Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa
File:                     323830333a343664303a3a2f33322d3438203d3e20323734303837.roa (raw, json)
Hash identifier:          AmZXnS2x4Lp9pNFizN1vVFcOGUfLAa5HVpABhI0RtV8=
Subject key identifier:   32:DD:D8:50:9F:E5:58:E3:6E:E1:E9:46:52:0B:15:71:14:19:99:0C
Certificate issuer:       /CN=7B50A65728AA110017AC96AE7DC52D6F3E54A074
Certificate serial:       69B899AB959882CB2A27CBFC8D9DF56BC9BEC1B4
Authority key identifier: 7B:50:A6:57:28:AA:11:00:17:AC:96:AE:7D:C5:2D:6F:3E:54:A0:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa
Signing time:             Wed 26 Aug 2026 14:26:37 +0000
ROA not before:           Wed 26 Aug 2026 14:21:37 +0000
ROA not after:            Wed 25 Aug 2027 14:26:37 +0000
asID:                     274087
IP address blocks:        2803:46d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b8:99:ab:95:98:82:cb:2a:27:cb:fc:8d:9d:f5:6b:c9:be:c1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B50A65728AA110017AC96AE7DC52D6F3E54A074
        Validity
            Not Before: Aug 26 14:21:37 2026 GMT
            Not After : Aug 25 14:26:37 2027 GMT
        Subject: CN=32DDD8509FE558E36EE1E946520B15711419990C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:e9:ed:6f:14:0e:82:62:fa:c9:7d:e5:56:
                    bf:e5:e4:b9:08:2b:21:81:2b:6f:8d:1b:74:0e:c6:
                    a8:8a:23:52:01:70:4b:64:dd:c8:e4:63:2d:ca:22:
                    46:e1:79:e5:60:77:ac:50:5b:72:e3:11:1c:8c:b4:
                    e5:69:46:8c:4f:d2:39:73:f9:a1:24:fc:0e:5c:1a:
                    79:5b:a1:69:e5:a8:63:a1:6b:66:91:a5:33:ec:87:
                    86:26:d8:0f:84:dc:d5:f8:27:f5:8c:ad:2c:d6:17:
                    de:8c:1b:08:63:37:18:8b:f5:d9:69:ae:06:4e:bf:
                    72:10:ad:1c:04:6a:3d:a4:f9:c5:5c:c5:5d:8e:f7:
                    1c:d9:97:50:4b:05:51:2e:92:38:f9:6a:4d:bd:b5:
                    a3:bc:35:c5:05:ae:a4:de:3e:80:df:a3:1a:99:77:
                    40:ee:d5:23:22:e9:0a:15:18:f0:49:97:c0:36:c5:
                    74:56:7b:01:6d:28:68:66:12:9e:d4:b7:7d:d6:e7:
                    80:fc:89:fa:b1:74:bf:d5:87:93:dd:40:b9:66:68:
                    0f:8e:a3:1f:64:cf:2c:e0:31:20:d9:0d:5b:8c:0e:
                    2b:7a:4c:32:65:b8:90:b7:a4:24:bd:26:83:f5:de:
                    01:73:05:7a:74:a5:e6:bc:57:0d:1f:86:8f:4c:9e:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:D8:50:9F:E5:58:E3:6E:E1:E9:46:52:0B:15:71:14:19:99:0C
            X509v3 Authority Key Identifier:
                keyid:7B:50:A6:57:28:AA:11:00:17:AC:96:AE:7D:C5:2D:6F:3E:54:A0:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B50A65728AA110017AC96AE7DC52D6F3E54A074.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF52A8577733A8331675F1081A572779AC447ADB6B245B28632054BFF6AB26CA/0/323830333a343664303a3a2f33322d3438203d3e20323734303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:19:a7:cd:30:65:44:ca:d2:31:6a:81:6c:24:b4:93:25:
