Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa
File:                     323830333a376661303a3a2f33322d3438203d3e20323637383034.roa (raw, json)
Hash identifier:          6dE7zfy/PUWIp1D1QiERxMkXZGLJ6PyNlYOYpQeiwYI=
Subject key identifier:   84:32:7E:48:E3:B6:E8:7F:95:36:80:19:71:60:B4:D8:01:74:E4:2E
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       2C7F8FD94493AB47D2EE102133C3B24237F37C5A
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa
Signing time:             Mon 13 Jul 2026 19:52:11 +0000
ROA not before:           Mon 13 Jul 2026 19:47:11 +0000
ROA not after:            Mon 12 Jul 2027 19:52:11 +0000
asID:                     267804
IP address blocks:        2803:7fa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:8f:d9:44:93:ab:47:d2:ee:10:21:33:c3:b2:42:37:f3:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Jul 13 19:47:11 2026 GMT
            Not After : Jul 12 19:52:11 2027 GMT
        Subject: CN=84327E48E3B6E87F953680197160B4D80174E42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:06:3a:63:eb:3f:1a:c5:bf:35:47:fc:11:
                    46:f7:b2:6a:ef:09:70:30:f5:6b:78:72:ee:43:44:
                    9d:72:3a:04:32:47:b1:23:7d:d1:cd:b3:1c:34:23:
                    5f:b7:41:e1:e5:7a:8d:77:a0:a9:c0:8c:40:c3:16:
                    64:80:15:a7:68:63:01:eb:e0:86:b8:9f:cf:31:7e:
                    9a:c5:53:4b:29:7b:e5:ed:4c:5c:56:33:cf:cd:cc:
                    f5:77:9f:4c:ec:b0:bf:bd:98:a9:17:ea:d6:59:ff:
                    87:32:2a:bf:80:3b:ee:79:bc:3a:94:fa:82:32:25:
                    bf:15:76:e4:7b:a8:37:26:9e:09:6a:2c:cf:29:61:
                    5a:5d:a7:c9:b5:11:25:6c:a1:19:3b:5e:4c:46:49:
                    b3:dc:d1:ff:0b:72:62:b9:12:2f:26:cd:02:b7:6b:
                    10:0b:67:03:9c:b2:12:7b:1a:a3:98:a7:33:6f:b2:
                    7c:22:e6:57:68:7b:5d:b2:25:92:98:de:04:62:86:
                    ba:58:71:43:9e:f3:86:f1:40:ad:8e:d8:58:e9:6d:
                    86:6c:a6:95:61:c7:c8:9b:ce:c4:99:ea:d1:97:57:
                    74:bd:27:4c:9e:f8:a2:c2:c2:16:d0:f6:13:d2:2f:
                    d3:5a:95:ff:ab:3a:d0:49:83:88:70:7e:91:ce:1b:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:7E:48:E3:B6:E8:7F:95:36:80:19:71:60:B4:D8:01:74:E4:2E
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/323830333a376661303a3a2f33322d3438203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:3d:b6:c7:99:59:e8:44:40:3b:bb:31:45:4b:70:1c:2b:
         b7:4a:ec:b9:5d:df:a4:51:fd:e3:9f:de:3d:be:e7:1a:18:f4:
         a7:82:f7:86:f8:3b:35:a8:54:64:22:90:66:7e:2c:aa:db:7b:
