Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a633030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a633030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          RriMIjYy6/WG1txkV/tR2n9YvDdvkEjbGHFdnPPx6bg=
Subject key identifier:   97:D1:A5:8C:67:05:C2:94:56:E5:BB:C6:93:61:59:FF:61:0C:C1:9A
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       05995CF22C88146156202D5E1753796884B2D04D
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a633030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:03 +0000
ROA not before:           Sat 01 Aug 2026 16:30:03 +0000
ROA not after:            Sat 31 Jul 2027 16:35:03 +0000
asID:                     274997
IP address blocks:        2803:c330:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:5c:f2:2c:88:14:61:56:20:2d:5e:17:53:79:68:84:b2:d0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:03 2026 GMT
            Not After : Jul 31 16:35:03 2027 GMT
        Subject: CN=97D1A58C6705C29456E5BBC6936159FF610CC19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:a4:70:5e:6b:e5:ca:70:da:b0:72:64:2b:
                    33:80:7f:ba:06:0e:dc:7b:da:36:40:6a:6f:bc:5e:
                    a2:b9:bd:d3:bb:69:ed:e8:90:ab:e5:47:50:9e:43:
                    db:66:ea:3b:a6:b6:7d:63:45:18:a6:5b:06:46:54:
                    27:a9:39:7f:5f:02:72:96:cc:db:6d:6a:59:d9:f0:
                    19:61:5f:d1:da:9a:36:1b:61:16:16:86:f3:12:d4:
                    5f:dc:06:92:69:7b:df:ac:1d:e1:63:c7:f9:7f:10:
                    00:4d:67:ec:28:3b:51:15:39:5f:94:4e:8f:b9:ce:
                    fd:00:5e:b2:27:c2:24:b2:00:f0:a1:7b:97:b9:75:
                    83:47:be:ad:80:b4:3d:b3:b4:ea:a6:f6:39:f7:e4:
                    2e:78:39:0d:6e:5f:45:a8:e7:44:ce:42:cd:c9:1b:
                    50:99:d5:a4:df:1a:70:bd:cf:db:e0:bc:74:b0:e9:
                    0f:a7:4a:68:26:a6:02:23:31:7a:5a:3f:2d:6f:45:
                    da:c6:2b:c5:d0:58:00:d5:b2:39:5a:e6:55:7a:51:
                    2f:f3:fc:88:8e:94:4c:d9:ab:10:70:a7:54:31:de:
                    a3:b7:5a:3f:dc:6f:62:ac:59:49:81:8e:14:10:7a:
                    dd:c1:a5:36:27:06:21:bd:e4:18:68:d2:42:7f:75:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:A5:8C:67:05:C2:94:56:E5:BB:C6:93:61:59:FF:61:0C:C1:9A
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a633030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:ef:e1:18:ca:6b:64:2c:9c:f8:45:a8:44:73:dd:52:c2:
         e1:6e:79:ba:7e:1d:dc:db:94:77:73:f8:b1:75:89:ec:7e:15:
         41:20:da:c6:72:13:84:42:38:28:35:b8:36:e3:c1:a6:a3:7d:
         90:0e:77:b9:e5:03:8e:74:f3:40:db:76:b1:cc:b6:33:e2:13:
         d3:75:3a:0c:4a:1e:3b:14:f5:42:69:32:58:08:5c:fc:73:42:
         df:1a:d9:9d:3a:22:92:23:6d:f1:0a:a7:77:f8:68:cd:38:9b:
         fa:56:78:66:f7:50:4e:cc:e7:de:c2:1e:5f:99:f8:30:8d:70:
         7c:70:d0:3d:42:9c:09:5a:c4:97:fe:bb:45:75:ee:49:e9:fd:
         cd:59:9a:c0:2d:63:a2:36:25:78:15:7c:34:69:a6:66:2a:1d:
         b3:42:83:86:80:38:cc:b3:33:39:8d:07:6c:46:87:37:74:18:
         b1:df:72:e5:c3:aa:51:33:3e:23:38:f4:78:34:ab:2b:91:a2:
         0e:38:0e:4c:ff:54:40:9c:38:f0:b3:e2:b7:57:f7:b2:fa:07:
         db:4f:8b:72:16:6f:4d:0a:3c:38:59:79:24:06:bb:59:ff:a4:
         46:98:39:08:19:f2:1e:49:a4:06:28:58:a2:e4:56:08:7a:e6:
         c8:51:38:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:15 2026 by rpki-client