Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6630303a3a2f34302d3430203d3e20323734393832.roa
File:                     323830333a326433303a6630303a3a2f34302d3430203d3e20323734393832.roa (raw, json)
Hash identifier:          osxfbPI8u6Yb0fWIuXIaz6KUDqeLy5MCPWzLqh857M8=
Subject key identifier:   6F:07:4C:35:D6:F1:55:01:1F:D8:BC:62:9E:B3:79:0F:5F:E6:3A:B4
Certificate issuer:       /CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
Certificate serial:       5D9778B2A2FBCF25C3A86340609171C68E7E926D
Authority key identifier: 07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6630303a3a2f34302d3430203d3e20323734393832.roa
Signing time:             Fri 17 Jul 2026 16:05:03 +0000
ROA not before:           Fri 17 Jul 2026 16:00:03 +0000
ROA not after:            Fri 16 Jul 2027 16:05:03 +0000
asID:                     274982
IP address blocks:        2803:2d30:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:78:b2:a2:fb:cf:25:c3:a8:63:40:60:91:71:c6:8e:7e:92:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077BF22F27A3F7949C442ACB72B45BF17EB686DD
        Validity
            Not Before: Jul 17 16:00:03 2026 GMT
            Not After : Jul 16 16:05:03 2027 GMT
        Subject: CN=6F074C35D6F155011FD8BC629EB3790F5FE63AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:94:49:79:e2:b3:fe:8a:55:93:d9:95:d4:
                    38:26:1f:d1:ec:41:5c:67:30:d9:c3:60:57:8c:86:
                    9d:8f:ba:3c:01:26:8a:a1:3a:bf:e3:06:39:87:33:
                    9c:ab:e2:d3:9f:bf:a5:72:58:03:73:e5:71:d5:88:
                    8c:76:66:2f:bf:95:1c:69:07:48:a9:a3:75:0a:92:
                    36:bb:92:11:4b:9f:fc:3d:de:91:23:d0:a2:63:96:
                    f5:08:a9:24:7c:d2:0e:35:85:4e:85:a5:71:7a:52:
                    e9:91:32:da:1e:a7:67:ea:d8:43:32:40:d0:06:73:
                    56:52:45:25:1c:01:4b:e3:41:d3:ac:3e:38:00:38:
                    2d:98:ca:fb:85:a7:fc:34:48:69:44:ca:7d:26:ee:
                    b6:7c:b2:47:6a:9a:98:b5:87:8f:13:42:a4:f9:8e:
                    a2:b7:f4:5a:1e:64:9f:78:37:62:62:7c:e3:e2:36:
                    79:bd:46:9c:04:28:6c:0c:2a:b3:b4:a5:87:76:bc:
                    5c:22:dd:1b:3a:78:cd:57:88:ee:9f:47:99:99:56:
                    18:99:a8:ee:0e:94:e2:50:62:02:cb:96:06:ac:f2:
                    fa:60:6c:25:cf:df:23:e4:ef:aa:7e:9f:db:a0:c9:
                    07:f1:7c:47:ec:7c:ca:fc:1e:a2:29:50:ba:84:7b:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:4C:35:D6:F1:55:01:1F:D8:BC:62:9E:B3:79:0F:5F:E6:3A:B4
            X509v3 Authority Key Identifier:
                keyid:07:7B:F2:2F:27:A3:F7:94:9C:44:2A:CB:72:B4:5B:F1:7E:B6:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/077BF22F27A3F7949C442ACB72B45BF17EB686DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D515DD162ECE7F1A629F156804F8CF4FB9540962876BF7108C74C348BE11FFA6/0/323830333a326433303a6630303a3a2f34302d3430203d3e20323734393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d30:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:5b:06:bd:a3:62:80:a5:d3:f4:ce:0b:52:22:31:87:5c:1b:
         98:e0:d0:be:0b:56:e3:81:8b:0f:76:f4:c3:0c:81:1f:b0:71:
         ba:a6:06:d2:34:c0:39:04:e3:cf:4e:c1:97:36:3a:df:f4:42:
         4f:91:e7:15:72:c1:53:94:2f:c2:21:df:49:50:36:6e:09:e0:
         27:4f:8c:73:09:35:11:8d:66:b3:62:1c:61:58:1d:e2:33:ae:
         36:69:e5:5a:56:da:1b:a4:4c:40:0d:fb:f3:b3:1f:c3:46:9d:
         3d:cc:8f:40:2e:28:7b:72:fd:21:f8:1d:3d:32:32:ed:69:10:
         96:df:9f:a7:95:05:34:6b:a6:d6:39:0e:34:04:60:f2:05:fb:
         d4:e8:d0:eb:9a:c3:32:87:a6:a6:52:1c:dc:f3:b3:f3:17:fd:
         eb:ef:1a:9f:61:58:16:7d:93:ce:ba:43:35:ef:15:28:f6:18:
         02:42:3b:e8:90:e0:f9:af:3b:cc:28:b5:47:e1:08:c2:e3:da:
         c4:bb:04:a4:91:20:26:f5:cf:6f:f2:ff:4c:e3:7f:47:2c:84:
         18:52:31:ee:d7:f0:04:c8:80:7a:6a:f9:11:1b:f6:d9:3a:47:
         26:f6:3a:28:59:92:b1:e4:d7:80:b3:92:79:f7:4a:1e:66:88:
         16:d4:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:59:51 2026 by rpki-client