Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a313030303a3a2f34382d3438203d3e20323639393630.roa
File:                     323830333a343263303a313030303a3a2f34382d3438203d3e20323639393630.roa (raw, json)
Hash identifier:          MJbHKOofY/S+ATEgxxUCUtaQiRuJaOGAwNLqiAuHxUA=
Subject key identifier:   4D:48:CB:84:44:DF:10:B1:18:53:34:6D:7C:A9:8A:3A:BA:A6:F0:0F
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       683D12B35C213D63C7B537A10AD459DDBDB4AB49
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a313030303a3a2f34382d3438203d3e20323639393630.roa
Signing time:             Wed 24 Jun 2026 15:49:27 +0000
ROA not before:           Wed 24 Jun 2026 15:44:27 +0000
ROA not after:            Wed 23 Jun 2027 15:49:27 +0000
asID:                     269960
IP address blocks:        2803:42c0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:12:b3:5c:21:3d:63:c7:b5:37:a1:0a:d4:59:dd:bd:b4:ab:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Jun 24 15:44:27 2026 GMT
            Not After : Jun 23 15:49:27 2027 GMT
        Subject: CN=4D48CB8444DF10B11853346D7CA98A3ABAA6F00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:be:db:a9:de:fd:76:76:a9:89:66:e2:68:
                    03:b6:30:a0:1c:5c:69:43:79:d9:83:a0:62:7e:6a:
                    02:08:8d:69:73:11:bf:3c:7c:45:84:cc:d4:9a:c8:
                    3f:49:55:f8:af:81:7d:71:2b:65:5f:6a:2a:61:c1:
                    5c:27:7a:9a:e2:7f:2e:52:10:2a:a8:68:00:34:ca:
                    59:7d:0a:d4:45:42:61:1f:bb:28:8b:1c:91:a9:cc:
                    cc:c0:a2:65:02:20:01:b0:81:06:21:27:e8:23:3e:
                    b4:9c:bd:a7:2a:eb:6b:22:03:f7:57:87:91:82:e8:
                    92:3f:9d:ea:19:f6:bd:33:d3:0f:c9:0b:ab:54:1e:
                    07:b6:e3:5f:32:7f:70:32:dc:ad:22:18:a2:b5:bc:
                    b7:69:5f:99:27:a4:07:1c:98:83:f1:96:12:34:0c:
                    a9:5c:59:d3:0b:11:d9:3c:44:27:44:b1:46:80:4c:
                    be:62:4f:6c:69:36:9f:4e:ab:e1:da:da:cf:89:95:
                    c2:af:30:6b:04:1c:a4:d2:94:06:62:89:c8:bb:72:
                    6d:ea:75:be:57:31:ab:ba:fa:bf:2e:ed:e1:06:fd:
                    aa:0b:1c:0f:9e:92:9c:94:35:54:e6:57:6a:f2:de:
                    c0:ab:e4:94:5f:9b:05:00:60:85:4a:42:fa:a8:0b:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:CB:84:44:DF:10:B1:18:53:34:6D:7C:A9:8A:3A:BA:A6:F0:0F
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a313030303a3a2f34382d3438203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42c0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:96:28:12:e6:e6:06:c5:d1:54:88:62:a1:76:a9:9c:c2:95:
         b9:b2:ae:6c:db:09:44:44:93:d2:83:b2:09:cc:33:1e:1f:62:
