Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/323830333a356133303a3a2f33322d3432203d3e20323734383734.roa
File:                     323830333a356133303a3a2f33322d3432203d3e20323734383734.roa (raw, json)
Hash identifier:          XGj3IvyUnW108ellwGIFV9G2Apm/+l0ylMqc+8ykR8o=
Subject key identifier:   62:78:3A:92:A7:8C:5F:97:A9:E6:1E:2A:2F:ED:B0:30:46:C9:CB:90
Certificate issuer:       /CN=887DF7402951291631907EA7185FEE41A69BEB7A
Certificate serial:       3557FB1233523A26CC5DA0617B5E766CDAC1ADBF
Authority key identifier: 88:7D:F7:40:29:51:29:16:31:90:7E:A7:18:5F:EE:41:A6:9B:EB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/887DF7402951291631907EA7185FEE41A69BEB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/323830333a356133303a3a2f33322d3432203d3e20323734383734.roa
Signing time:             Thu 23 Jul 2026 18:00:00 +0000
ROA not before:           Thu 23 Jul 2026 17:55:00 +0000
ROA not after:            Thu 22 Jul 2027 18:00:00 +0000
asID:                     274874
IP address blocks:        2803:5a30::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/887DF7402951291631907EA7185FEE41A69BEB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/887DF7402951291631907EA7185FEE41A69BEB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/887DF7402951291631907EA7185FEE41A69BEB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:fb:12:33:52:3a:26:cc:5d:a0:61:7b:5e:76:6c:da:c1:ad:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887DF7402951291631907EA7185FEE41A69BEB7A
        Validity
            Not Before: Jul 23 17:55:00 2026 GMT
            Not After : Jul 22 18:00:00 2027 GMT
        Subject: CN=62783A92A78C5F97A9E61E2A2FEDB03046C9CB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:4b:78:46:2b:14:c6:4c:25:48:41:b3:bc:
                    fc:b6:4c:81:09:2b:92:a1:de:ef:09:23:ec:59:f5:
                    fb:ea:8f:07:3f:0d:72:d1:31:0e:83:d1:00:32:cc:
                    e0:24:7b:76:2c:57:54:ab:33:fc:5c:64:42:d4:f9:
                    3a:79:fb:22:a4:9f:1c:75:d3:f9:1d:e6:45:49:9f:
                    81:5a:06:eb:eb:e3:76:b1:13:4c:68:4a:b0:b1:f1:
                    ef:9a:e2:77:4a:3e:3d:30:98:f1:4b:8f:63:cb:b5:
                    b8:f4:43:8d:55:ff:72:97:a9:5a:18:b8:f5:91:05:
                    d2:9c:57:cc:e3:37:64:5d:c2:1b:1d:12:4e:05:23:
                    4e:89:c0:f0:89:a3:e6:f1:1d:69:01:b0:1d:49:74:
                    ab:8b:1e:5a:4d:60:67:8e:a9:fd:7e:d8:cf:9c:f2:
                    d0:6b:5a:91:47:41:e9:e0:17:fc:82:bb:8d:1b:2a:
                    1d:d9:57:e5:b5:5a:b5:54:13:1b:bf:b6:1a:02:89:
                    db:19:95:5a:71:5d:76:c9:68:44:64:5c:dc:b5:d9:
                    84:76:47:05:89:73:49:a9:e8:39:2a:59:6f:f5:ac:
                    82:ec:ab:01:7a:c0:26:f3:cd:de:3f:f1:b8:2a:81:
                    02:bc:94:c4:91:eb:e7:da:aa:3c:ca:21:ef:da:28:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:3A:92:A7:8C:5F:97:A9:E6:1E:2A:2F:ED:B0:30:46:C9:CB:90
            X509v3 Authority Key Identifier:
                keyid:88:7D:F7:40:29:51:29:16:31:90:7E:A7:18:5F:EE:41:A6:9B:EB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/887DF7402951291631907EA7185FEE41A69BEB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/887DF7402951291631907EA7185FEE41A69BEB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/323830333a356133303a3a2f33322d3432203d3e20323734383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:91:61:2d:15:f2:13:83:32:49:ee:f6:17:42:c1:3e:5f:f9:
         af:29:8b:98:10:fa:fc:90:68:ff:79:e8:47:5b:cf:fa:6e:0c:
         c0:51:3b:1c:bd:f4:7a:3f:2f:3e:55:60:6b:d0:c2:a0:91:7c:
         ee:a5:3c:d7:93:0b:dc:5e:91:d2:91:da:8b:25:ce:89:0d:ef:
         a9:50:2c:64:d8:2e:65:9c:80:51:56:16:75:0b:ed:c3:3c:97:
         e2:49:1b:29:1d:10:f3:dd:a5:e9:13:38:d6:63:ad:e6:5b:2e:
         a4:eb:57:55:0f:20:45:9b:20:f4:5c:55:04:ed:0c:92:03:74:
         66:d0:d4:08:57:47:ab:45:9e:47:65:05:ab:75:76:e6:2b:90:
         bc:99:21:ed:5f:f1:2c:52:fb:ea:9a:47:2c:03:db:4e:12:85:
         84:1e:69:be:22:e8:11:27:aa:e4:ab:0a:83:6b:53:b3:bf:fd:
         37:7d:7e:fc:a3:63:8e:71:ba:1a:9e:9e:8e:ab:e9:b9:ae:9c:
         5a:6c:42:d6:c8:d0:b9:73:8e:42:86:f5:d6:0f:e1:40:e8:41:
         10:ba:2f:a7:b5:e1:bc:26:2e:ec:93:a2:8d:24:d9:2f:e3:a3:
         5c:bd:ed:85:68:37:98:99:e1:6a:83:4b:e6:44:d7:bf:58:59:
         bc:e3:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:53:10 2026 by rpki-client