Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3130303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a3130303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          qyyJ0JMatAO6CM3dalgGS6jC5OlumKYRKhdFRhkdcP4=
Subject key identifier:   94:AA:B5:68:52:7F:66:50:96:67:2C:09:0A:AB:06:14:9F:CF:BA:49
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       1FE79989A8A5AB6107C73422CF984FA6E507930A
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3130303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:01 +0000
ROA not before:           Tue 07 Jul 2026 20:10:01 +0000
ROA not after:            Tue 06 Jul 2027 20:15:01 +0000
asID:                     274982
IP address blocks:        2803:2d30:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e7:99:89:a8:a5:ab:61:07:c7:34:22:cf:98:4f:a6:e5:07:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:01 2026 GMT
            Not After : Jul  6 20:15:01 2027 GMT
        Subject: CN=94AAB568527F665096672C090AAB06149FCFBA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:48:c1:70:15:5b:ae:23:ab:94:41:b1:56:
                    7c:ab:a1:f1:5e:6a:54:e1:c6:f2:7d:db:23:b3:aa:
                    12:6e:7a:82:d4:c0:6e:e4:52:e3:7d:6c:97:37:ac:
                    f7:88:aa:cb:97:0f:c4:e6:46:8b:f5:a7:7f:af:30:
                    41:05:94:d4:0f:6a:3d:26:97:70:46:03:80:14:d0:
                    08:d7:ba:0f:ea:1f:a5:02:2b:95:5f:1d:7c:36:84:
                    23:fa:c7:e7:cd:f4:d4:07:d9:5b:15:6c:86:28:51:
                    e9:6c:bf:f3:b6:6a:4f:b1:5d:f9:84:8d:d5:3b:c4:
                    c0:ae:ca:6d:92:dc:bb:f0:e4:e0:0c:33:24:0c:20:
                    9e:0c:3c:45:91:12:18:c0:d3:6f:78:bb:1e:3d:df:
                    aa:b3:ed:9b:2e:dd:af:02:0f:dd:1e:b1:52:94:91:
                    e0:6b:ab:de:2e:57:14:2e:7f:8b:8d:0c:1c:28:c0:
                    a6:73:f9:c4:1b:0b:9f:44:86:6f:07:88:b0:52:3d:
                    72:20:72:62:16:e8:c3:2b:e3:41:0a:d7:ac:42:ee:
                    cf:5d:b0:48:0b:43:f8:93:de:8b:52:6e:c2:73:7b:
                    ba:d4:f1:31:94:0c:79:b2:87:2c:c4:58:11:9a:55:
                    4b:9f:27:fc:40:d2:45:bd:8f:e8:da:f6:a3:d7:7c:
                    b8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AA:B5:68:52:7F:66:50:96:67:2C:09:0A:AB:06:14:9F:CF:BA:49
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3130303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:96:b8:19:1d:0d:6d:41:78:7a:a6:bc:3d:75:a5:e3:02:
         c6:82:d7:80:e5:54:f7:e8:8b:3e:78:fb:4c:b3:89:83:c5:a6:
         69:71:70:96:fc:ea:43:05:87:50:52:29:74:5c:7b:37:87:53:
         f1:a9:01:ba:ee:2b:0a:1a:25:e9:15:9d:b1:84:81:4e:f3:5d:
         31:b1:88:0d:9d:98:16:75:9c:35:cf:b9:6b:81:3d:e4:e6:40:
         40:60:ad:84:89:dc:d0:95:5d:f1:8a:d8:77:91:43:48:e7:74:
         8d:d1:cf:ce:37:6c:eb:b2:cc:5e:d0:5c:49:b2:ba:5a:f6:f5:
         83:b4:da:e5:0a:15:72:06:f2:20:fb:f9:98:ab:ae:eb:cf:ed:
         c0:02:82:53:5b:fb:e7:59:6a:63:fe:a8:1f:7a:a9:77:7d:8c:
         41:05:b8:19:9a:36:b4:ed:00:8d:91:dc:45:1a:7a:55:f9:3f:
         3b:85:c0:f6:78:98:4d:ab:ca:97:12:4d:86:44:0d:34:b9:53:
         ef:85:5e:6d:38:68:82:a1:6e:29:38:66:30:72:8c:5e:14:07:
         cd:fc:08:70:7a:f6:9c:1f:66:82:10:5f:43:22:c8:6b:3f:a0:
         a5:17:f9:cd:d2:ae:f6:f3:d8:1e:5c:bf:e0:be:55:4d:42:73:
         52:9d:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:54 2026 by rpki-client