Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3430303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a3430303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          9wbs582b7qc1s3I8QM4JvHj9ZjEeneBtGEHOekjP4Sk=
Subject key identifier:   FF:DF:18:55:83:C5:3B:C8:19:00:33:3F:6F:89:E3:F1:BB:E8:04:92
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       4D4ADCBAC55B2016DB2FFC3E0D9C73E12AF22A3B
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3430303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:03 +0000
ROA not before:           Tue 07 Jul 2026 20:10:03 +0000
ROA not after:            Tue 06 Jul 2027 20:15:03 +0000
asID:                     274982
IP address blocks:        2803:2d30:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4a:dc:ba:c5:5b:20:16:db:2f:fc:3e:0d:9c:73:e1:2a:f2:2a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:03 2026 GMT
            Not After : Jul  6 20:15:03 2027 GMT
        Subject: CN=FFDF185583C53BC81900333F6F89E3F1BBE80492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:5c:7e:da:79:96:03:cc:cf:ad:49:2c:a2:
                    0f:50:60:a0:8b:5d:bf:06:fd:75:33:5a:cb:c0:56:
                    3c:9c:32:8d:06:07:6a:ff:f8:80:07:72:14:cf:f6:
                    0f:3a:3a:02:05:88:ae:30:f4:f2:3e:9d:93:1a:ba:
                    d2:4d:b6:4a:55:37:af:05:d5:fc:dc:e1:eb:ef:d0:
                    11:8e:d2:dc:36:13:bd:9f:b5:44:dd:ff:aa:c9:b9:
                    35:57:6b:9c:19:2c:bb:5c:ec:bb:cd:06:61:b4:43:
                    9e:0e:77:4a:7b:2a:0f:89:de:37:29:de:f9:3c:7b:
                    d7:6f:fa:23:0b:b3:7a:3c:7c:c1:6b:93:c4:b2:2a:
                    96:5b:a3:0b:4a:9f:f1:6a:14:ee:2a:18:0d:43:16:
                    11:cd:d6:d4:ae:ac:bd:a3:84:60:65:eb:fb:56:3a:
                    cd:31:a5:f8:91:92:28:84:0e:58:0d:44:25:41:84:
                    72:b1:97:13:36:a8:da:28:1c:b2:92:e2:cc:9f:fc:
                    46:14:5c:72:ca:59:92:a6:97:c1:37:b4:52:5a:42:
                    26:75:a2:d4:0b:e3:0c:83:0e:8d:3a:c9:71:6d:89:
                    67:43:0a:bc:77:ad:eb:29:47:fa:4a:bc:5e:03:a9:
                    b5:b0:e7:a3:b1:03:27:52:63:71:0a:c1:ae:dd:e7:
                    2d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:18:55:83:C5:3B:C8:19:00:33:3F:6F:89:E3:F1:BB:E8:04:92
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3430303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:73:1e:2f:d5:6e:82:e5:78:b6:14:80:7b:1b:db:04:ee:3b:
         81:b3:8e:5d:31:a2:6c:98:e9:a3:39:e2:0b:92:a1:92:96:de:
         2c:2e:44:ba:c5:83:c1:98:0d:a3:0b:48:83:b0:7a:25:b4:a6:
         0a:31:f0:66:82:90:05:ef:dd:f3:12:09:dd:2b:a4:fc:89:a5:
         90:c4:fc:75:98:c6:a7:00:c6:65:d7:87:5e:aa:02:7a:07:4b:
         9b:39:12:0c:a2:98:32:13:18:83:27:f4:3c:f4:70:77:c2:a1:
         ff:b0:0c:88:f0:cd:b5:59:86:88:47:da:3b:9b:d9:be:cf:0a:
         35:fa:c3:63:7b:d3:20:db:89:d7:01:32:5f:1a:b0:ce:71:a3:
         d3:e7:0e:a4:dd:7b:db:5e:9f:fe:24:70:1c:58:94:fa:63:6f:
         e1:a9:cd:98:db:af:0c:4c:05:ff:4e:91:50:0c:85:f1:f4:9c:
         c2:a1:f5:2b:58:62:7c:d1:d7:b9:a8:7c:ba:a6:74:57:db:1b:
         77:11:03:22:ee:cd:fb:91:d6:c8:c0:11:15:37:dc:98:ab:db:
         24:7f:da:0a:d9:d5:c2:74:4c:23:a4:8b:cc:da:38:b7:44:ca:
         82:85:e3:36:6a:d3:db:39:9c:6e:c3:ec:31:d0:af:95:be:41:
         91:0e:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:56 2026 by rpki-client