Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a373030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a373030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          8IRsIW7KXf38wpGNpCimDV73nAETe0ror2OMmeFMtdg=
Subject key identifier:   52:43:05:D7:13:A4:09:70:B0:DE:95:11:45:36:31:3A:5C:01:D8:6F
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       36C7D49D9A93CB87F1F4BA7A60DBDA8DFF474EE3
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a373030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:04 +0000
ROA not before:           Sat 01 Aug 2026 16:30:04 +0000
ROA not after:            Sat 31 Jul 2027 16:35:04 +0000
asID:                     274997
IP address blocks:        2803:c330:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:d4:9d:9a:93:cb:87:f1:f4:ba:7a:60:db:da:8d:ff:47:4e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:04 2026 GMT
            Not After : Jul 31 16:35:04 2027 GMT
        Subject: CN=524305D713A40970B0DE95114536313A5C01D86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0b:f3:09:31:16:6d:7c:60:6e:6d:fb:bc:ab:
                    d7:db:56:4f:78:ee:8a:61:48:7a:a8:8f:f3:bf:64:
                    61:ad:0e:a0:10:dc:54:fe:a4:c5:1a:36:91:9d:4d:
                    02:e6:75:b0:32:57:4e:29:92:fb:3d:77:0c:77:57:
                    af:7b:50:d1:97:9a:4f:5f:81:14:63:66:d3:e1:c3:
                    2d:49:0c:43:05:c1:38:65:ca:dd:49:71:2b:a5:c2:
                    1d:d6:6f:29:79:4a:63:19:28:4e:7f:86:14:f8:ef:
                    e3:d1:2a:8b:e2:16:d8:dc:96:29:3c:4d:c4:1d:16:
                    6c:ba:8c:97:aa:73:ed:1f:de:84:68:9c:c6:c6:66:
                    c9:c9:9f:06:84:28:86:70:a4:72:5c:1c:54:a7:65:
                    20:bc:76:4d:50:5f:53:8c:98:d5:b3:f5:ab:f4:6d:
                    9b:4b:bc:74:a9:af:70:3c:47:d4:df:4e:e6:8a:7b:
                    a6:fa:68:d7:cb:c0:d1:98:db:60:01:55:f5:0f:4e:
                    76:ce:d6:ff:b4:40:df:ce:7b:ee:15:dd:d4:7a:1b:
                    f3:7f:4a:0c:71:bd:50:60:ae:9a:e0:ad:9c:0c:fa:
                    cd:9e:80:cf:5e:0c:66:3a:3d:81:3b:9f:f4:e9:4b:
                    38:86:12:9e:81:72:6b:d6:2a:47:55:e2:d5:bc:dd:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:05:D7:13:A4:09:70:B0:DE:95:11:45:36:31:3A:5C:01:D8:6F
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a373030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:5c:f4:dc:40:6a:fa:82:f0:bc:80:98:4a:73:8f:61:37:
         4a:70:9f:50:c4:ae:a0:6f:e3:9c:01:40:d2:50:5e:1b:a4:ed:
         3a:a8:fc:16:ea:ad:e8:b2:91:ea:cd:64:17:68:4a:8d:ee:30:
         f3:9b:67:91:20:bd:9f:5a:0d:96:cd:0d:87:e1:b1:82:61:da:
         06:54:9b:36:97:fa:62:33:18:56:13:af:77:3d:60:2e:88:9d:
         4e:a7:e5:86:64:b1:93:be:90:7a:ba:b5:6c:9b:09:55:d5:25:
         bf:72:01:fe:60:de:62:c2:48:58:a4:6a:48:55:c5:08:24:df:
         eb:ce:cd:6e:2a:0d:94:45:a5:2c:42:a2:1c:dd:4f:cb:41:58:
         1f:5b:3a:ce:31:c3:27:e9:93:69:c6:12:8a:40:6e:f2:9f:23:
         61:d0:be:b2:89:c4:70:92:28:5e:aa:a7:2e:f9:e5:b7:58:70:
         d0:40:f1:25:8b:dd:b0:a3:40:ba:2b:ad:0c:5a:99:e3:4e:97:
         2c:b3:e7:66:75:1c:8f:da:3d:eb:ba:9b:da:1e:f0:15:ed:f6:
         71:e7:9c:2a:ab:47:96:88:a0:6f:ef:a7:08:2d:18:0b:d8:dc:
         a7:ee:02:52:e1:83:ff:29:45:e4:fb:3b:a4:71:81:89:12:f3:
         f7:f4:f1:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:50 2026 by rpki-client