Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a313530303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a313530303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          eS/CYG1OH01PUs6FhPxEzujx/TvBapxLLwkH7GIJuEw=
Subject key identifier:   CD:AF:3C:A9:44:05:8B:7C:A9:30:01:76:FC:18:0A:BD:4F:6D:0F:57
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       66BECE0F8357AD9A8BA4F3DB7741BA1075DE4784
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a313530303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Fri 17 Jul 2026 16:05:01 +0000
ROA not before:           Fri 17 Jul 2026 16:00:01 +0000
ROA not after:            Fri 16 Jul 2027 16:05:01 +0000
asID:                     274982
IP address blocks:        2803:2d30:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:be:ce:0f:83:57:ad:9a:8b:a4:f3:db:77:41:ba:10:75:de:47:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul 17 16:00:01 2026 GMT
            Not After : Jul 16 16:05:01 2027 GMT
        Subject: CN=CDAF3CA944058B7CA9300176FC180ABD4F6D0F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:3e:fd:76:d8:66:95:89:c7:99:f6:3a:25:
                    d1:fa:c0:d8:b6:dc:51:4f:39:6f:d6:a5:04:7b:34:
                    75:b1:0b:10:95:43:02:8c:76:5d:1f:dc:d9:33:1f:
                    be:50:87:1b:9d:29:aa:eb:da:5e:86:20:90:9e:c6:
                    79:72:8a:ea:4a:3b:cd:51:be:2f:7e:8c:63:7e:ec:
                    4c:b5:0a:e5:6a:5a:25:cc:a2:dc:0f:d5:56:a1:4a:
                    da:c4:1a:44:e4:f4:20:a9:ae:01:f5:21:08:64:94:
                    e8:e1:db:19:39:cb:ca:ed:99:9f:14:ce:83:03:b5:
                    b6:0a:a7:dd:45:48:80:24:7c:f2:22:e8:d6:09:c7:
                    99:2a:87:0f:80:51:f4:ea:ae:7f:96:d0:7b:9c:75:
                    23:e8:66:4e:7e:91:2d:48:43:d7:6d:3a:6e:b9:c8:
                    cb:14:0f:b9:7c:ec:68:4c:93:a9:fd:9d:80:e0:61:
                    b8:c4:09:2f:2c:8b:81:d1:9e:1e:67:74:30:ca:ed:
                    1f:78:96:81:54:35:53:93:05:f7:39:dd:f4:b3:87:
                    9a:c9:23:84:44:a1:3c:a5:a5:33:03:15:d0:71:5f:
                    85:bb:d1:71:a5:ce:8d:a6:2c:7e:40:6b:4d:1e:09:
                    71:3e:f1:78:50:88:35:7e:74:52:48:8d:9e:9c:44:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:3C:A9:44:05:8B:7C:A9:30:01:76:FC:18:0A:BD:4F:6D:0F:57
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a313530303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:fc:95:13:40:ec:71:e1:7b:00:46:50:09:cb:82:1f:c8:
         88:2d:a8:3d:74:d7:1a:3c:6b:27:ca:0e:a2:66:17:81:82:51:
         7c:43:b6:8f:1e:0b:7b:cf:df:b7:27:ca:e4:0f:66:fb:1a:c2:
         a9:c6:3f:48:02:2f:d4:0e:4c:01:51:d6:f5:32:dc:b4:7a:f2:
         46:61:de:77:22:43:ff:c4:82:36:10:af:ba:0a:0e:f2:dd:1c:
         0b:9c:75:fc:11:7d:fd:66:2b:b6:6f:61:a5:69:c9:31:72:5e:
         ae:76:1b:1b:71:f3:6d:d0:34:a7:13:31:b6:a5:db:3d:35:bf:
         8d:4f:e7:83:55:4a:77:7c:37:b0:7a:7b:ce:25:8a:0b:ba:6d:
         16:c6:ca:31:76:22:23:82:28:79:4b:6d:d6:b9:4b:79:59:6f:
         c0:dd:10:ee:c4:17:d2:71:11:13:88:43:46:ac:e0:f1:eb:14:
         5a:8c:4b:c5:26:ea:0e:c1:08:3e:61:e0:e0:c2:a3:0b:f7:72:
         c1:45:63:bf:ff:9a:12:11:1f:65:42:a1:91:bc:d4:15:b3:5d:
         2e:fb:1b:e9:c9:eb:02:c3:ad:6d:6d:33:8f:39:73:fd:6b:c0:
         d0:2c:50:e2:cb:bd:53:71:6e:49:57:26:ea:c4:ab:10:a6:b1:
         83:0b:77:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:28 2026 by rpki-client