Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a333030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a333030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          W6unYUpOqfYWKy6AuKFDLD3q5uaKNIQ4d6mN95r7vUw=
Subject key identifier:   0A:7B:22:4B:F6:E1:24:D0:3C:49:F8:0F:2B:60:35:BB:45:5D:10:F9
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       25E7F236058B568B5810BFBEB7EF5BC628723EB4
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a333030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:00 +0000
ROA not before:           Sat 01 Aug 2026 16:30:00 +0000
ROA not after:            Sat 31 Jul 2027 16:35:00 +0000
asID:                     274997
IP address blocks:        2803:c330:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:f2:36:05:8b:56:8b:58:10:bf:be:b7:ef:5b:c6:28:72:3e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:00 2026 GMT
            Not After : Jul 31 16:35:00 2027 GMT
        Subject: CN=0A7B224BF6E124D03C49F80F2B6035BB455D10F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:2d:1a:8c:cb:8e:a2:e1:45:63:40:f2:4d:
                    4d:2d:1b:76:d9:b0:59:1e:34:31:a9:e7:d2:f3:75:
                    36:da:7c:15:7e:de:9f:72:0e:fc:ce:99:d8:e6:a4:
                    57:28:f3:bc:7e:af:86:ea:6f:80:d1:e6:4c:1c:9e:
                    c9:3f:2d:7e:d4:fe:bb:20:dc:1a:8a:f5:e0:4e:89:
                    95:6f:4a:99:10:e2:59:f0:2f:29:af:c0:f0:36:8b:
                    b4:99:5c:98:ac:f2:1f:84:7e:6c:bb:f3:70:e8:a2:
                    90:89:9d:d8:8a:97:e2:3f:36:fb:03:7e:3e:08:ea:
                    b9:f5:86:a7:ea:de:11:b5:1e:1a:24:0f:6a:41:f7:
                    ef:0f:fa:3f:54:b4:4e:6b:f9:6b:3c:af:1b:f3:be:
                    5f:96:8e:0e:e4:85:07:26:6d:ca:ab:0b:08:61:ef:
                    99:33:35:a6:fd:cf:90:9a:d0:8e:73:f7:79:1f:00:
                    de:09:1c:3b:3a:fa:36:5e:a7:6a:6c:6a:19:be:97:
                    07:37:59:97:9a:07:a2:21:d9:55:34:fa:e6:c0:62:
                    c5:e6:3c:66:63:94:26:5c:18:84:19:24:4c:bb:c4:
                    64:31:0e:e8:e9:1d:a3:20:84:f8:cc:19:85:a7:2d:
                    11:51:3a:50:a5:8d:0e:da:de:4d:77:ed:69:13:39:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:22:4B:F6:E1:24:D0:3C:49:F8:0F:2B:60:35:BB:45:5D:10:F9
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a333030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:7e:4b:51:1a:e1:69:8b:15:3b:d7:dd:b9:ba:96:7a:36:
         17:1b:03:5d:ee:d6:90:2c:b6:64:f8:f1:dc:88:f8:a4:9e:a6:
         37:19:d6:40:73:2e:a2:8c:6e:c6:a5:d8:b8:a1:df:f4:e3:29:
         5c:6a:12:31:dd:2c:83:c3:a3:d4:d0:95:cb:ab:12:a7:88:5e:
         19:cb:76:c2:55:4f:c3:9a:72:e2:68:c4:68:f1:f1:3a:c7:b1:
         33:ef:c0:49:b4:40:e1:ba:b9:14:e0:30:b8:5d:4b:3a:ad:7c:
         28:42:8f:d2:54:00:5c:93:fe:80:92:89:91:7f:0b:7f:eb:1d:
         a2:98:ab:75:c8:b0:34:3b:78:e6:74:9d:0e:0f:d4:ed:be:ce:
         f3:d6:4e:e4:d0:f2:c3:a4:ee:e3:ea:0a:94:17:c9:b0:6e:16:
         ac:ae:da:dc:44:96:15:8e:4a:dc:0d:a3:7c:1e:16:6b:52:6f:
         10:de:0f:fa:a3:08:42:05:35:65:32:a9:e9:83:c5:11:a3:dd:
         84:63:e1:92:ca:d9:df:df:86:6c:0e:24:eb:e7:6a:1f:ff:9a:
         59:6c:64:b2:27:86:cd:7b:57:c4:28:e2:79:32:41:ff:c4:53:
         7f:29:37:de:60:e8:34:c9:1f:1b:90:bb:ac:28:a4:1e:d4:08:
         28:29:5e:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:09 2026 by rpki-client