Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a323030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a323030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          mTuYPVpicxnZlChDU5UbE/5pYN0o51KGN1XO7+meAgs=
Subject key identifier:   2C:93:1B:B2:32:27:5F:5B:4C:4A:2D:AF:33:D8:F1:B5:24:6B:27:6E
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       2CEE74B8E99E1A366396F2107639E26903116275
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a323030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:00 +0000
ROA not before:           Sat 01 Aug 2026 16:30:00 +0000
ROA not after:            Sat 31 Jul 2027 16:35:00 +0000
asID:                     274997
IP address blocks:        2803:c330:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:74:b8:e9:9e:1a:36:63:96:f2:10:76:39:e2:69:03:11:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:00 2026 GMT
            Not After : Jul 31 16:35:00 2027 GMT
        Subject: CN=2C931BB232275F5B4C4A2DAF33D8F1B5246B276E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:8a:64:4d:44:61:28:41:53:1d:65:e7:6d:
                    04:ef:16:3d:49:f5:04:66:93:14:24:e3:1b:9f:06:
                    4f:e0:8b:7a:1e:8d:7b:ab:6a:8b:e8:e0:48:b0:ba:
                    8a:fe:55:91:01:b0:a7:32:c2:3b:6e:60:53:1f:39:
                    14:66:4b:91:06:e2:a8:7f:c7:7d:42:82:ee:d7:88:
                    da:21:c3:ec:08:4a:4d:60:e8:e1:18:8d:c7:c4:ac:
                    55:2b:ee:2b:49:ba:38:6a:06:56:1d:e5:42:5b:dc:
                    33:90:5d:d3:34:b4:77:bd:d4:7c:83:fd:a1:88:eb:
                    c8:95:e3:8e:79:3e:1e:1b:1a:58:1a:d2:85:e7:70:
                    f5:10:84:34:df:01:73:85:99:ea:ee:bb:69:07:2a:
                    05:9d:45:b6:bc:48:e4:ff:76:8e:7d:a8:c2:6e:73:
                    c1:46:16:7c:9c:57:82:33:e7:62:5c:9a:de:1a:61:
                    25:f1:29:be:36:cb:5d:02:3e:1d:92:bb:6d:6f:4e:
                    e8:f3:2e:b5:6b:49:49:48:3e:5e:49:5b:ed:00:ce:
                    0a:4b:ea:14:78:9a:e3:15:32:27:c6:00:ec:7b:b5:
                    a7:f8:dd:88:92:a1:84:e6:af:18:74:3c:dd:6a:3f:
                    df:a1:fa:d8:ae:f9:b6:95:c5:68:01:23:de:b3:26:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:1B:B2:32:27:5F:5B:4C:4A:2D:AF:33:D8:F1:B5:24:6B:27:6E
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a323030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:93:fd:83:1a:55:24:97:67:e4:cb:2a:9d:17:1d:e6:ce:
         84:9b:4d:e1:29:49:92:e2:12:6e:4c:b2:0f:0c:fb:31:10:88:
         8a:a3:1f:9b:8a:b3:5c:65:a4:39:25:62:8e:d7:6e:ad:47:6e:
         77:ab:02:87:7f:59:8c:48:54:f9:09:c2:20:4e:62:ee:4a:ef:
         ef:54:a9:01:17:2d:56:4d:5d:3c:15:39:68:6d:4c:19:83:c5:
         f1:89:3e:49:47:2c:01:a1:68:ec:c2:6b:0a:5b:fb:85:12:33:
         b9:a3:14:ce:bb:2f:1a:89:72:09:c3:96:a9:65:59:c0:e1:5f:
         f6:6b:2c:ce:0c:7c:8d:15:a0:fc:c7:0d:3b:8a:8a:1a:1c:d9:
         00:7d:5d:88:92:44:2b:70:ae:5e:d6:42:65:5c:56:75:76:8c:
         a7:9d:2c:48:16:29:88:56:81:b1:95:b8:5f:c4:18:10:5a:0f:
         6d:dc:5e:ef:31:b0:5b:9e:c4:5d:cb:27:8a:cb:cc:d3:ed:52:
         06:0b:64:44:eb:40:a8:da:d9:00:d8:82:38:38:5d:2b:42:41:
         14:b8:4f:03:b6:91:5d:a5:10:c5:90:b7:d5:02:a2:09:5f:71:
         2f:a5:31:ab:b8:77:da:42:ef:3b:d7:76:e7:92:ff:13:56:72:
         4a:78:6d:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:06 2026 by rpki-client