Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a663030303a3a2f33362d3336203d3e20323734393937.roa
File:                     323830333a633333303a663030303a3a2f33362d3336203d3e20323734393937.roa (raw, json)
Hash identifier:          oMBj8ir+oNPrhDc66ZFghLx1HWuq9xCfliGHlONMY0Y=
Subject key identifier:   17:47:6D:BA:4C:EB:70:B9:2F:CF:C5:BA:9E:BD:7B:C8:BB:78:D3:72
Certificate issuer:       /CN=7148D4BF4870749ECBB254193F947D17876EE3F5
Certificate serial:       11524431E9A70FFB7452179C2CDE8DBA25239B2F
Authority key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a663030303a3a2f33362d3336203d3e20323734393937.roa
Signing time:             Sat 01 Aug 2026 16:35:01 +0000
ROA not before:           Sat 01 Aug 2026 16:30:01 +0000
ROA not after:            Sat 31 Jul 2027 16:35:01 +0000
asID:                     274997
IP address blocks:        2803:c330:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:44:31:e9:a7:0f:fb:74:52:17:9c:2c:de:8d:ba:25:23:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7148D4BF4870749ECBB254193F947D17876EE3F5
        Validity
            Not Before: Aug  1 16:30:01 2026 GMT
            Not After : Jul 31 16:35:01 2027 GMT
        Subject: CN=17476DBA4CEB70B92FCFC5BA9EBD7BC8BB78D372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:df:fa:ae:e5:43:32:bd:f4:3a:82:c5:44:
                    97:f5:ae:32:d4:6d:dc:4e:4d:67:e2:e0:45:f9:2e:
                    a7:8e:6c:74:ef:ea:4a:c3:e1:6e:3c:96:df:6b:d3:
                    d9:32:0a:06:31:5c:92:11:b1:b0:c7:d8:4c:1e:aa:
                    42:a0:ba:81:21:f8:7e:c9:a1:49:bb:50:06:f4:70:
                    6b:a0:55:4d:bf:36:20:d8:f0:91:07:58:34:8a:93:
                    ff:cf:3c:28:2c:55:a8:ad:3c:b0:f0:29:86:9f:b0:
                    c2:d2:ed:e1:64:f1:8a:fc:59:8b:79:73:38:a6:0e:
                    f0:00:e2:8e:1a:52:dd:63:14:ea:6a:fa:ab:f0:00:
                    5c:0f:1e:48:77:f2:ec:e3:39:e4:8a:f8:0d:f0:e4:
                    20:0c:e0:d4:77:46:8b:e6:7d:0a:17:79:33:fb:c4:
                    9f:92:49:6d:78:bc:78:c3:bc:60:10:35:65:1a:65:
                    80:cd:2b:51:7c:1a:b6:48:27:b4:87:15:fe:93:3b:
                    72:31:84:2b:1d:d4:95:9b:82:d4:e3:84:a6:af:29:
                    03:da:e1:74:26:ac:7f:56:5b:0f:09:1e:42:12:85:
                    2b:fc:1c:6a:10:09:95:22:1c:86:03:21:bc:ab:ae:
                    f9:aa:b9:79:2a:ff:53:9a:de:b1:0a:c4:b7:6b:52:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:6D:BA:4C:EB:70:B9:2F:CF:C5:BA:9E:BD:7B:C8:BB:78:D3:72
            X509v3 Authority Key Identifier:
                keyid:71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/323830333a633333303a663030303a3a2f33362d3336203d3e20323734393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c330:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:32:70:01:d8:da:97:e6:ee:be:15:33:d3:84:5b:5f:c0:
         61:d5:73:85:1e:81:cd:05:b5:86:d4:2c:68:1d:7d:2a:5e:6d:
         87:a9:0f:77:35:59:c6:de:3d:a3:1c:bd:71:fc:20:dc:77:7a:
         22:c6:c5:3d:95:87:2d:a1:b8:61:03:d2:c3:ae:e1:50:a6:31:
         a2:78:75:13:d0:f2:38:bf:cf:c9:20:a9:5c:d2:66:33:f7:7b:
         0c:17:c8:69:ed:3b:f2:2d:69:0c:99:ec:cc:23:a9:d9:a3:d1:
         61:ce:5f:02:66:68:ad:67:7a:1d:95:07:48:0e:ff:71:0a:7b:
         75:d9:fa:04:00:df:b9:98:5c:46:bb:df:7f:9d:3b:ff:fb:7c:
         12:77:5d:7e:35:07:e1:f6:d6:fc:8c:ba:bb:4b:bd:ca:9c:2c:
         13:0e:6c:ab:9c:e2:bb:f7:76:08:41:71:2c:6d:35:79:d9:a9:
         94:fe:7c:7e:aa:3e:d9:18:54:9d:e4:8f:fc:2c:d4:85:9d:0b:
         ba:8c:ab:ce:96:89:4f:fb:00:69:eb:ca:36:ae:d9:37:70:94:
         56:8b:72:4c:f5:55:ef:67:79:95:1b:fd:6b:99:31:8a:86:26:
         7b:3d:68:fc:17:53:2e:f5:79:6e:46:e2:15:92:02:a8:71:80:
         23:22:8f:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 15:53:23 2026 by rpki-client