         34:19:ce:6a:f4:72:07:22:1d:62:f4:eb:07:3c:0c:0e:2b:cf:
         f9:86:64:86:28:59:dc:d5:cb:9b:93:2e:52:a0:eb:fc:34:00:
         bf:4f:f9:ed:c0:bd:2b:eb:62:0b:d3:ae:68:92:02:dc:dd:cf:
         08:fe:1a:9c:c1:27:0d:de:81:4d:d3:1d:4f:03:7c:6e:50:03:
         a0:44:33:04:f6:4e:ff:df:90:2d:05:5a:19:a6:95:40:1e:c9:
         0b:e0:c1:f3:6c:85:29:14:b4:8e:8e:2c:d4:ae:5d:ee:26:89:
         08:71:c2:73:b6:96:14:d3:57:5f:bd:93:64:75:5f:69:8e:e0:
         34:91:72:34:d9:ed:0b:5a:33:a5:a2:bc:f5:77:5d:26:1a:51:
         29:fc:bd:f1:85:63:b4:de:e7:22:e1:56:13:91:cb:2d:8e:c2:
         c8:67:c9:f1:96:c9:76:e8:c4:85:04:97:c0:76:d3:07:03:33:
         99:6f:89:4c:c7:9f:79:ca:6b:02:6f:a2:ac:33:5a:8b:60:e7:
         02:bd:89:f1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULH+P2USTq0fS7hAhM8OyQjfzfFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2NEU0MzYxQ0MxMDMzNkE1MDY5OEE0OTU4NTZFNzM5
NzdCQjQ2MjAeFw0yNjA3MTMxOTQ3MTFaFw0yNzA3MTIxOTUyMTFaMDMxMTAvBgNV
BAMTKDg0MzI3RTQ4RTNCNkU4N0Y5NTM2ODAxOTcxNjBCNEQ4MDE3NEU0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAAY6Y+s/GsW/NUf8EUb3smrv
CXAw9Wt4cu5DRJ1yOgQyR7EjfdHNsxw0I1+3QeHleo13oKnAjEDDFmSAFadoYwHr
4Ia4n88xfprFU0spe+XtTFxWM8/NzPV3n0zssL+9mKkX6tZZ/4cyKr+AO+55vDqU
+oIyJb8VduR7qDcmnglqLM8pYVpdp8m1ESVsoRk7XkxGSbPc0f8LcmK5Ei8mzQK3
axALZwOcshJ7GqOYpzNvsnwi5ldoe12yJZKY3gRihrpYcUOe84bxQK2O2FjpbYZs
ppVhx8ibzsSZ6tGXV3S9J0ye+KLCwhbQ9hPSL9Nalf+rOtBJg4hwfpHOG+oNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUhDJ+SOO26H+VNoAZcWC02AF05C4wHwYDVR0j
BBgwFoAU22TkNhzBAzalBpiklYVuc5d7tGIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QzA3QjdCRkUyMzBERTFCMjE4MzJBMzFBQjU5MUUyQkE1
RDY4RjExOTZBRDk0NTg0ODc5MjREMzRFODI2NjMyLzAvREI2NEU0MzYxQ0MxMDMz
NkE1MDY5OEE0OTU4NTZFNzM5NzdCQjQ2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjY0RTQzNjFDQzEwMzM2QTUw
Njk4QTQ5NTg1NkU3Mzk3N0JCNDYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0MwN0I3QkZFMjMwREUxQjIxODMyQTMxQUI1OTFFMkJBNUQ2OEYxMTk2
QUQ5NDU4NDg3OTI0RDM0RTgyNjYzMi8wLzMyMzgzMDMzM2EzNzY2NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDf6Aw
DQYJKoZIhvcNAQELBQADggEBAANqPbbHmVnoREA7uzFFS3AcK7dK7Lld36RR/eOf
3j2+5xoY9KeC94b4OzWoVGQikGZ+LKrbezQZzmr0cgciHWL06wc8DA4rz/mGZIYo
WdzVy5uTLlKg6/w0AL9P+e3AvSvrYgvTrmiSAtzdzwj+GpzBJw3egU3THU8DfG5Q
A6BEMwT2Tv/fkC0FWhmmlUAeyQvgwfNshSkUtI6OLNSuXe4miQhxwnO2lhTTV1+9
k2R1X2mO4DSRcjTZ7QtaM6WivPV3XSYaUSn8vfGFY7Te5yLhVhORyy2OwshnyfGW
yXboxIUEl8B20wcDM5lviUzHn3nKawJvoqwzWotg5wK9ifE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:29:23 2026 by rpki-client