Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3930303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a3930303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          GxAXj5AA+JXCljhuJJ4DTo5hDvuQ/k3caewirQjvoZM=
Subject key identifier:   36:EB:1E:3F:40:73:74:15:9A:D3:C5:66:FA:1B:02:40:01:C2:2E:BD
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       7C32B62F395DD7806907AC90BD029EC167583E1C
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3930303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:02 +0000
ROA not before:           Tue 07 Jul 2026 20:10:02 +0000
ROA not after:            Tue 06 Jul 2027 20:15:02 +0000
asID:                     274982
IP address blocks:        2803:2d30:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:32:b6:2f:39:5d:d7:80:69:07:ac:90:bd:02:9e:c1:67:58:3e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:02 2026 GMT
            Not After : Jul  6 20:15:02 2027 GMT
        Subject: CN=36EB1E3F407374159AD3C566FA1B024001C22EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:82:cd:1d:96:a9:9e:48:46:52:d8:c9:cc:a4:
                    e1:11:95:29:dd:9c:ab:9f:48:53:20:f2:2b:f6:3d:
                    f0:8c:3f:b2:43:a4:ee:17:91:72:ee:56:5e:2a:7d:
                    28:73:ec:f7:5c:72:73:62:be:a2:e6:7f:22:04:19:
                    b2:c2:36:ba:ad:07:1a:5e:d8:e9:db:b7:26:f6:b9:
                    e4:aa:9c:4e:69:54:e4:99:45:c1:bc:02:a9:d1:ef:
                    2c:c0:c5:9d:45:9c:ba:30:c0:25:c8:8a:38:0f:ea:
                    71:ca:01:fd:52:81:42:0b:1d:e0:45:86:e9:e4:fb:
                    93:54:97:f4:df:93:17:ba:d8:fc:3c:59:1d:af:2a:
                    3b:4c:e8:76:ce:03:20:7f:ca:60:be:4c:af:ea:c2:
                    bf:58:af:66:30:5b:31:86:c0:8d:bd:6b:b4:3c:d9:
                    65:6b:06:5b:32:ea:24:b4:92:cd:04:e2:65:b4:ff:
                    1a:fc:df:3c:0c:d2:c1:8e:3d:81:c5:6c:db:9e:4d:
                    a2:35:cf:6c:e6:f7:6a:ea:c7:17:db:b2:99:8c:c7:
                    e6:ca:23:77:73:20:0b:c7:d7:9d:8e:db:d0:9c:de:
                    9b:d1:31:a0:a3:04:bb:7b:06:50:45:c6:ea:21:13:
                    60:75:40:59:a0:7a:e7:c6:b7:53:37:be:33:8e:6a:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:1E:3F:40:73:74:15:9A:D3:C5:66:FA:1B:02:40:01:C2:2E:BD
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a3930303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:eb:f2:b9:a7:23:54:c0:ee:8d:bc:e9:73:fa:d6:11:25:
         4a:71:d7:79:d3:f7:d0:ed:fc:ba:1b:e7:05:6a:78:26:72:e2:
         1f:c9:c5:b6:ec:7a:23:e2:8e:87:b1:6b:fc:33:74:4a:3f:4b:
