Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa
File:                     323830333a626364303a3a2f33322d3332203d3e20323734303431.roa (raw, json)
Hash identifier:          hW15dh8zWw5vE2P6gWJUoli0JRZDaOwQiStiMZf7YW8=
Subject key identifier:   7A:1D:33:D1:18:08:B4:68:24:F2:6B:4D:52:69:91:96:AE:0A:F8:D7
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       383E4470031541750E6D6B85F4F059E3C1ED1ECA
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa
Signing time:             Fri 03 Jul 2026 13:50:47 +0000
ROA not before:           Fri 03 Jul 2026 13:45:47 +0000
ROA not after:            Fri 02 Jul 2027 13:50:47 +0000
asID:                     274041
IP address blocks:        2803:bcd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3e:44:70:03:15:41:75:0e:6d:6b:85:f4:f0:59:e3:c1:ed:1e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Jul  3 13:45:47 2026 GMT
            Not After : Jul  2 13:50:47 2027 GMT
        Subject: CN=7A1D33D11808B46824F26B4D52699196AE0AF8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:69:99:19:71:bc:f3:cf:39:70:ec:e1:68:
                    85:bf:c0:11:a5:b8:98:66:53:9e:5c:e5:09:48:bf:
                    1f:38:8e:75:3d:0b:99:57:a7:20:ec:b6:9c:ac:6d:
                    4f:4b:85:84:d8:6a:ad:e9:86:ba:0e:39:ae:10:91:
                    50:fb:9b:48:95:c0:ca:a0:f4:69:68:c5:bb:a0:d9:
                    7b:1a:ff:7e:2c:32:a3:f4:69:50:d4:ab:3f:f3:cb:
                    02:4b:76:6a:c5:5b:0b:72:5b:fc:83:8c:b6:9f:16:
                    d5:23:24:5d:1f:a5:08:ba:88:d1:77:4b:1d:02:21:
                    39:ce:e0:5f:91:88:17:6c:6a:b5:4b:53:20:c5:1a:
                    49:2f:3f:e5:93:8f:96:fd:63:86:df:6e:43:7f:1e:
                    1e:3b:d0:01:a5:29:43:99:8e:32:ff:b5:08:8a:43:
                    de:ae:4b:86:31:55:54:57:c5:25:56:b9:f1:eb:57:
                    d7:c7:67:2b:14:65:aa:ce:0b:1c:fc:20:5d:4f:5d:
                    d9:9d:97:e3:4c:cf:6d:37:de:a4:9f:aa:dd:c5:32:
                    a0:a4:13:e1:9c:af:1c:f6:2a:98:13:b6:ff:dc:10:
                    fa:59:b8:bf:a1:a1:02:f8:27:25:7b:ad:08:8a:65:
                    ea:e7:52:9a:5e:55:61:0c:7d:41:a5:f0:19:25:ce:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:33:D1:18:08:B4:68:24:F2:6B:4D:52:69:91:96:AE:0A:F8:D7
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33322d3332203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:18:f2:87:c6:53:cc:e3:05:d3:9b:6d:c7:65:d6:b8:59:13:
         7c:10:bd:3b:4a:ec:b3:84:82:56:64:13:0e:38:6a:3a:3f:76:
         9b:6b:bd:7b:fe:ea:75:83:10:8b:23:92:ad:67:41:c5:60:a4:
         86:82:94:2c:0b:27:01:a7:9d:16:13:1c:e0:ed:12:54:f3:a8:
         cd:d0:2e:fa:af:19:cc:86:0d:10:54:2d:41:b6:06:5f:2e:52:
         26:7a:db:36:81:6c:3e:34:37:27:66:cb:3c:9f:48:fd:d6:c8:
         d4:fb:da:02:75:55:66:68:13:ab:d3:a8:af:02:28:d8:b2:f8:
         5e:b9:71:0e:8d:15:a7:a6:d7:f6:0d:1c:69:f7:f7:63:0d:62:
         cd:7c:a5:f2:d5:70:b0:84:78:c3:25:e9:21:60:c6:3e:e0:5c:
         8d:7c:cc:ab:f1:62:1e:f8:49:58:d9:80:e1:ea:3d:f9:ce:9a:
         5e:e7:6a:48:ee:7b:b2:28:e1:19:4e:14:ae:43:37:2b:48:e1:
         17:0e:fd:fc:8d:f4:f6:3f:3b:0d:20:92:f5:2d:fd:4e:13:49:
         4e:af:40:27:a5:c5:6b:07:20:e1:f2:f6:35:9a:1e:d7:cb:d4:
         43:ae:5e:06:cf:a9:47:46:ca:2f:b8:10:08:10:f4:8d:2f:09:
         75:69:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:58:35 2026 by rpki-client