Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3530303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a3530303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          VbEzk44RK5hS6w0s9qrH1nTm+ILE/IMvyldRVn/ugKU=
Subject key identifier:   2B:EE:3A:07:96:CF:C8:7F:67:95:DF:D1:C1:7D:E9:EF:5E:D5:31:C5
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       0984FA77170498E4895AADB6BBADC0F2861982E6
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3530303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:02 +0000
ROA not before:           Tue 07 Jul 2026 20:10:02 +0000
ROA not after:            Tue 06 Jul 2027 20:15:02 +0000
asID:                     274982
IP address blocks:        2803:2d30:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:84:fa:77:17:04:98:e4:89:5a:ad:b6:bb:ad:c0:f2:86:19:82:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:02 2026 GMT
            Not After : Jul  6 20:15:02 2027 GMT
        Subject: CN=2BEE3A0796CFC87F6795DFD1C17DE9EF5ED531C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:3a:bf:7b:78:c8:d8:8b:02:cc:e4:82:6e:
                    09:c3:45:d7:b7:4f:d6:ec:fd:52:18:f9:9f:ba:51:
                    45:69:75:79:ca:a2:44:38:8d:4a:dc:01:d7:d9:03:
                    25:b9:5b:85:3e:a4:60:a9:2b:03:a5:e9:f8:9a:e7:
                    31:80:17:c3:1b:80:f6:90:6c:a0:e1:2f:fe:75:b9:
                    3b:31:b4:30:dc:0b:02:6f:8a:3e:f5:0a:4e:cb:fb:
                    e5:94:b2:a7:9b:b4:2c:4f:ff:7c:91:de:3f:9d:b1:
                    40:f2:06:bd:62:35:21:a6:6c:29:38:08:60:f1:d9:
                    12:c2:57:3b:a6:54:14:db:9e:f1:2d:34:8f:2d:d7:
                    92:d0:44:10:df:1e:2c:e7:c1:4d:b2:5b:c8:dc:a4:
                    02:7e:78:d7:2a:c4:0f:97:5d:b4:1a:4c:73:de:6c:
                    a8:5b:63:70:27:52:09:50:16:cf:04:6f:3b:c4:ad:
                    3d:a3:b4:01:35:e1:9d:df:7c:36:f7:d0:3f:20:96:
                    05:36:73:d0:27:c9:eb:d9:e6:a0:91:c4:0b:a9:15:
                    fc:24:8f:29:f1:34:9f:27:94:d7:88:a0:a3:94:81:
                    34:62:06:f8:70:9d:59:9f:57:89:a3:c6:7f:23:5f:
                    cc:8a:14:d3:f3:c3:5e:d6:ef:e8:a2:e3:df:bd:42:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:3A:07:96:CF:C8:7F:67:95:DF:D1:C1:7D:E9:EF:5E:D5:31:C5
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3530303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:95:62:21:30:1b:8e:63:36:68:d4:0d:7a:32:9a:fe:0c:
         bf:f7:3d:d7:6b:88:08:15:11:a9:92:cb:f7:0c:90:9c:45:5d:
         64:fe:e7:af:35:91:aa:ce:8e:fa:2f:fb:5d:32:90:7a:de:99:
         d8:f8:d2:97:f1:55:26:fc:bf:31:71:f5:6b:71:39:2c:06:08:
         bb:4d:61:05:8e:ea:fe:ca:0f:28:6f:d9:79:08:52:41:7c:e7:
         f7:ba:fa:9c:eb:dd:46:28:d0:1a:ab:92:69:e3:ab:c0:ba:ad:
         a3:d4:0d:49:e3:ab:6e:23:4f:59:8a:93:fa:92:19:83:e9:73:
         12:df:e4:be:3e:4b:4d:f7:cd:ef:5b:bc:08:05:0b:19:b0:d4:
         51:e8:ab:8e:d7:dc:3c:77:76:89:d5:47:3e:87:23:0a:b0:31:
         a6:f4:a9:97:3c:05:9a:6c:00:25:ce:0a:9d:0a:92:49:9a:b2:
         8c:9b:88:ec:74:1c:bb:47:ed:a9:a1:4f:d5:07:87:fb:69:bf:
         7b:41:64:4f:00:17:70:77:99:b8:04:bf:f0:57:48:d9:3e:ba:
         7f:53:a5:9f:e2:03:b1:4c:b9:06:c1:d9:5a:1a:2b:06:9b:fc:
         38:94:24:1f:a1:05:dc:5a:a6:a1:2f:03:ae:9a:ee:99:13:f2:
         fe:a2:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:29 2026 by rpki-client