:60:f3:6d:fb:23:83:
                    46:7e:fb:74:df:24:b1:c9:01:25:e1:88:f8:ae:7f:
                    31:8f:39:7e:23:28:16:e6:ac:50:1d:c4:37:07:63:
                    77:55:c6:42:26:49:fa:bf:06:bc:5a:5a:22:62:55:
                    c3:3f:71:1f:ca:da:b8:b8:0a:ef:9a:2e:3a:33:1f:
                    82:89:36:5e:09:04:a8:bc:ad:c9:d7:2f:11:78:ec:
                    19:ba:2d:e0:43:76:97:37:93:b4:ef:45:3b:ea:6c:
                    a5:1f:ad:dd:30:1c:dd:48:b3:1f:48:0e:fa:33:c2:
                    16:ab:e8:d7:d0:49:b4:83:bf:39:3f:a2:1e:3a:23:
                    34:17:1e:2a:0f:6d:3d:a7:ff:ef:59:52:d1:6c:67:
                    72:29:4a:43:f1:03:53:18:f1:66:7e:80:0a:2b:f9:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6A:0F:C5:40:F5:4A:49:72:B4:02:9F:40:99:8C:66:89:13:DB:24
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a343a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:15:e7:db:e9:a3:7c:ff:a8:3f:e4:82:24:e6:6b:0e:2f:30:
         c7:de:c1:e2:7f:bd:69:03:6a:5c:6c:f2:1b:9d:d7:74:99:0e:
         a0:3b:92:50:43:1a:c6:a7:09:11:70:57:e6:0e:0b:c0:45:c3:
         d2:eb:28:e7:7d:72:f6:be:cd:3f:ce:57:06:5c:86:cf:11:17:
         5e:05:71:fa:46:b4:9d:c9:ad:c2:d4:a2:fb:0f:b2:c3:2a:bb:
         79:dc:c0:02:3d:c6:4f:d2:1a:08:bd:47:81:33:1a:88:e0:77:
         1a:ba:f7:a4:0f:9a:81:60:36:cf:98:1c:3d:60:d6:ce:6e:61:
         9c:ef:7c:df:e6:fc:35:ea:b1:06:7f:44:2f:ef:a7:f7:57:78:
         eb:a9:31:63:42:3f:e9:f6:57:94:c2:d8:a0:b6:b9:85:44:d5:
         2a:b6:76:f0:81:24:d7:e2:ca:2d:11:12:50:b9:5b:0e:5d:22:
         3d:b9:49:b3:38:2c:4c:30:5a:a4:43:70:e2:b4:41:20:d4:5c:
         ef:6a:fa:61:29:86:9c:15:00:65:77:e0:77:36:fc:a3:7d:3a:
         50:d9:e3:0d:cf:e3:0e:ba:b9:99:ce:95:fd:d7:ba:1f:a4:1c:
         13:9b:03:98:dd:ee:85:70:01:e9:02:3e:02:b5:df:8c:d5:9c:
         82:12:0f:79
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUGXurAl8Qu1krBcHqbUH7GFnyinAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyMEJDMzAxMTgzNzQ2Q0FFODJFMEJDQUUzNTNCNkJD
OUEyNDU2ODAeFw0yNjA0MDMwNTMyMjBaFw0yNzA0MDIwNTM3MjBaMDMxMTAvBgNV
BAMTKEQzNkEwRkM1NDBGNTRBNDk3MkI0MDI5RjQwOTk4QzY2ODkxM0RCMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjJ2lgcaQ3KMdu4Nf/q4LwFH/
vIzaiyocqXo+i7XSRkBi0UfE/56+6JM8HqzP8CoqKeA9yBKm64iZUR2bVBxAu31a
4e/Wb1nquiqGRFc67JY27HrBAy579YGAesB7ckRQ/2Dzbfsjg0Z++3TfJLHJASXh
iPiufzGPOX4jKBbmrFAdxDcHY3dVxkImSfq/BrxaWiJiVcM/cR/K2ri4Cu+aLjoz
H4KJNl4JBKi8rcnXLxF47Bm6LeBDdpc3k7TvRTvqbKUfrd0wHN1Isx9IDvozwhar
6NfQSbSDvzk/oh46IzQXHioPbT2n/+9ZUtFsZ3IpSkPxA1MY8WZ+gAor+Y7VAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU02oPxUD1SklytAKfQJmMZokT2yQwHwYDVR0j
BBgwFoAUeyC8MBGDdGyuguC8rjU7a8miRWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDZENjRDQUU3NTdFMjk3QzA5N0Y3Qjc5ODFCRDY2NEEx
OUQyOTA0MjQxRENBQUMxMzU3NEYyNTY0RUJCOTNGLzAvN0IyMEJDMzAxMTgzNzQ2
Q0FFODJFMEJDQUUzNTNCNkJDOUEyNDU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjIwQkMzMDExODM3NDZDQUU4
MkUwQkNBRTM1M0I2QkM5QTI0NTY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ2RDY0Q0FFNzU3RTI5N0MwOTdGN0I3OTgxQkQ2NjRBMTlEMjkwNDI0
MURDQUFDMTM1NzRGMjU2NEVCQjkzRi8wLzMyMzgzMDM2M2EzNDMxMzkzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzMzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYE
GQAEMA0GCSqGSIb3DQEBCwUAA4IBAQBkFefb6aN8/6g/5IIk5msOLzDH3sHif71p
A2pcbPIbndd0mQ6gO5JQQxrGpwkRcFfmDgvARcPS6yjnfXL2vs0/zlcGXIbPERde
BXH6RrSdya3C1KL7D7LDKrt53MACPcZP0hoIvUeBMxqI4HcauvekD5qBYDbPmBw9
YNbObmGc73zf5vw16rEGf0Qv76f3V3jrqTFjQj/p9leUwtigtrmFRNUqtnbwgSTX
4sotERJQuVsOXSI9uUmzOCxMMFqkQ3DitEEg1FzvavphKYacFQBld+B3NvyjfTpQ
2eMNz+MOurmZzpX917ofpBwTmwOY3e6FcAHpAj4Ctd+M1ZyCEg95
-----END CERTIFICATE-----
Generated at Sun Apr 5 15:27:21 2026 by rpki-client