         45:ca:87:cd:0b:da:78:88:22:91:60:d2:f5:0e:b9:cd:90:dd:
         d3:54:1a:e2:27:53:b1:5e:ae:1f:3a:5f:b4:5f:0f:6e:41:9f:
         a4:ca:95:30:8d:ec:1c:30:f9:97:1f:7f:e5:fb:d7:02:bd:92:
         86:3d:52:65:df:63:30:ae:94:5c:f9:a5:64:14:db:3e:46:f3:
         59:86:de:29:21:7f:9c:6b:de:1d:7e:e1:6f:2f:d5:16:62:46:
         cb:94:56:05:d5:82:07:78:d0:25:26:bc:2b:cc:12:9c:1f:4b:
         e0:14:a6:98:73:bc:04:94:f1:9b:0f:b3:32:e8:77:44:bb:d9:
         05:88:5e:4c:8c:55:c5:9e:88:90:91:13:2c:83:27:e7:fc:50:
         09:02:18:b4:f1:37:e8:89:81:02:8f:2b:38:93:6c:25:36:e8:
         23:bc:a1:73:cb:47:d8:d2:a0:6b:8e:75:42:14:a9:08:49:53:
         cc:ff:3b:6f:f7:87:71:15:1d:be:19:40:f4:8e:6b:b4:97:5f:
         f5:1d:b8:d0
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUfDK2Lzld14BpB6yQvQKewWdYPhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc3QkYyMkYyN0EzRjc5NDlDNDQyQUNCNzJCNDVCRjE3
RUI2ODZERDAeFw0yNjA3MDcyMDEwMDJaFw0yNzA3MDYyMDE1MDJaMDMxMTAvBgNV
BAMTKDM2RUIxRTNGNDA3Mzc0MTU5QUQzQzU2NkZBMUIwMjQwMDFDMjJFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgs0dlqmeSEZS2MnMpOERlSnd
nKufSFMg8iv2PfCMP7JDpO4XkXLuVl4qfShz7PdccnNivqLmfyIEGbLCNrqtBxpe
2Onbtyb2ueSqnE5pVOSZRcG8AqnR7yzAxZ1FnLowwCXIijgP6nHKAf1SgUILHeBF
hunk+5NUl/Tfkxe62Pw8WR2vKjtM6HbOAyB/ymC+TK/qwr9Yr2YwWzGGwI29a7Q8
2WVrBlsy6iS0ks0E4mW0/xr83zwM0sGOPYHFbNueTaI1z2zm92rqxxfbspmMx+bK
I3dzIAvH152O29Cc3pvRMaCjBLt7BlBFxuohE2B1QFmgeufGt1M3vjOOahsDAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUNuseP0BzdBWa08Vm+hsCQAHCLr0wHwYDVR0j
BBgwFoAUB3vyLyej95ScRCrLcrRb8X62ht0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTE1REQxNjJFQ0U3RjFBNjI5RjE1NjgwNEY4Q0Y0RkI5
NTQwOTYyODc2QkY3MTA4Qzc0QzM0OEJFMTFGRkE2LzAvMDc3QkYyMkYyN0EzRjc5
NDlDNDQyQUNCNzJCNDVCRjE3RUI2ODZERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzdCRjIyRjI3QTNGNzk0OUM0
NDJBQ0I3MkI0NUJGMTdFQjY4NkRELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUxNUREMTYyRUNFN0YxQTYyOUYxNTY4MDRGOENGNEZCOTU0MDk2Mjg3
NkJGNzEwOEM3NEMzNDhCRTExRkZBNi8wLzMyMzgzMDMzM2EzMjY0MzMzMDNhMzkz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzM0MzkzODMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMtMAkwDQYJKoZIhvcNAQELBQADggEBAC0t6/K5pyNUwO6NvOlz+tYRJUpx
13nT99Dt/Lob5wVqeCZy4h/JxbbseiPijoexa/wzdEo/S0XKh80L2niIIpFg0vUO
uc2Q3dNUGuInU7Ferh86X7RfD25Bn6TKlTCN7Bww+Zcff+X71wK9koY9UmXfYzCu
lFz5pWQU2z5G81mG3ikhf5xr3h1+4W8v1RZiRsuUVgXVggd40CUmvCvMEpwfS+AU
pphzvASU8ZsPszLod0S72QWIXkyMVcWeiJCREyyDJ+f8UAkCGLTxN+iJgQKPKziT
bCU26CO8oXPLR9jSoGuOdUIUqQhJU8z/O2/3h3EVHb4ZQPSOa7SXX/UduNA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:54 2026 by rpki-client