         8f:de:be:8c:09:04:de:49:02:0b:3d:f4:e2:d0:23:c8:11:f1:
         fc:25:ae:59:0c:6a:22:d8:70:94:9c:60:9e:cd:7a:a8:f4:55:
         6c:1d:74:e4:22:1d:3f:d1:8d:23:09:5b:12:77:2c:83:af:bd:
         93:5c:b3:0a:0e:09:06:11:67:63:12:f9:93:52:2c:3f:72:63:
         e5:c2:4e:df:d5:3f:06:8e:8a:38:ea:09:80:ed:ee:fe:89:12:
         34:17:94:be:54:eb:03:21:5e:9b:22:30:1b:c5:86:9d:9f:a0:
         57:f1:1f:5d:15:57:e2:5c:4f:e4:fc:7d:91:c6:52:4f:ee:b9:
         a5:63:f5:a3:18:04:c9:4c:0d:a5:fe:4d:8f:0f:f4:53:5d:6d:
         9b:90:66:d6:c1:27:9d:86:3f:f1:33:2d:c5:b0:f0:6d:c6:b9:
         3c:87:6a:a7:38:9b:e7:42:df:87:ce:92:60:4b:b3:53:6c:b7:
         55:31:6d:e7:c3:a2:4e:ad:cd:b2:01:57:21:7d:5c:63:df:ed:
         79:75:50:12:57:be:e3:7e:f2:ce:ab:88:c6:fc:0f:f2:2a:e8:
         7e:be:de:59:87:40:c6:a6:5e:f9:13:e9:a8:b3:47:9a:38:9a:
         a3:63:1a:aa
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUabiZq5WYgssqJ8v8jZ31a8m+wbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1MEE2NTcyOEFBMTEwMDE3QUM5NkFFN0RDNTJENkYz
RTU0QTA3NDAeFw0yNjA4MjYxNDIxMzdaFw0yNzA4MjUxNDI2MzdaMDMxMTAvBgNV
BAMTKDMyREREODUwOUZFNTU4RTM2RUUxRTk0NjUyMEIxNTcxMTQxOTk5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMOntbxQOgmL6yX3lVr/l5LkI
KyGBK2+NG3QOxqiKI1IBcEtk3cjkYy3KIkbheeVgd6xQW3LjERyMtOVpRoxP0jlz
+aEk/A5cGnlboWnlqGOha2aRpTPsh4Ym2A+E3NX4J/WMrSzWF96MGwhjNxiL9dlp
rgZOv3IQrRwEaj2k+cVcxV2O9xzZl1BLBVEukjj5ak29taO8NcUFrqTePoDfoxqZ
d0Du1SMi6QoVGPBJl8A2xXRWewFtKGhmEp7Ut33W54D8ifqxdL/Vh5PdQLlmaA+O
ox9kzyzgMSDZDVuMDit6TDJluJC3pCS9JoP13gFzBXp0pea8Vw0fho9MntXrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUMt3YUJ/lWONu4elGUgsVcRQZmQwwHwYDVR0j
BBgwFoAUe1CmVyiqEQAXrJaufcUtbz5UoHQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjUyQTg1Nzc3MzNBODMzMTY3NUYxMDgxQTU3Mjc3OUFD
NDQ3QURCNkIyNDVCMjg2MzIwNTRCRkY2QUIyNkNBLzAvN0I1MEE2NTcyOEFBMTEw
MDE3QUM5NkFFN0RDNTJENkYzRTU0QTA3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjUwQTY1NzI4QUExMTAwMTdB
Qzk2QUU3REM1MkQ2RjNFNTRBMDc0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY1MkE4NTc3NzMzQTgzMzE2NzVGMTA4MUE1NzI3NzlBQzQ0N0FEQjZC
MjQ1QjI4NjMyMDU0QkZGNkFCMjZDQS8wLzMyMzgzMDMzM2EzNDM2NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRtAw
DQYJKoZIhvcNAQELBQADggEBAC1AGafNMGVEytIxaoFsJLSTJY/evowJBN5JAgs9
9OLQI8gR8fwlrlkMaiLYcJScYJ7Neqj0VWwddOQiHT/RjSMJWxJ3LIOvvZNcswoO
CQYRZ2MS+ZNSLD9yY+XCTt/VPwaOijjqCYDt7v6JEjQXlL5U6wMhXpsiMBvFhp2f
oFfxH10VV+JcT+T8fZHGUk/uuaVj9aMYBMlMDaX+TY8P9FNdbZuQZtbBJ52GP/Ez
LcWw8G3GuTyHaqc4m+dC34fOkmBLs1Nst1UxbefDok6tzbIBVyF9XGPf7Xl1UBJX
vuN+8s6riMb8D/Iq6H6+3lmHQMamXvkT6aizR5o4mqNjGqo=
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:54:14 2026 by rpki-client