Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa
File:                     323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa (raw, json)
Hash identifier:          uYZ8PBMdz4rUJwcumi7JUu7wDr6g6ZODsTvloK2Jj+Q=
Subject key identifier:   4F:BB:66:F7:26:E3:29:80:B9:E0:1D:B6:34:4E:F6:B9:3B:40:BE:AA
Certificate issuer:       /CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
Certificate serial:       4ED63E630E7DAD11AF3596B8DA7BC8C4923ED833
Authority key identifier: 37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa
Signing time:             Mon 22 Jun 2026 16:48:46 +0000
ROA not before:           Mon 22 Jun 2026 16:43:46 +0000
ROA not after:            Mon 21 Jun 2027 16:48:46 +0000
asID:                     264783
IP address blocks:        2803:4f40:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d6:3e:63:0e:7d:ad:11:af:35:96:b8:da:7b:c8:c4:92:3e:d8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
        Validity
            Not Before: Jun 22 16:43:46 2026 GMT
            Not After : Jun 21 16:48:46 2027 GMT
        Subject: CN=4FBB66F726E32980B9E01DB6344EF6B93B40BEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:e2:d6:1c:54:d3:0e:37:98:b6:86:53:4e:
                    1d:f3:b2:a0:fe:c5:39:d0:57:30:10:4c:46:16:fe:
                    a3:32:46:de:11:55:4c:91:03:57:09:9e:a4:64:9b:
                    02:03:99:be:bc:cc:ca:72:ff:cb:72:7c:9d:99:7e:
                    ab:36:23:df:d8:4b:f1:a0:71:5b:4e:92:d1:b3:44:
                    af:49:8b:2e:b5:49:75:76:d3:aa:93:f5:97:63:87:
                    3f:5c:96:59:15:4c:40:e0:da:76:a8:69:f7:75:be:
                    32:7a:42:54:f0:bd:7d:80:05:c2:90:f6:4a:3e:3a:
                    45:d2:20:64:a9:e8:86:a4:3f:5f:63:d3:af:72:cc:
                    d7:97:d7:54:a4:b9:cf:66:01:aa:7c:41:a6:5b:38:
                    a8:5f:83:21:8a:e2:42:2b:b1:8b:c2:de:9d:9f:30:
                    9a:6e:80:fe:8d:38:56:8b:74:cf:4d:5e:c5:32:4a:
                    cf:54:de:1c:6c:ef:88:a3:3e:c4:38:19:b3:86:68:
                    34:97:4d:bc:4f:ce:17:6c:4b:e9:21:bd:22:10:49:
                    c0:ce:e8:a0:6d:bc:61:99:5d:2b:41:68:4d:66:f7:
                    95:98:2e:53:91:f2:dc:df:94:86:d0:5f:af:b5:9f:
                    53:33:ef:08:97:46:b4:ff:87:30:83:dc:b1:3f:33:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:66:F7:26:E3:29:80:B9:E0:1D:B6:34:4E:F6:B9:3B:40:BE:AA
            X509v3 Authority Key Identifier:
                keyid:37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f40:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:b9:22:90:f3:2b:f7:15:d9:0e:6a:14:96:75:50:8c:27:
         ec:41:e7:34:36:e4:85:f3:91:52:e9:6c:8a:3d:02:49:70:32:
         78:22:4e:c7:f3:fd:29:9d:b5:bf:fe:c7:cc:57:67:de:d2:0a:
         71:97:96:5a:c4:d7:b5:85:77:a0:39:47:3d:57:82:3c:d1:1f:
         48:d3:ab:f8:fd:4d:4c:ae:fb:bb:af:ff:29:e5:9d:49:6a:b8:
         06:08:26:a9:05:d9:11:ac:a8:09:8b:28:7b:ae:e4:11:7c:57:
         26:83:0d:9f:45:4d:fd:cb:1a:66:08:36:b2:52:4b:b2:62:3c:
         ef:7f:cc:c4:81:45:cf:e5:45:1f:74:3b:d3:42:6e:4b:d5:f6:
         3a:e9:89:7e:cc:68:43:a4:3b:2a:ee:a7:f5:fd:0d:e1:16:98:
         0d:ae:72:62:4c:1b:c8:b0:54:98:8c:66:a9:b6:61:59:fb:c2:
         c6:6b:03:77:ca:56:99:df:72:36:0e:cb:35:1a:cf:23:a4:9c:
         f4:c2:35:4b:30:fd:d7:55:d3:85:85:f5:13:ff:98:3f:3e:6c:
         a0:91:8b:85:11:1c:bc:f4:65:27:9f:3b:fd:2b:60:e1:6d:50:
         fc:f9:a3:f8:42:ad:e2:69:80:3b:51:d3:33:ee:a4:ba:b8:be:
         ce:24:86:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:55 2026 by rpki-client