Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa
File:                     323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa (raw, json)
Hash identifier:          IUdl927EMglL2Pt8miDjdY38+/E7U4OMKfTn97EoHjk=
Subject key identifier:   3D:82:3C:4C:24:03:4B:31:64:CF:7E:45:21:6D:A8:2A:F7:56:F1:15
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       2D506614A88D355D30897D3C4D411D6DCBFBD3D2
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa
Signing time:             Fri 03 Jul 2026 13:50:47 +0000
ROA not before:           Fri 03 Jul 2026 13:45:47 +0000
ROA not after:            Fri 02 Jul 2027 13:50:47 +0000
asID:                     274041
IP address blocks:        2803:bcd0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:66:14:a8:8d:35:5d:30:89:7d:3c:4d:41:1d:6d:cb:fb:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Jul  3 13:45:47 2026 GMT
            Not After : Jul  2 13:50:47 2027 GMT
        Subject: CN=3D823C4C24034B3164CF7E45216DA82AF756F115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:dc:e5:f5:1b:4b:d6:de:f5:b9:25:89:82:
                    d7:ae:d7:e3:2e:c3:6c:e3:3a:ce:3b:5b:bb:99:b5:
                    10:ca:72:46:33:52:01:1d:6e:60:f4:7b:72:a8:79:
                    52:10:7f:87:1c:12:86:42:c2:e6:83:71:8c:05:b9:
                    1b:9e:ab:e9:f2:6c:ad:59:03:a8:fe:90:0f:75:f6:
                    2c:e2:68:5d:0f:ea:de:00:a1:b8:f4:fd:16:88:75:
                    1c:10:81:db:b8:ce:e5:0f:46:59:84:7b:01:78:d6:
                    e7:22:1a:94:36:6a:fc:1e:17:af:7a:2a:82:b9:3b:
                    15:3c:59:40:48:c8:d9:13:12:e6:ea:1c:a9:1d:99:
                    c6:b0:39:bd:9c:43:28:6b:d2:d4:40:eb:88:93:8c:
                    97:53:d5:7f:bf:dc:11:a1:76:0c:77:68:3b:f6:f3:
                    35:13:ac:32:69:a3:75:a6:10:74:38:1f:b0:5c:43:
                    d0:a7:1e:36:1d:3a:02:52:d8:a1:dc:39:33:a3:5b:
                    7a:a9:a0:5d:81:eb:d0:d0:4a:5f:39:4b:43:7d:88:
                    15:13:88:77:69:52:8e:55:e0:e2:84:3a:78:b7:61:
                    1f:42:17:1e:91:41:48:90:f8:30:f1:db:8c:85:7b:
                    02:16:b5:62:0a:37:25:6c:8b:16:ac:e3:eb:9a:0c:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:3C:4C:24:03:4B:31:64:CF:7E:45:21:6D:A8:2A:F7:56:F1:15
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a383030303a3a2f33332d3333203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:f4:4c:74:c9:78:87:a1:80:95:c5:aa:bc:63:9d:73:07:
         a4:50:79:4c:a9:0b:47:7e:34:5e:44:0e:7c:7d:6d:32:2c:bf:
         bd:b2:52:c2:60:0c:e0:5d:98:39:04:72:55:8d:51:85:49:70:
         b9:cb:c9:78:30:1f:aa:83:b9:01:30:ad:ac:e9:ac:7c:95:81:
         67:6d:be:0a:de:37:eb:4e:c2:01:9f:79:2a:aa:af:84:60:2e:
         02:1a:42:d0:7a:be:db:91:8b:7a:85:8e:c7:5e:fb:54:53:13:
         92:4b:a6:0c:f4:a5:75:91:46:89:34:6c:f9:34:85:22:1d:3f:
         53:07:14:ed:2c:d6:d4:29:25:5a:d9:ca:38:ad:9a:84:68:ae:
         07:1d:b4:14:45:6f:5f:b9:36:c4:b3:ff:2b:73:ff:7b:31:d8:
         e2:a9:15:e1:1c:d8:88:62:a3:57:98:d4:1e:d5:d6:a0:2b:9e:
         db:98:40:74:a9:24:58:72:81:0b:2d:db:4d:31:19:8f:d8:6c:
         82:e3:31:3f:c5:4f:c6:96:5a:33:20:63:df:a9:82:f4:94:f6:
         7f:4b:d6:28:06:d8:35:15:d7:c2:9d:f4:5e:f4:89:d6:e7:33:
         67:98:de:85:71:df:cf:8a:80:8c:cf:7b:73:87:d5:9b:53:41:
         a3:5c:60:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:34:18 2026 by rpki-client