Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a313030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a313030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          C84tKiT8SX8PdNgaiwNlqlDAglk+TILeMGKpXVnhXbc=
Subject key identifier:   7E:60:86:92:AE:F2:C7:B4:26:C1:04:B5:8B:10:AF:86:9E:11:E2:4B
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       52E77073CA9F10EE1BD07A8CD551AC11423BF3B0
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a313030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:04 +0000
ROA not before:           Sat 01 Aug 2026 16:30:04 +0000
ROA not after:            Sat 31 Jul 2027 16:35:04 +0000
asID:                     274997
IP address blocks:        2803:c330:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e7:70:73:ca:9f:10:ee:1b:d0:7a:8c:d5:51:ac:11:42:3b:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:04 2026 GMT
            Not After : Jul 31 16:35:04 2027 GMT
        Subject: CN=7E608692AEF2C7B426C104B58B10AF869E11E24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:ed:63:00:4f:85:06:62:13:f3:07:02:f5:
                    0f:a7:b4:e8:a4:79:97:ae:3e:16:fc:dc:78:f8:9b:
                    41:47:e5:78:01:9b:23:71:26:34:50:e4:d7:c4:56:
                    63:47:e4:f4:47:3e:42:76:33:b3:71:26:c5:e9:fb:
                    a5:98:09:ae:e7:02:b8:10:6c:99:0b:0b:dc:c2:40:
                    d3:75:9c:9d:27:b2:c9:ee:34:ad:39:28:41:1c:77:
                    94:6f:21:4c:67:ac:28:dd:19:b7:13:36:c2:76:3f:
                    39:c4:6d:c4:ca:25:cd:0e:b9:c3:cf:8b:7c:d4:e4:
                    d8:c6:6b:06:80:04:f9:96:41:4a:8f:b5:63:38:ef:
                    0b:d9:19:b2:44:51:c8:53:06:ae:ac:87:25:51:fd:
                    cc:c2:3b:fd:2c:9c:ae:90:09:5b:2a:39:b9:61:86:
                    e2:86:88:4f:c7:7d:d6:15:55:1b:50:ee:1d:3a:aa:
                    2f:28:cd:54:d6:62:37:2d:89:94:65:58:73:ec:4e:
                    0d:9d:10:f6:a4:16:35:ce:5f:2e:a7:cc:bd:4a:ae:
                    46:17:0f:40:35:84:d5:2d:2d:89:dc:34:95:0b:5c:
                    08:80:32:01:da:b7:be:88:20:ae:0d:ba:14:c6:ec:
                    b4:f9:9c:24:f2:e4:09:03:e9:23:5e:ab:47:e9:4b:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:86:92:AE:F2:C7:B4:26:C1:04:B5:8B:10:AF:86:9E:11:E2:4B
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a313030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:54:c7:d4:47:98:a3:06:4a:7b:cc:22:42:6a:c6:a4:d1:49:
         5d:44:85:0b:52:dd:b3:69:dc:78:c3:48:e8:2d:d5:29:f0:04:
         fa:33:12:ab:01:d7:c0:52:b7:86:6b:50:f1:d5:ed:44:7a:5a:
         6b:7f:2c:38:44:eb:12:2a:2d:a3:92:8b:f3:2d:ed:ad:e7:c9:
         0d:2a:fc:a1:42:c6:e5:ce:f8:9a:7b:a2:9c:3f:48:60:ab:34:
         e9:84:d6:d5:20:a1:e1:b9:94:3f:21:c2:73:eb:6a:dc:ec:be:
         c2:46:1a:17:04:e8:7a:3a:34:ce:21:fc:41:ec:6b:b1:dc:00:
         00:2f:f6:37:db:cd:af:0a:ec:af:7e:ea:7e:7e:1e:05:ef:36:
         09:b3:51:ec:91:41:18:35:f3:dc:35:df:c0:fb:97:f1:72:a7:
         5e:2d:59:39:78:b2:e2:59:10:0d:44:46:f0:80:bc:dc:c3:72:
         2f:fc:00:60:5f:57:28:ed:dc:af:23:eb:2b:25:a1:7a:73:9b:
         69:e9:19:77:03:27:75:28:66:9b:2b:13:37:a0:54:23:1a:5d:
         78:96:2f:b2:d4:af:24:7a:89:a4:e6:0b:26:44:50:db:67:72:
         2d:ea:15:1f:37:ae:7e:d2:a0:47:8c:b6:12:41:52:06:ae:64:
         74:a9:9e:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:21 2026 by rpki-client