Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323734393831.roa
File:                     323830333a653632303a3a2f33322d3438203d3e20323734393831.roa (raw, json)
Hash identifier:          dzmQJbG/LDpjzCRljK14WASij0G0B/qL0bi0zsD0q3Y=
Subject key identifier:   10:4D:3D:7D:59:68:1C:90:A4:A2:C8:71:28:DE:B6:9A:03:42:7D:12
Certificate issuer:       /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial:       07B72A83804D8F7F114D49A0BEBCC61B37B495FF
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323734393831.roa
Signing time:             Tue 14 Jul 2026 18:10:00 +0000
ROA not before:           Tue 14 Jul 2026 18:05:00 +0000
ROA not after:            Tue 13 Jul 2027 18:10:00 +0000
asID:                     274981
IP address blocks:        2803:e620::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:2a:83:80:4d:8f:7f:11:4d:49:a0:be:bc:c6:1b:37:b4:95:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
        Validity
            Not Before: Jul 14 18:05:00 2026 GMT
            Not After : Jul 13 18:10:00 2027 GMT
        Subject: CN=104D3D7D59681C90A4A2C87128DEB69A03427D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:2a:85:ff:e5:d6:e8:9a:35:70:fe:1c:63:
                    84:d2:44:f6:b7:9c:77:3f:e2:a4:45:b7:f0:68:c0:
                    9d:9f:9f:31:d4:e7:84:b6:c0:00:eb:ae:da:04:36:
                    7c:02:f3:49:b0:9d:45:b4:b2:c4:9d:01:11:59:16:
                    c8:93:40:3e:ee:68:4d:3d:70:f9:41:8a:18:ef:7e:
                    52:e4:6d:2c:e1:24:d9:76:94:a5:45:67:6a:1f:dd:
                    80:c3:be:f1:29:8f:0d:64:02:aa:f4:d8:c2:6c:db:
                    69:19:08:37:fc:0f:c0:e1:47:f0:65:7a:1a:c1:94:
                    20:26:db:14:bc:aa:86:02:04:8c:f4:87:88:00:a8:
                    9d:e4:ca:a7:6a:1b:76:4b:7a:cb:00:7b:ec:43:ad:
                    b0:bb:c0:2f:6f:ed:5b:3c:a8:53:43:91:c3:e5:8f:
                    3e:f4:c6:35:50:95:db:8f:7a:c1:15:43:b3:1b:47:
                    88:ad:94:37:2d:78:88:f2:53:a0:93:24:f5:5d:e5:
                    81:09:1e:e3:38:a8:68:a5:f1:72:92:07:e2:41:1c:
                    22:a7:41:e5:8c:3f:71:02:f1:4f:cb:6a:e1:e8:69:
                    d4:73:f5:f9:08:fb:20:62:4c:04:af:81:40:fa:bb:
                    42:0e:16:e4:f0:52:19:13:14:cd:7f:b5:a6:b5:71:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:3D:7D:59:68:1C:90:A4:A2:C8:71:28:DE:B6:9A:03:42:7D:12
            X509v3 Authority Key Identifier:
                keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323734393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e620::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:b0:9d:b7:0d:23:c2:e8:b9:60:f9:cc:cf:8d:1f:be:a2:
         36:fa:a7:82:75:28:f4:4d:cf:da:d9:d6:d0:0b:67:fd:4f:d8:
         2b:b5:75:3c:73:0f:3d:68:05:65:07:99:9f:b9:85:41:f3:bb:
         1f:d2:8b:aa:ae:f8:23:84:89:6b:75:63:4d:95:23:e2:9b:42:
         f2:a2:df:12:76:e9:b3:d7:43:c6:c7:a5:3a:b2:9f:41:70:06:
         ed:19:3c:5c:57:8d:8b:10:ee:92:e9:5f:8f:ee:ac:b4:4c:ef:
         80:05:f3:0d:13:f3:71:85:41:65:05:89:d7:b8:b0:d2:66:1d:
         ab:42:40:1d:41:3d:68:b6:73:a0:44:07:24:6c:94:75:0d:d5:
         fb:f2:a1:75:38:c0:07:c3:5c:a6:fe:98:58:86:12:47:c8:a1:
         59:80:1f:27:17:fd:c1:b9:1d:3a:79:35:67:cd:41:0e:73:e9:
         59:ff:c8:b8:89:dd:88:59:91:c4:f5:d5:39:ad:e9:13:2d:89:
         35:3c:a6:70:61:f7:08:61:79:19:83:e9:d8:0d:bb:98:09:90:
         06:7f:2f:11:20:72:fd:84:fb:06:a6:12:c2:85:ee:5b:53:13:
         a5:f8:37:30:a3:d0:a3:03:9c:24:31:80:cc:c8:e0:d2:0c:d7:
         43:72:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:19 2026 by rpki-client