Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/323830333a336433303a3a2f33322d3438203d3e20323733393734.roa
File:                     323830333a336433303a3a2f33322d3438203d3e20323733393734.roa (raw, json)
Hash identifier:          5X9x4Aq+uuXdzinREZadx/renjTos8xwIrPq/nw4xNw=
Subject key identifier:   D8:E4:EE:0C:5E:B2:C2:CB:F1:D7:68:9C:56:A4:AE:65:2F:3D:79:3A
Certificate issuer:       /CN=07A16389C2D8539503BB5C37D4B60101F74FC848
Certificate serial:       4FEC9C3A447A0DBC7A54B7D47F23A569D2BC9239
Authority key identifier: 07:A1:63:89:C2:D8:53:95:03:BB:5C:37:D4:B6:01:01:F7:4F:C8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A16389C2D8539503BB5C37D4B60101F74FC848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/323830333a336433303a3a2f33322d3438203d3e20323733393734.roa
Signing time:             Thu 23 Jul 2026 22:45:00 +0000
ROA not before:           Thu 23 Jul 2026 22:40:00 +0000
ROA not after:            Thu 22 Jul 2027 22:45:00 +0000
asID:                     273974
IP address blocks:        2803:3d30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/07A16389C2D8539503BB5C37D4B60101F74FC848.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/07A16389C2D8539503BB5C37D4B60101F74FC848.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A16389C2D8539503BB5C37D4B60101F74FC848.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ec:9c:3a:44:7a:0d:bc:7a:54:b7:d4:7f:23:a5:69:d2:bc:92:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A16389C2D8539503BB5C37D4B60101F74FC848
        Validity
            Not Before: Jul 23 22:40:00 2026 GMT
            Not After : Jul 22 22:45:00 2027 GMT
        Subject: CN=D8E4EE0C5EB2C2CBF1D7689C56A4AE652F3D793A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:69:a9:f0:45:17:db:19:f1:9a:34:6a:20:
                    0b:78:ca:a3:f4:5b:a8:b0:51:94:34:91:94:fb:de:
                    27:65:13:40:bd:90:71:f8:83:f2:95:ff:6f:bf:13:
                    67:17:c1:00:15:2b:a0:71:c5:92:8a:9f:8f:f9:1f:
                    2c:f5:e2:50:28:74:57:61:87:d2:fe:87:0f:ed:43:
                    01:66:e8:c5:a1:75:0c:20:8f:00:4b:59:7d:8a:75:
                    b5:92:95:53:8e:0f:7a:c2:e4:31:bd:8b:20:b2:18:
                    2f:ec:c2:6e:67:ee:6b:e7:20:84:60:e3:bc:b1:e4:
                    68:7c:b9:64:08:7f:d2:af:52:2d:bf:d9:37:58:0c:
                    d6:bd:d5:e2:e3:e2:99:6e:bb:51:69:9a:42:67:82:
                    90:ea:cc:d1:7e:9d:3c:ec:25:26:a7:6a:06:db:88:
                    99:36:b1:2f:8f:b5:b2:85:86:d5:83:7f:54:3e:49:
                    28:a7:fe:45:25:e9:db:29:20:2f:7f:a9:60:da:a6:
                    b6:e5:d4:be:9c:92:c8:3e:82:cb:c7:67:10:3f:81:
                    ae:51:98:52:ef:92:e5:87:02:8a:16:d4:b0:76:76:
                    e8:0d:f0:40:8c:43:4c:c1:ce:5b:85:ea:99:e2:3a:
                    30:12:32:0a:ec:be:a9:07:22:65:7c:9d:3f:a1:fe:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E4:EE:0C:5E:B2:C2:CB:F1:D7:68:9C:56:A4:AE:65:2F:3D:79:3A
            X509v3 Authority Key Identifier:
                keyid:07:A1:63:89:C2:D8:53:95:03:BB:5C:37:D4:B6:01:01:F7:4F:C8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/07A16389C2D8539503BB5C37D4B60101F74FC848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A16389C2D8539503BB5C37D4B60101F74FC848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EBB06E6D8B2B3E75BED8EDD99F9FBFEC0832B15F8A5F0C4EE1AB37489FB675/0/323830333a336433303a3a2f33322d3438203d3e20323733393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:3d:34:d8:18:81:10:d0:d4:ef:bc:a5:39:fe:28:9e:a6:
         e0:41:8a:59:3d:35:97:4a:5d:8a:84:1d:87:58:9a:3d:34:7b:
         0e:fc:cf:b4:2f:37:54:b5:39:50:f3:fe:b5:21:bb:8d:0c:ad:
         a4:22:d8:98:c1:42:02:9a:b4:15:c1:e0:7c:46:95:ba:22:df:
         41:97:2c:7c:ef:c0:38:35:e7:c5:75:13:01:4f:68:2e:ba:66:
         8e:80:5e:61:cc:a5:87:36:e9:0c:9d:1a:b7:e0:51:32:ad:ce:
         b6:86:52:5a:56:99:60:71:a2:c6:36:39:7a:d3:7e:24:aa:0d:
         32:77:52:eb:7d:ef:71:4f:78:b0:68:b8:6f:a0:5e:74:ce:9a:
         9f:15:af:c5:f4:fe:41:d4:ad:61:4e:d7:58:9f:9a:ab:51:b4:
         ae:7a:1b:09:0b:90:4c:c4:b4:13:f5:df:87:5f:29:f0:97:18:
         d0:ee:5d:f1:41:8d:cf:28:f1:f2:83:50:7d:b9:f8:fc:03:f6:
         34:f6:c7:8a:75:4f:ec:01:b2:4a:46:42:9f:67:6d:56:86:4d:
         fc:af:5f:2b:87:17:eb:ae:06:c0:4e:06:a9:3a:51:6f:ac:9c:
         4f:83:99:e4:02:1d:a9:33:5d:dc:51:62:66:12:88:3a:d7:e1:
         97:7e:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:29 2026 by rpki-client