Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6130303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a6130303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          UlCEWb43xcnvhRKJ8W+H317wVFZojGB1ir006aWZNbY=
Subject key identifier:   53:89:57:D7:43:AC:39:01:11:FD:B1:7F:EF:CC:BD:AD:AA:A7:BA:7E
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       5087870E96794F427DE9E1A0733CFB566EE536F4
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6130303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Tue 07 Jul 2026 20:15:03 +0000
ROA not before:           Tue 07 Jul 2026 20:10:03 +0000
ROA not after:            Tue 06 Jul 2027 20:15:03 +0000
asID:                     274982
IP address blocks:        2803:2d30:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:87:87:0e:96:79:4f:42:7d:e9:e1:a0:73:3c:fb:56:6e:e5:36:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul  7 20:10:03 2026 GMT
            Not After : Jul  6 20:15:03 2027 GMT
        Subject: CN=538957D743AC390111FDB17FEFCCBDADAAA7BA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:60:db:ba:73:44:c3:87:ba:22:94:34:a7:
                    61:4d:4c:81:4f:46:87:16:6d:c9:71:c5:2d:24:95:
                    a1:03:50:06:36:fd:62:b0:df:ed:57:f1:6a:74:09:
                    4c:7a:32:ab:02:46:d7:02:c1:62:a3:c4:af:1b:ca:
                    29:88:f2:7a:b4:42:5a:91:6a:0b:a8:06:99:7a:25:
                    f3:9b:02:32:cb:d8:96:b2:a1:5b:98:f8:90:0e:c5:
                    08:03:56:4d:9a:98:f2:34:63:7d:9e:ad:b2:cd:a6:
                    17:2c:aa:e6:c9:b8:30:97:c9:e3:b3:51:67:5a:75:
                    aa:a1:66:60:bf:8e:87:c4:a8:38:ed:1e:ab:97:e3:
                    a3:28:0e:70:42:a5:a8:12:0e:c2:a7:a4:4d:cf:a9:
                    d5:6a:90:bb:db:26:b5:bc:9a:38:b1:e5:38:75:56:
                    30:5d:d4:fe:e8:ad:60:be:db:85:49:b0:64:04:1e:
                    40:43:38:bc:ac:4f:a0:58:bd:dd:25:96:19:f0:55:
                    05:c2:13:01:cf:76:a0:67:a0:85:a9:a7:a3:46:ff:
                    df:14:e6:27:3e:8d:b2:cb:ad:42:23:3e:c3:70:f7:
                    85:ca:5e:49:8a:3d:ce:be:e1:89:9b:f0:b1:72:b9:
                    15:96:ac:fa:49:03:3c:ef:fd:96:7a:bf:21:60:00:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:57:D7:43:AC:39:01:11:FD:B1:7F:EF:CC:BD:AD:AA:A7:BA:7E
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6130303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:94:e2:45:ef:53:b0:70:79:e1:15:ba:7f:5a:68:3d:a5:
         3e:7d:90:16:2c:7b:c2:e3:77:24:87:cb:0b:26:35:3d:c6:80:
         d5:2b:04:0f:81:1d:5c:d2:4c:5b:09:26:fc:b0:62:4c:cf:1c:
         d1:0d:b5:9d:69:d1:53:0f:05:6e:76:e0:d0:a4:a5:b0:1a:05:
         f9:c8:69:43:4c:ca:da:11:1c:06:3c:95:6f:e0:74:80:06:bc:
         b1:d3:c6:80:a5:4b:e6:45:7e:6f:d0:67:93:49:52:29:be:5a:
         20:64:9f:ad:6a:c2:d4:05:19:03:a9:32:4e:f2:17:9b:c9:02:
         6d:0c:ec:af:3c:a2:9b:73:43:74:a9:cf:43:21:dc:96:5e:a4:
         e5:90:71:9b:c7:78:76:9a:3e:c0:41:9d:8d:e9:be:1d:74:05:
         93:37:37:e7:04:4e:ae:af:fa:d6:55:05:3d:17:5b:c2:2f:4e:
         8a:2f:d5:67:a4:ca:ad:02:a8:92:6a:8e:85:4a:e7:dc:f7:d2:
         24:a0:cc:f4:4e:db:72:7d:11:fc:60:b9:fa:e0:bd:a5:87:d5:
         0d:b6:25:82:df:7f:c6:e8:91:18:ec:14:c0:47:d0:0b:f6:43:
         cd:e5:12:b3:09:e7:42:b6:17:14:fb:95:3b:50:75:69:64:e9:
         38:8e:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:55 2026 by rpki-client