Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a333030303a3a2f34382d3438203d3e20323639393630.roa
File:                     323830333a343263303a333030303a3a2f34382d3438203d3e20323639393630.roa (raw, json)
Hash identifier:          2crhW+ubmB/F0v/zHlOhvEQzYZ+TjHwX7FzDdjypOU0=
Subject key identifier:   EE:B5:4A:4D:EE:06:A6:73:9C:18:F8:23:CD:95:9B:A5:6D:79:B0:2D
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       4E8411CF89CCC6F43C53B5D004746F8E2BC01B2B
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a333030303a3a2f34382d3438203d3e20323639393630.roa
Signing time:             Wed 24 Jun 2026 20:49:33 +0000
ROA not before:           Wed 24 Jun 2026 20:44:33 +0000
ROA not after:            Wed 23 Jun 2027 20:49:33 +0000
asID:                     269960
IP address blocks:        2803:42c0:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:84:11:cf:89:cc:c6:f4:3c:53:b5:d0:04:74:6f:8e:2b:c0:1b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Jun 24 20:44:33 2026 GMT
            Not After : Jun 23 20:49:33 2027 GMT
        Subject: CN=EEB54A4DEE06A6739C18F823CD959BA56D79B02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e3:ae:4f:a7:75:f7:18:4a:75:cd:4c:99:02:
                    b0:4c:c6:08:cd:18:87:27:66:53:71:4e:7f:6e:22:
                    82:91:7a:6d:a3:29:79:6c:1d:55:2b:b7:47:76:53:
                    30:24:51:a4:63:9e:4b:92:a7:a1:fd:fa:dc:e5:0e:
                    d9:9f:35:d9:f9:0b:0b:d7:dc:7d:d0:12:ab:75:f2:
                    94:ef:1b:23:00:e9:6d:48:8c:2e:8f:b8:5f:30:ff:
                    88:57:e1:68:1e:47:70:de:64:4a:a5:06:80:3f:fe:
                    16:51:9c:54:76:21:64:95:0c:80:9e:f8:45:4a:ae:
                    1f:29:c8:39:f2:74:9a:d2:1e:a0:ca:97:af:01:f1:
                    0f:6a:a3:e1:3c:f3:a1:5a:44:f0:6b:82:96:0a:2c:
                    0a:4d:f4:38:d9:df:11:3d:53:19:0c:a0:af:42:69:
                    04:78:e1:78:fc:0a:56:62:14:58:c8:71:e3:f7:f5:
                    1e:36:28:8d:88:6d:bb:ec:d9:dd:09:49:c2:0b:92:
                    5d:ef:1f:c8:c4:e3:c2:58:48:6d:91:0c:71:96:49:
                    b8:c3:28:94:07:29:6a:db:00:c3:d9:75:68:f7:1c:
                    0b:23:9d:ac:b0:10:5f:30:fa:11:61:48:49:44:35:
                    b2:23:55:ab:7a:4f:8d:5c:3f:f6:d8:73:d6:0f:4d:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:4A:4D:EE:06:A6:73:9C:18:F8:23:CD:95:9B:A5:6D:79:B0:2D
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/323830333a343263303a333030303a3a2f34382d3438203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42c0:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:13:77:c4:eb:22:d2:81:05:6b:6a:6f:60:5b:14:78:b7:bd:
         70:89:63:41:42:25:f0:9f:63:66:2c:a9:d3:be:d7:3f:be:70:
         28:72:f1:53:6f:42:75:77:63:28:c4:3a:04:4d:63:d0:76:01:
         12:b7:31:d0:ae:4f:46:d1:5f:dc:13:d0:26:29:c3:ff:7f:1e:
         a0:7a:96:ee:4c:8f:92:ed:19:eb:ef:e4:d6:66:5b:6b:ac:82:
         e4:fd:a6:60:3a:f9:c1:ed:df:7c:f8:e2:05:b9:d8:e8:79:f7:
         bc:f2:02:20:c1:79:c7:c6:e2:1d:76:a6:0a:b9:cd:e5:9f:7a:
         29:4d:68:8a:cb:c8:27:d4:b4:af:5a:c8:3c:e2:46:61:58:6d:
         ea:60:cb:7f:3d:2b:37:16:dd:c2:dd:64:97:a7:70:aa:83:d5:
         0c:a5:46:b2:50:f7:cc:27:b1:a7:4d:41:cc:2f:0d:37:7b:16:
         1a:c7:07:89:9a:35:63:24:08:fb:aa:f6:c4:7b:3d:cc:68:1d:
         f3:45:a6:41:22:9d:9f:41:bd:32:ec:64:b2:62:5d:2e:1e:23:
         2d:77:65:00:a4:68:50:d0:0d:94:a0:97:00:48:08:2e:47:1d:
         50:65:fa:f9:fc:9f:ad:a5:01:e8:b4:fd:51:93:78:c1:42:65:
         02:5b:7e:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:07:13 2026 by rpki-client