Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/323830333a316235303a3a2f33322d3438203d3e20323733393134.roa
File:                     323830333a316235303a3a2f33322d3438203d3e20323733393134.roa (raw, json)
Hash identifier:          H0KBv2nY5ZHBvzDBnpw+x7CAVGzlc7ATX39QFywO9TE=
Subject key identifier:   B1:9B:73:74:A3:BD:BD:30:B0:63:0B:30:4C:71:6F:82:A7:27:D8:F0
Certificate issuer:       /CN=9612E729D0547697C49F5C39F82882091036F158
Certificate serial:       2D534BCA55733441AAF9C55407EE7BBCB7FDEB72
Authority key identifier: 96:12:E7:29:D0:54:76:97:C4:9F:5C:39:F8:28:82:09:10:36:F1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9612E729D0547697C49F5C39F82882091036F158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/323830333a316235303a3a2f33322d3438203d3e20323733393134.roa
Signing time:             Wed 08 Jul 2026 04:51:27 +0000
ROA not before:           Wed 08 Jul 2026 04:46:27 +0000
ROA not after:            Wed 07 Jul 2027 04:51:27 +0000
asID:                     273914
IP address blocks:        2803:1b50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/9612E729D0547697C49F5C39F82882091036F158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/9612E729D0547697C49F5C39F82882091036F158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9612E729D0547697C49F5C39F82882091036F158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:53:4b:ca:55:73:34:41:aa:f9:c5:54:07:ee:7b:bc:b7:fd:eb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9612E729D0547697C49F5C39F82882091036F158
        Validity
            Not Before: Jul  8 04:46:27 2026 GMT
            Not After : Jul  7 04:51:27 2027 GMT
        Subject: CN=B19B7374A3BDBD30B0630B304C716F82A727D8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:c5:24:0f:23:62:37:26:7c:9a:59:d6:dc:
                    b9:6d:b0:fa:7e:48:96:68:24:19:de:72:10:1f:6c:
                    e8:86:2d:61:4f:ca:4e:2b:be:1a:83:4b:25:22:a1:
                    1a:76:03:20:f5:cb:8c:21:de:cb:0b:12:90:37:4f:
                    44:22:5b:16:6b:87:21:83:b6:7d:a5:8d:da:01:ae:
                    c4:8b:37:1e:1c:29:31:7a:9a:c2:c8:0e:2b:0b:9f:
                    4b:c6:03:a7:44:f8:b0:bb:a8:30:3c:c9:a1:a7:34:
                    b2:d6:0e:f6:6e:8d:2c:bc:64:23:1f:c5:db:0c:17:
                    d6:71:86:69:56:06:3c:22:28:84:49:32:67:cf:53:
                    af:44:2e:f5:f8:92:8d:ac:e6:00:8d:b5:7c:be:29:
                    ba:75:e2:ac:c6:cb:34:23:db:55:f9:3a:ee:db:d2:
                    ee:31:85:0a:51:c7:ac:fa:6f:6a:59:cb:9b:cb:91:
                    c4:4d:cf:f8:54:07:dc:17:27:02:e6:83:ae:f1:42:
                    9f:1e:2e:9a:83:3c:ab:96:85:92:73:ba:11:a6:c2:
                    97:1b:0d:e3:5c:bf:d4:05:a4:31:4a:17:1b:18:1a:
                    8c:f4:8e:87:f4:9d:64:57:31:46:f2:3c:2b:e0:d1:
                    87:42:34:63:82:99:d7:b6:94:90:50:8e:89:42:b4:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9B:73:74:A3:BD:BD:30:B0:63:0B:30:4C:71:6F:82:A7:27:D8:F0
            X509v3 Authority Key Identifier:
                keyid:96:12:E7:29:D0:54:76:97:C4:9F:5C:39:F8:28:82:09:10:36:F1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/9612E729D0547697C49F5C39F82882091036F158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9612E729D0547697C49F5C39F82882091036F158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07B339E8AA6F0FF061B6A76DFE986CB97BF8398BDD4C40166B51633577D40C88/0/323830333a316235303a3a2f33322d3438203d3e20323733393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:68:ad:eb:21:1d:da:62:cc:de:3b:d3:fe:a8:11:c2:52:fa:
         09:38:cc:38:b6:ab:78:c6:43:45:74:2c:04:50:65:60:bb:83:
         4d:84:1c:db:6e:77:93:5f:40:cf:29:35:16:3d:1d:d3:d8:a9:
         1f:87:9a:82:52:b4:86:ac:f1:c1:c4:a2:20:b5:50:ce:a8:6d:
         34:42:f7:a3:b4:53:33:6f:4b:5e:dc:b3:0c:4c:dc:1d:ba:92:
         c6:a6:fe:80:76:30:58:80:16:70:a3:30:62:f1:bf:16:dd:d9:
         7c:2e:f0:6b:ed:da:69:e1:07:7d:d7:8b:f5:36:08:58:f7:cb:
         68:ac:5b:ee:f7:87:7a:56:4f:d6:65:76:ee:e6:bc:c6:fe:da:
         12:b5:42:2a:b5:9a:e8:18:bb:16:20:af:25:31:ad:95:db:96:
         e4:09:ae:2d:40:69:da:71:4b:2a:bd:10:cf:22:9d:a3:0f:6e:
         13:b4:c1:8b:88:f4:42:a7:1d:7a:41:18:1d:3c:ca:ba:b7:da:
         da:d6:92:45:42:d7:89:f3:d1:5a:d5:48:7a:20:12:fe:0f:8e:
         5a:a5:57:7a:13:fe:38:5e:e7:94:f0:a3:3d:ae:35:27:38:71:
         37:d1:70:e2:0b:42:a4:7a:ab:38:88:d2:f4:d1:2b:ed:6e:69:
         fa:be:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:54 2026 by rpki-client