Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa
File:                     323830333a373632303a3a2f33322d3332203d3e20323636373430.roa (raw, json)
Hash identifier:          PsbBIoGKzLyvXKDeHmSbbm+PSVwCkQjMqVxc8+UFuJE=
Subject key identifier:   BD:BF:DF:C2:66:12:57:14:46:B0:8D:FB:6D:01:C2:D5:77:4F:BA:0F
Certificate issuer:       /CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
Certificate serial:       1B8D95812DE7556760BF547FC0EE022DDFCD88DA
Authority key identifier: 46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa
Signing time:             Tue 14 Jul 2026 22:54:57 +0000
ROA not before:           Tue 14 Jul 2026 22:49:57 +0000
ROA not after:            Tue 13 Jul 2027 22:54:57 +0000
asID:                     266740
IP address blocks:        2803:7620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8d:95:81:2d:e7:55:67:60:bf:54:7f:c0:ee:02:2d:df:cd:88:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
        Validity
            Not Before: Jul 14 22:49:57 2026 GMT
            Not After : Jul 13 22:54:57 2027 GMT
        Subject: CN=BDBFDFC26612571446B08DFB6D01C2D5774FBA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:b3:fa:60:e5:21:e6:59:d8:d1:94:a1:b4:
                    79:43:a7:57:ce:16:b0:9c:03:72:8c:98:43:1c:c2:
                    a5:8a:e0:56:76:05:a0:50:42:a8:59:cc:c7:45:37:
                    fd:b2:8e:6d:41:33:70:0a:c4:2d:a4:ec:5c:9f:2f:
                    17:e7:63:9e:07:49:0f:55:02:53:91:2a:ea:f8:88:
                    50:d0:89:e4:16:03:c8:f3:40:5c:d9:55:23:e5:ab:
                    7c:cf:ef:0b:66:9c:63:a0:ef:5a:a3:78:ab:59:8b:
                    2f:08:f5:1f:f0:83:3f:92:46:2b:0b:10:cb:4b:56:
                    18:de:81:b4:9c:85:be:10:59:65:bd:cc:47:d8:83:
                    54:c7:60:3d:74:59:ff:3f:1c:c7:12:ec:56:9b:ea:
                    07:41:a1:e7:b7:40:92:89:a6:c1:f6:e8:64:e8:55:
                    9a:94:51:7a:e7:df:fe:13:82:da:39:e0:cc:9c:c2:
                    ab:50:a8:73:8b:62:c8:4f:17:02:ae:41:a6:36:8a:
                    55:75:77:68:03:ed:80:15:0c:c2:9a:54:e6:7f:85:
                    54:a1:96:14:aa:ee:ac:86:b2:0c:ba:70:48:4f:a0:
                    78:46:8d:82:7f:ce:b2:42:cb:2f:89:5f:25:2b:38:
                    d8:51:fd:34:58:49:5e:e8:5d:25:0f:12:78:a6:52:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:DF:C2:66:12:57:14:46:B0:8D:FB:6D:01:C2:D5:77:4F:BA:0F
            X509v3 Authority Key Identifier:
                keyid:46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/323830333a373632303a3a2f33322d3332203d3e20323636373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:c2:60:e8:3e:7a:de:e2:37:d7:99:fe:51:66:78:eb:de:9a:
         0e:6b:59:da:d3:f3:79:91:24:3b:89:0d:59:f9:74:fe:97:b6:
         34:21:fd:ec:88:be:50:1c:eb:83:52:8a:9d:c8:7e:9a:87:c7:
         d6:e7:9d:4e:1f:35:8d:42:e9:4f:2b:8c:1b:b2:fd:28:68:49:
         66:bc:cf:0c:f8:b1:36:01:69:c2:9f:a9:f7:f1:27:58:f9:69:
         99:d4:3b:96:31:36:b9:b0:ab:78:f7:a5:94:e2:0c:ee:05:0c:
         dc:81:9a:72:b6:e0:be:2a:5b:19:e6:5f:46:7e:31:4c:df:7c:
         88:8c:e7:d7:8a:ae:a8:e6:ed:d3:60:ca:c9:41:af:ae:d3:11:
         7c:25:e7:29:d7:c9:fa:77:dc:65:f8:0d:d0:52:c4:2f:2c:32:
         21:ff:88:a2:df:85:2f:04:64:35:ac:54:e4:7e:75:41:cd:39:
         dd:94:a4:e4:ef:c4:8e:0f:53:88:4b:93:15:21:a5:3e:f8:e9:
         3f:99:4e:20:67:12:a8:d1:59:a0:6d:b8:b6:a2:5f:05:2c:f0:
         d3:f9:48:a4:87:0e:fb:af:c7:20:9a:4e:72:8a:80:46:e9:2e:
         36:7e:d3:d1:ac:25:10:7d:84:33:5c:5a:8b:1a:f2:48:0e:37:
         a5:e7:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:35:41 2026 by rpki-client