         5a:3a:29:ac:9d:b3:ee:f1:6b:8b:19:69:ae:1b:84:1e:b6:e9:
         3b:3b:f9:92:aa:c4:03:73:bd:a1:8c:7e:06:26:2a:f1:ab:13:
         53:73:bd:2c:40:2c:a5:b7:5c:4e:1a:12:4f:4d:cc:91:38:77:
         0e:16:fe:56:84:0c:94:84:fa:47:a4:e6:09:7b:0e:95:26:4f:
         fe:de:3c:0a:eb:2b:b7:d7:c8:c2:99:4b:1b:ca:1e:0b:7b:67:
         9a:a2:0e:03:ae:10:51:a8:a0:99:42:c4:ed:71:49:3f:52:ab:
         b8:e0:99:6a:66:53:a7:ad:4b:78:94:8c:33:ad:38:f2:f8:70:
         81:09:ac:aa:1c:05:d9:90:17:63:ff:f5:51:fe:17:44:87:32:
         6d:4e:1a:69:1b:e6:5e:e2:d1:3f:6a:06:6f:55:59:bd:76:18:
         24:ae:46:a1:8e:8a:c1:7d:3a:3f:da:c8:78:e1:b0:fa:d5:6e:
         ea:e3:ad:73:64:e0:b1:4e:6f:dd:86:13:33:3f:bb:ca:dd:c4:
         9b:9b:01:52:03:c1:d0:ae:a6:67:c8:31:47:93:1a:6d:3b:20:
         ff:a9:05:66
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUaD0Ss1whPWPHtTehCtRZ3b20q0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCMjJCRkYzQTVFNUQwN0M4OTJEQTQ0RkMwNTY3RTg5
OUU4Q0ZGOTAeFw0yNjA2MjQxNTQ0MjdaFw0yNzA2MjMxNTQ5MjdaMDMxMTAvBgNV
BAMTKDRENDhDQjg0NDRERjEwQjExODUzMzQ2RDdDQTk4QTNBQkFBNkYwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvu77bqd79dnapiWbiaAO2MKAc
XGlDedmDoGJ+agIIjWlzEb88fEWEzNSayD9JVfivgX1xK2VfaiphwVwneprify5S
ECqoaAA0yll9CtRFQmEfuyiLHJGpzMzAomUCIAGwgQYhJ+gjPrScvacq62siA/dX
h5GC6JI/neoZ9r0z0w/JC6tUHge2418yf3Ay3K0iGKK1vLdpX5knpAccmIPxlhI0
DKlcWdMLEdk8RCdEsUaATL5iT2xpNp9Oq+Ha2s+JlcKvMGsEHKTSlAZiici7cm3q
db5XMau6+r8u7eEG/aoLHA+ekpyUNVTmV2ry3sCr5JRfmwUAYIVKQvqoC6jVAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUTUjLhETfELEYUzRtfKmKOrqm8A8wHwYDVR0j
BBgwFoAUfrIr/zpeXQfIktpE/AVn6Jnoz/kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkIyQjg2Q0FFMjA5Rjc1RjU4N0M3NUY1MzdBQzA1ODA2
M0QxODIzMDFCNzI4NkI2MjExREFGNTI3REJGMzkwLzAvN0VCMjJCRkYzQTVFNUQw
N0M4OTJEQTQ0RkMwNTY3RTg5OUU4Q0ZGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RUIyMkJGRjNBNUU1RDA3Qzg5
MkRBNDRGQzA1NjdFODk5RThDRkY5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0JCMkI4NkNBRTIwOUY3NUY1ODdDNzVGNTM3QUMwNTgwNjNEMTgyMzAx
QjcyODZCNjIxMURBRjUyN0RCRjM5MC8wLzMyMzgzMDMzM2EzNDMyNjMzMDNhMzEz
MDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzkzOTM2MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA0LAEAAwDQYJKoZIhvcNAQELBQADggEBAIeWKBLm5gbF0VSIYqF2qZzC
lbmyrmzbCUREk9KDsgnMMx4fYlo6Kayds+7xa4sZaa4bhB626Ts7+ZKqxANzvaGM
fgYmKvGrE1NzvSxALKW3XE4aEk9NzJE4dw4W/laEDJSE+kek5gl7DpUmT/7ePArr
K7fXyMKZSxvKHgt7Z5qiDgOuEFGooJlCxO1xST9Sq7jgmWpmU6etS3iUjDOtOPL4
cIEJrKocBdmQF2P/9VH+F0SHMm1OGmkb5l7i0T9qBm9VWb12GCSuRqGOisF9Oj/a
yHjhsPrVburjrXNk4LFOb92GEzM/u8rdxJubAVIDwdCupmfIMUeTGm07IP+pBWY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:07:14 2026 by rpki-client