Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3630303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a3630303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          Vs1O/b7m4Qs75G7azA/LiYpjNRA2st6IO/XqbXhlexg=
Subject key identifier:   9E:BB:34:30:78:BD:2B:C9:66:E7:B4:EC:27:D2:36:2B:42:F9:50:0E
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       3223AB1DD18615D085519D2B317F50AB9B6FFE13
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3630303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:00 +0000
ROA not before:           Tue 07 Jul 2026 20:10:00 +0000
ROA not after:            Tue 06 Jul 2027 20:15:00 +0000
asID:                     274982
IP address blocks:        2803:2d30:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:23:ab:1d:d1:86:15:d0:85:51:9d:2b:31:7f:50:ab:9b:6f:fe:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:00 2026 GMT
            Not After : Jul  6 20:15:00 2027 GMT
        Subject: CN=9EBB343078BD2BC966E7B4EC27D2362B42F9500E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:da:c5:cd:58:d5:6b:0a:ae:91:50:a4:d7:
                    45:dd:07:9e:ba:c8:db:6c:00:01:fe:19:72:b8:23:
                    31:5b:75:f5:4d:96:48:36:2d:b0:14:22:e7:99:94:
                    3b:1d:c5:12:bc:c0:9a:ed:b5:e4:d9:2c:c1:5d:e5:
                    bf:3f:5a:71:c3:64:1d:47:80:a0:05:59:66:35:80:
                    b4:28:bd:61:38:ed:2a:05:a6:20:84:e6:e2:e1:de:
                    f1:e3:40:52:9e:67:b8:20:58:71:5b:7b:52:ef:17:
                    cb:6e:a1:2d:40:73:9e:7b:02:fc:84:2a:1a:23:67:
                    b1:34:7a:35:86:89:02:0f:54:75:c3:88:da:ff:e1:
                    a1:db:fe:ab:cc:96:c1:15:c0:8d:36:50:da:03:61:
                    82:67:b7:a3:c4:ae:57:e5:41:0f:8a:10:e5:f0:42:
                    36:8d:3c:5f:3b:6a:e3:bb:87:37:de:10:f7:51:56:
                    30:28:26:6d:d9:86:b7:db:09:3d:7b:80:46:91:4b:
                    d6:46:90:33:03:8d:cf:e4:9c:30:07:e9:50:7d:bd:
                    f7:86:b0:1d:7e:8d:0b:cc:c4:df:99:2a:2e:9c:93:
                    b5:7c:8f:61:1d:4d:9f:de:05:2a:b4:aa:e1:f6:2c:
                    d9:d8:ff:02:54:44:cc:bb:1c:e5:6c:89:b9:3e:b1:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:34:30:78:BD:2B:C9:66:E7:B4:EC:27:D2:36:2B:42:F9:50:0E
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3630303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:f4:77:59:10:5d:35:a3:d8:8f:65:27:6f:1d:44:d5:1c:
         58:1b:3a:00:b4:d6:c6:e0:26:77:1c:ec:b7:cb:37:45:55:d4:
         56:4c:4b:d7:1e:1c:a4:6b:cb:e4:ef:fb:ad:2b:e9:b3:1b:ed:
         4c:13:98:b6:d4:31:18:1f:40:21:02:41:e0:ca:b1:d8:8a:e0:
         f8:15:ab:9d:02:f7:7f:c2:23:88:42:0b:68:dd:21:5f:90:ae:
         2c:62:7b:42:13:b2:5f:6e:89:e7:3b:9d:6f:a6:07:e8:b0:50:
         3a:9a:7b:ef:9f:e6:23:83:ea:8b:25:e0:60:ee:82:75:92:3c:
         6e:eb:de:aa:db:c7:45:f4:f4:2d:03:f5:8a:9a:de:0d:50:f6:
         41:12:d4:82:48:a8:b2:ab:44:d1:eb:50:7a:0c:1e:fa:71:15:
         37:39:02:70:ed:70:54:e2:70:2c:c8:6f:78:86:cf:79:8f:87:
         21:05:ce:d6:cc:a5:21:30:c4:26:45:21:5c:f3:5f:fa:73:2e:
         9d:e5:8f:b1:03:4c:7e:ad:4e:d6:a1:25:b4:51:b5:36:14:c2:
         44:22:7c:1b:89:dc:e1:6f:1b:4d:62:1a:99:c3:e8:50:8d:d8:
         0d:1e:1f:a0:ba:6d:ed:3e:49:c0:46:d9:de:83:3b:1e:47:d6:
         99:37:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:57 2026 by rpki-client