Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          jfsrACiBnTMqdMDzFM6ocnQDWyHai1tu+Nea6IPR8Hw=
Subject key identifier:   C7:CF:1B:24:FA:BD:A4:34:A9:5C:E5:71:6A:5A:E8:38:E1:12:5B:0B
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       6CDE16B212205FF19885D23847A5D515A248D490
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 10 Jul 2026 23:51:55 +0000
ROA not before:           Fri 10 Jul 2026 23:46:55 +0000
ROA not after:            Fri 09 Jul 2027 23:51:55 +0000
asID:                     267787
IP address blocks:        2803:4fa0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 20:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:16:b2:12:20:5f:f1:98:85:d2:38:47:a5:d5:15:a2:48:d4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Jul 10 23:46:55 2026 GMT
            Not After : Jul  9 23:51:55 2027 GMT
        Subject: CN=C7CF1B24FABDA434A95CE5716A5AE838E1125B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:77:fc:ba:cb:68:b9:de:9a:5a:88:a5:9e:
                    e2:8c:bc:b4:07:9a:a8:de:fd:e8:0e:e6:62:72:e9:
                    d7:1b:10:d9:6a:d3:dc:a7:0d:99:45:0f:15:be:b6:
                    d2:91:ce:38:b8:ba:53:fc:22:e8:82:9e:50:85:af:
                    ae:7b:b1:a2:8c:10:1c:ae:15:2f:14:07:96:bb:d5:
                    eb:8d:22:e3:06:3c:92:70:c0:10:d6:82:bf:09:8c:
                    13:70:ac:d7:18:55:c3:d4:b1:06:3f:55:bb:ee:c2:
                    7c:e6:c8:de:76:74:d3:0f:67:29:5b:4a:94:7a:3f:
                    18:25:a8:9b:4d:99:04:a8:a7:58:bf:cb:98:1b:51:
                    f2:67:d2:60:5d:6d:36:c8:a8:07:86:69:35:f9:e7:
                    ea:03:db:1d:ad:b7:0e:85:63:9c:15:8e:89:4f:e9:
                    4b:40:dc:16:50:88:52:43:69:86:2a:8c:51:fe:7f:
                    96:2f:47:2c:6a:bc:16:ab:d4:0d:13:cf:36:13:52:
                    cb:19:54:c4:9e:c2:a1:dc:31:58:53:a1:62:14:6d:
                    76:40:81:ce:de:2b:43:3c:a4:b4:4a:a2:c7:1b:24:
                    fc:ea:85:6f:56:0e:42:79:70:b3:df:bf:47:97:79:
                    bb:ee:e5:c0:40:7e:d3:43:7e:fb:2f:44:a7:fd:ed:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CF:1B:24:FA:BD:A4:34:A9:5C:E5:71:6A:5A:E8:38:E1:12:5B:0B
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a373a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:8a:79:ed:42:b7:59:5f:ee:5f:46:c9:5e:56:5f:81:fb:
         61:49:74:59:4e:d6:a3:72:50:1d:f5:21:9c:28:01:74:9e:2c:
         74:70:4d:c1:53:1e:f3:a6:65:d6:91:8f:44:e6:55:24:5c:a1:
         48:ae:39:7c:d7:af:6f:d9:5e:e1:17:50:71:86:ef:1b:42:2e:
         6f:a4:15:b2:af:90:b5:4e:86:8d:88:d3:72:31:c3:1c:ca:68:
         da:8a:51:88:58:7a:93:cf:8a:e8:a8:cd:47:9c:83:5c:12:72:
         3a:66:b9:12:f6:76:00:8d:0b:e6:08:f7:77:44:47:b3:71:73:
         83:6e:f5:a4:02:0e:72:eb:53:3a:76:ed:6e:64:1a:fa:0d:a8:
         ee:c5:99:bf:cd:5a:a1:5b:04:70:1a:ca:6f:36:ee:bd:89:5f:
         d9:e8:e0:04:d2:0a:f1:18:9f:5e:4d:5b:0f:83:f0:c7:6a:f9:
         b5:78:40:60:6d:d4:2b:40:22:76:2c:1a:12:a5:80:00:3d:8c:
         85:cc:a2:ab:68:64:d6:ab:84:7e:9b:f2:ff:2a:bd:80:0d:52:
         f1:3e:6e:eb:9d:db:c1:cd:cb:ad:d9:fe:2d:a7:96:f7:33:80:
         a7:d2:73:48:f5:b3:a4:6b:07:f2:2b:0f:68:f4:3d:cd:b5:27:
         1e:7c:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:08 2026 by rpki-client