Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa
File:                     323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          3z4oPzaVkZJ/1ycSiEQ8Qbe5kZZUi2eqcrzMzoVMGBw=
Subject key identifier:   45:FB:78:1D:0B:75:6A:D7:53:77:F8:CD:32:31:A4:A8:9C:63:57:B1
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       3328E0F09420798D5758C78C8F511D2D5CB009EC
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa
Signing time:             Wed 24 Jun 2026 18:49:31 +0000
ROA not before:           Wed 24 Jun 2026 18:44:31 +0000
ROA not after:            Wed 23 Jun 2027 18:49:31 +0000
asID:                     263793
IP address blocks:        2803:840:2300::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:28:e0:f0:94:20:79:8d:57:58:c7:8c:8f:51:1d:2d:5c:b0:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Jun 24 18:44:31 2026 GMT
            Not After : Jun 23 18:49:31 2027 GMT
        Subject: CN=45FB781D0B756AD75377F8CD3231A4A89C6357B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:e3:ea:da:a2:94:90:da:bb:d7:4a:50:a7:
                    6e:91:7d:9e:ee:de:3e:02:76:4d:48:6c:a7:2f:1e:
                    60:3e:e8:6c:b1:83:06:42:14:5c:d7:4d:75:70:91:
                    cf:91:c2:47:1c:89:09:02:02:fc:7d:9d:73:e8:c5:
                    27:ea:9f:38:2c:eb:b4:3a:93:f9:a7:8d:88:de:9e:
                    94:78:a0:3d:da:b3:d9:ca:53:be:9f:67:59:8a:b0:
                    07:93:8b:2d:1b:5e:fc:40:fd:67:bd:d1:a2:68:96:
                    9b:e2:b1:ea:d9:d9:43:2d:b7:1f:f2:bd:10:d5:d0:
                    93:dc:fe:fb:42:09:d6:5a:a6:af:e7:6f:29:fe:6a:
                    e5:b6:33:ed:c4:3a:b1:00:a3:54:ef:32:a3:bb:41:
                    c3:0d:6f:a6:f8:16:a2:3d:6f:98:1e:5f:49:75:b1:
                    48:4d:f8:52:6a:4d:e4:b0:ea:9d:08:cc:3a:a8:44:
                    f1:1f:bf:ef:fc:3c:75:ed:75:e7:91:db:ac:6f:55:
                    33:6b:54:9e:b7:ff:cf:d1:0c:ed:c4:5d:9e:46:7b:
                    29:d8:6c:5a:0c:79:f8:11:40:b3:54:07:3d:a5:15:
                    c8:e0:86:d6:56:7d:6f:fa:c3:20:91:a2:b8:fd:b1:
                    ac:2e:c3:bc:ae:c8:07:c6:7c:fc:ce:70:0d:4f:f3:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:78:1D:0B:75:6A:D7:53:77:F8:CD:32:31:A4:A8:9C:63:57:B1
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840:2300::/47

    Signature Algorithm: sha256WithRSAEncryption
         c9:18:4e:e2:e1:5e:f8:7f:d2:96:2e:c4:ca:bb:58:e8:b4:4c:
         a4:16:c2:fc:e1:c2:de:c3:db:ac:d3:0e:45:df:cd:49:aa:02:
         de:e4:55:dc:78:f4:cd:a6:f1:18:1d:4e:f9:8f:9b:39:bf:e1:
         46:49:f4:a2:a5:eb:95:9f:e3:6d:72:af:7c:cd:eb:c0:85:54:
         1a:ef:4a:b8:b6:29:cd:77:37:3d:16:62:15:81:fb:fd:f4:67:
         b5:5f:22:2e:92:45:45:ca:68:75:56:22:b3:1c:48:39:80:a6:
         47:e0:51:f7:a5:1f:fb:45:11:45:f9:8d:a4:2b:ac:b4:91:70:
         1e:7f:f6:fb:9c:cb:d4:9a:b4:54:40:bf:3e:0d:61:d4:61:47:
         e8:18:ed:ef:ee:bf:a3:31:f6:fb:71:4e:a4:17:e6:45:d2:83:
         5a:4d:20:66:81:7e:22:ae:d8:a5:ed:12:6c:aa:31:d6:0e:ea:
         22:91:5d:19:02:70:1c:37:4a:ba:75:65:b1:9d:76:bd:1d:33:
         35:ec:d2:02:30:56:b1:31:0e:2f:df:e6:38:66:f6:04:a9:db:
         64:95:1d:72:a7:02:e4:e0:80:48:23:ed:ca:d2:76:f2:41:3a:
         da:b1:83:06:42:6c:e1:6e:af:87:81:b1:f2:23:a9:dc:60:96:
         37:8f:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:41 2026 by rpki-client