Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa
File:                     323830333a363131303a3a2f33322d3438203d3e20323731393839.roa (raw, json)
Hash identifier:          3jMD1ivCrwO6EIQz3g+napP9Baf7W9gg7c7lhNFgtzA=
Subject key identifier:   EA:9F:8E:00:25:C1:23:48:20:5A:7C:2D:63:9E:DE:ED:74:92:53:B2
Certificate issuer:       /CN=175AC29B5CA355618758E7B44A8954A9ECF7B318
Certificate serial:       0763A8C906311DC231DFD320C9E984CDE0691FAF
Authority key identifier: 17:5A:C2:9B:5C:A3:55:61:87:58:E7:B4:4A:89:54:A9:EC:F7:B3:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa
Signing time:             Tue 07 Jul 2026 21:51:25 +0000
ROA not before:           Tue 07 Jul 2026 21:46:25 +0000
ROA not after:            Tue 06 Jul 2027 21:51:25 +0000
asID:                     271989
IP address blocks:        2803:6110::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:63:a8:c9:06:31:1d:c2:31:df:d3:20:c9:e9:84:cd:e0:69:1f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175AC29B5CA355618758E7B44A8954A9ECF7B318
        Validity
            Not Before: Jul  7 21:46:25 2026 GMT
            Not After : Jul  6 21:51:25 2027 GMT
        Subject: CN=EA9F8E0025C12348205A7C2D639EDEED749253B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:2f:ad:02:07:48:ab:f5:59:c5:61:ef:77:
                    4d:55:1e:72:a1:0f:8b:01:78:b0:ef:79:59:64:5a:
                    dc:aa:03:24:38:4c:6b:56:e4:32:fa:5c:01:d4:6a:
                    3a:c2:cb:0a:ac:1b:8a:e1:a5:e9:1b:3c:d0:9c:08:
                    00:e5:2c:09:ca:db:49:21:96:37:a2:a1:c0:94:c3:
                    51:a1:5c:ad:c1:bb:4e:be:2b:f0:c4:5e:2f:cf:b4:
                    35:5d:b7:b1:d2:f0:df:28:e8:e3:8e:50:70:1c:f5:
                    c2:76:4a:7c:c1:6b:6d:43:71:5f:c1:0a:e0:7f:e4:
                    d8:62:79:6d:b6:0c:de:9b:d5:14:bd:b8:50:53:a5:
                    ff:68:0e:7b:65:b0:4d:1a:5b:85:c6:6e:f2:c0:19:
                    af:56:99:8e:e7:8b:d9:84:bb:62:31:ce:03:33:c5:
                    e9:71:91:8f:82:d6:ce:c2:30:81:13:28:a2:64:08:
                    4e:38:31:8a:b6:8e:12:be:25:6f:bc:1b:1f:0f:19:
                    10:f5:ba:11:66:d6:08:7d:78:ca:0a:ee:e1:cf:02:
                    c9:4e:1d:f8:ad:f5:24:c3:9c:6b:51:83:97:63:97:
                    39:92:5f:d3:96:d3:e5:34:9a:cd:e2:a9:58:ad:55:
                    16:bb:3f:1b:04:0c:76:91:15:13:7b:bc:1c:2e:81:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9F:8E:00:25:C1:23:48:20:5A:7C:2D:63:9E:DE:ED:74:92:53:B2
            X509v3 Authority Key Identifier:
                keyid:17:5A:C2:9B:5C:A3:55:61:87:58:E7:B4:4A:89:54:A9:EC:F7:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/175AC29B5CA355618758E7B44A8954A9ECF7B318.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30D03EAA22DB49C5F3D519AE713EA5C0D780F51419811B866ADAD4EAFBAF4F62/0/323830333a363131303a3a2f33322d3438203d3e20323731393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6110::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:e8:14:07:ba:b6:8d:37:c2:f0:56:93:be:5b:1d:ad:93:
         78:7e:77:c1:ce:9d:38:eb:ec:94:1b:1f:f8:6b:ed:f0:cf:30:
         49:b9:49:56:ba:9a:c5:7a:11:bf:32:0d:3f:e9:9f:79:53:41:
         fe:50:3a:35:f2:bb:ee:f8:3d:1d:42:7d:57:07:d6:1f:27:36:
         1c:8b:ab:42:7b:da:5a:b5:c1:2b:b6:ea:7c:6b:93:ec:df:94:
         1f:78:d2:db:b3:99:02:ab:3b:a0:33:be:b4:0b:fa:17:33:23:
         9f:04:4b:28:48:73:43:63:6f:aa:d9:4a:25:6c:69:c8:0f:dc:
         e9:44:48:1d:0f:90:02:76:2b:59:70:bc:1f:31:7d:f5:47:56:
         8b:7e:9d:94:c7:55:0c:76:c6:4c:22:7c:63:88:05:90:5a:5f:
         d5:34:b0:a4:ac:e2:00:2d:54:d5:8f:64:7c:f9:15:92:c5:9d:
         b1:12:1b:af:55:d9:c7:a1:bc:85:10:3c:26:b0:4d:4a:cb:20:
         71:83:c1:f4:40:7f:b3:60:be:78:71:16:de:3f:82:42:df:3c:
         0d:72:af:38:6c:bf:8c:d1:95:34:98:c0:60:d1:84:35:cf:97:
         91:27:44:e5:9d:02:eb:a9:06:a4:89:c7:09:1d:cc:5d:84:b2:
         e4:af:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:47:14 2026 by rpki-client