Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa
File:                     323830333a626364303a3a2f33332d3333203d3e20323734303431.roa (raw, json)
Hash identifier:          7SAUgNMDJwfi3DXi01h3W+1JCedEWEGKn5MtLXAIREI=
Subject key identifier:   94:E3:CF:07:EC:31:F9:30:44:16:05:CC:DE:C9:3C:AA:FB:1B:0C:4B
Certificate issuer:       /CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
Certificate serial:       708F66C636C895F136AADF8A48510FE0A5B9F0C8
Authority key identifier: 2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa
Signing time:             Fri 03 Jul 2026 13:50:47 +0000
ROA not before:           Fri 03 Jul 2026 13:45:47 +0000
ROA not after:            Fri 02 Jul 2027 13:50:47 +0000
asID:                     274041
IP address blocks:        2803:bcd0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8f:66:c6:36:c8:95:f1:36:aa:df:8a:48:51:0f:e0:a5:b9:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D911CFE916EDED2C11977007F4A9BD2A8F1D174
        Validity
            Not Before: Jul  3 13:45:47 2026 GMT
            Not After : Jul  2 13:50:47 2027 GMT
        Subject: CN=94E3CF07EC31F930441605CCDEC93CAAFB1B0C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:da:1b:62:05:47:db:f6:97:df:a4:e7:9c:
                    4d:18:5a:a4:17:a1:2a:1a:75:d0:1f:a4:dc:10:fe:
                    bf:af:05:0b:8a:da:41:58:8c:9d:58:8e:3b:15:b2:
                    d8:8d:b0:03:2f:8e:cf:23:6b:08:ce:59:22:c6:d3:
                    2b:97:3b:21:a6:48:cb:74:8c:12:22:ba:10:ca:43:
                    9f:fd:56:f5:a4:c7:5a:af:1a:04:e7:b4:e0:c3:88:
                    1d:d8:cc:84:12:c2:4d:35:40:59:d6:a3:86:38:70:
                    1c:e1:b2:86:3d:ed:2b:db:76:83:0a:f6:94:00:51:
                    3b:27:45:cb:b0:86:f8:17:7c:1c:6c:3e:8a:98:2a:
                    83:c0:bc:1c:94:f7:19:21:bc:62:e7:5d:eb:f6:a7:
                    a3:c1:79:8a:00:19:cc:c6:64:cd:70:f0:32:f1:7e:
                    78:1a:34:1a:00:51:a3:cb:c3:0a:56:a0:90:f0:d2:
                    01:7d:9f:28:cf:a4:ef:77:72:20:ff:a8:a5:74:7f:
                    23:58:a5:25:19:41:0b:00:8b:9b:3e:69:19:b9:08:
                    2c:37:78:28:ec:9c:86:7b:bb:95:86:a8:dc:8b:d6:
                    95:c7:a9:92:3d:84:53:f2:28:7d:6b:4f:6d:27:31:
                    de:10:26:cc:96:41:9a:80:77:dc:75:a5:1a:39:35:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:CF:07:EC:31:F9:30:44:16:05:CC:DE:C9:3C:AA:FB:1B:0C:4B
            X509v3 Authority Key Identifier:
                keyid:2D:91:1C:FE:91:6E:DE:D2:C1:19:77:00:7F:4A:9B:D2:A8:F1:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D911CFE916EDED2C11977007F4A9BD2A8F1D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30169EA27D1F65A8F44B565463C799BBBC5FBE672971F7103C127F6729160626/0/323830333a626364303a3a2f33332d3333203d3e20323734303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:33:ed:d8:1b:0d:32:06:d5:7e:61:bf:e2:73:2a:1e:42:
         52:22:a3:8f:78:c6:20:b2:16:f9:ca:73:0f:05:98:c8:4d:47:
         c5:68:66:53:7c:32:14:2f:a7:ba:ce:8e:b6:c5:a0:78:d0:ce:
         62:14:46:67:8a:ee:c4:d3:e3:1a:53:66:4a:71:2f:fe:8b:4c:
         23:23:2c:f7:ea:bc:00:12:4a:85:a2:0f:af:2a:b3:07:8f:f8:
         72:a7:6f:d4:7e:0c:99:2f:3a:62:1a:24:c0:c4:81:f1:ed:53:
         15:7f:e0:85:7b:6e:4d:13:9c:98:25:75:1c:18:6a:38:73:9d:
         84:11:14:19:18:12:fa:21:a2:93:a0:95:b1:fe:40:8d:31:c5:
         b2:f6:b3:00:76:0c:e7:0f:09:ab:d4:24:80:27:a4:1f:7f:3b:
         d6:5b:b5:65:35:85:5b:56:8f:5b:18:73:59:2f:2b:a3:34:ed:
         db:b0:09:3d:31:14:dc:fa:44:f1:75:1d:b3:92:aa:37:88:7d:
         ee:b8:31:45:05:99:b7:46:52:92:82:62:7f:d4:64:f2:45:0f:
         7f:c1:da:09:23:5d:aa:6d:25:87:ba:6c:07:5c:6c:26:98:16:
         22:c8:ba:14:58:b2:5a:ec:83:d5:6a:42:08:7d:e4:bc:a2:eb:
         1f:07:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:06:19 2026 by rpki-client