Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6530303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a6530303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          Fw1VfysylqSWdPxEIH7M3oR3YjydnySpkU58k/USC3E=
Subject key identifier:   12:B0:EC:BA:E3:04:71:50:6D:47:63:A3:F8:4B:6C:63:8A:F6:06:CC
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       7F211EC25C78BFD38EA4CD76F3CC97E88EA027C8
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6530303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Fri 17 Jul 2026 16:05:00 +0000
ROA not before:           Fri 17 Jul 2026 16:00:00 +0000
ROA not after:            Fri 16 Jul 2027 16:05:00 +0000
asID:                     274982
IP address blocks:        2803:2d30:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:21:1e:c2:5c:78:bf:d3:8e:a4:cd:76:f3:cc:97:e8:8e:a0:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul 17 16:00:00 2026 GMT
            Not After : Jul 16 16:05:00 2027 GMT
        Subject: CN=12B0ECBAE30471506D4763A3F84B6C638AF606CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:c3:2b:97:48:bc:a0:bb:da:96:5f:f8:7e:
                    b3:73:f4:bf:23:cd:da:83:33:4e:7c:d7:2b:14:cd:
                    a5:30:f6:a6:fe:aa:de:31:0b:5a:d9:00:43:bd:f7:
                    88:11:69:9a:ea:d3:03:15:da:89:cf:d1:6d:e2:7b:
                    26:11:29:60:d9:d9:42:47:a9:0e:1e:c3:5f:b1:7b:
                    6c:4c:88:cc:b3:e6:e1:36:d9:bc:c8:af:7e:c9:43:
                    fe:20:93:b1:ed:a5:93:e1:3f:78:6c:0c:72:c2:22:
                    a8:5c:9c:20:fc:0e:85:98:cf:0e:19:cd:3a:eb:2b:
                    82:80:75:cb:e0:c6:27:f0:fd:e0:f4:3c:81:9a:2b:
                    33:f0:db:b7:e7:5c:58:02:dd:9b:6a:8c:92:a8:00:
                    86:e7:9d:c7:43:1f:94:84:ce:98:86:b7:1c:3a:ad:
                    50:f5:b3:87:db:f0:00:29:af:dc:2f:bf:44:59:65:
                    2f:21:0a:48:7f:ae:c9:e8:07:b1:42:18:58:5e:0b:
                    5d:91:68:5d:ac:d8:e8:2a:2d:37:63:38:61:b4:a6:
                    8f:39:dd:5e:83:f6:29:0b:b0:ad:f3:4b:2c:c1:7e:
                    5a:4d:d8:11:5f:3d:a3:cd:87:78:79:18:e0:15:83:
                    18:1a:8c:3c:63:9c:f0:2d:ef:43:37:88:d0:d7:85:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B0:EC:BA:E3:04:71:50:6D:47:63:A3:F8:4B:6C:63:8A:F6:06:CC
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6530303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:1e:6c:9a:bc:4f:88:a0:22:f0:a6:8f:af:b4:30:ab:72:
         3c:5f:85:9b:f0:57:13:3d:9a:c3:5c:31:0c:7c:e6:61:58:7c:
         a0:6d:ce:f6:72:ea:7e:39:56:5d:f4:4e:d0:36:c4:46:17:9b:
         56:ce:2b:f6:ed:3a:81:05:16:28:2a:54:73:02:cd:d0:12:47:
         13:27:02:e8:22:95:0b:9d:f9:82:13:7a:b1:6a:a4:fc:eb:3b:
         4d:f0:2f:45:12:7f:d0:cd:fb:95:82:8e:ea:81:b5:b6:40:76:
         d4:10:d4:2c:bb:b4:ea:3b:07:d2:ab:2d:33:ee:c7:8d:58:25:
         76:06:71:b0:d4:60:78:63:7a:77:67:ee:04:e4:fc:8a:43:78:
         18:be:be:eb:17:fd:e0:d2:fc:46:cd:5b:6d:fa:ac:6c:55:a6:
         e0:6f:56:c7:a4:04:1a:81:cf:3b:3b:80:43:9d:aa:60:ea:72:
         3f:c6:87:f6:14:97:79:e2:38:fe:12:8d:3f:ef:4f:5f:9b:fd:
         c2:f7:89:7a:af:7d:c9:ab:c0:c1:a9:56:bd:77:45:9b:5f:31:
         2d:7b:09:19:f7:78:ee:7a:d5:00:2a:7b:b3:25:e6:c9:7c:53:
         c0:cc:01:d5:5d:10:89:28:64:af:17:ed:29:ff:7f:93:57:f7:
         c8:f1:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:57 2026 by rpki-client