Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa
File:                     323830333a376430303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          ubad2wRycZL+to6OrfzLDeWR+UbIPrMK35Aisbky6K8=
Subject key identifier:   37:DB:CC:56:83:00:92:36:50:5F:FA:EB:B3:B4:EC:DD:CA:24:71:74
Certificate issuer:       /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial:       7A8A8B971B5FC7332E8CD4D55A439FCB17C4212D
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa
Signing time:             Fri 31 Jul 2026 22:19:25 +0000
ROA not before:           Fri 31 Jul 2026 22:14:25 +0000
ROA not after:            Fri 30 Jul 2027 22:19:25 +0000
asID:                     0
IP address blocks:        2803:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:8b:97:1b:5f:c7:33:2e:8c:d4:d5:5a:43:9f:cb:17:c4:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
        Validity
            Not Before: Jul 31 22:14:25 2026 GMT
            Not After : Jul 30 22:19:25 2027 GMT
        Subject: CN=37DBCC5683009236505FFAEBB3B4ECDDCA247174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:0e:8a:6f:b8:51:fe:cf:a4:8a:24:1a:2a:
                    7c:dc:37:e9:d7:5f:4f:17:3e:90:34:72:14:24:d9:
                    6c:38:a8:66:0c:b9:5e:4c:43:43:a9:ca:c4:44:94:
                    45:77:64:23:0d:bc:07:03:5c:2f:5a:83:66:38:b4:
                    73:d9:dd:88:57:d7:f2:42:03:5c:f6:67:ba:96:93:
                    de:8e:d3:16:0e:db:e3:d2:3b:0e:ba:00:28:44:3b:
                    28:fd:b5:58:d0:80:68:af:c4:68:7f:32:ba:28:9d:
                    8c:cc:b8:bc:5d:16:9b:8b:df:21:60:ef:d8:c6:36:
                    24:9b:ec:db:1e:d6:52:73:2b:98:19:24:04:12:6f:
                    cf:b3:65:e5:ce:67:38:55:36:9e:ee:ce:8a:1d:13:
                    83:73:2f:44:e8:f9:73:ad:f2:4a:9a:25:88:8c:ed:
                    83:11:c9:cd:78:99:c9:44:8a:95:b7:59:09:df:1a:
                    e0:72:ca:06:8a:46:59:c5:37:e7:e1:2e:17:f3:87:
                    f7:0d:b0:83:6d:91:57:58:67:2c:c1:15:60:9b:45:
                    69:c3:49:bd:b2:7f:7d:af:97:3e:2c:6e:5d:d1:7c:
                    24:c4:a6:4e:2a:3a:74:f3:bc:c9:b6:f3:0f:6c:cf:
                    26:5e:4b:4a:4c:9e:ae:dd:e5:39:12:ae:50:e5:17:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:CC:56:83:00:92:36:50:5F:FA:EB:B3:B4:EC:DD:CA:24:71:74
            X509v3 Authority Key Identifier:
                keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/323830333a376430303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:62:f8:b6:34:f7:de:8a:9c:11:c8:df:a6:b6:db:95:44:9c:
         d5:3e:40:3c:c5:a8:2f:a5:1e:37:7b:32:68:da:bc:6d:75:00:
         4d:ad:1a:34:09:18:82:fc:dc:f6:d4:7b:99:4f:f7:d3:60:9c:
         c4:9c:24:46:ac:0e:d6:39:64:85:8a:dd:f1:51:6b:8c:45:dc:
         d5:37:d9:4e:fb:37:21:39:6e:e1:d5:ce:f6:7c:1d:fd:08:3d:
         f5:21:dd:a6:f0:d6:f1:ba:1b:76:07:d0:f1:0c:70:71:1d:c6:
         5a:c2:0e:bb:dd:a0:ad:4a:32:59:75:91:46:2b:71:65:02:43:
         cd:f8:83:ff:dd:5e:ef:62:d9:ff:f4:17:f9:3d:9a:31:fc:67:
         8a:97:59:16:69:5f:7c:bb:fc:f9:0e:d7:8f:d3:8e:5d:a1:b8:
         a7:52:cd:97:78:36:e4:e4:e5:b4:6d:e4:30:ae:f4:50:39:cf:
         3f:a1:dd:0c:d6:9c:2d:d1:19:1c:93:69:44:d7:ab:a3:30:bc:
         9b:d8:b8:4f:3e:7b:ec:8b:67:f1:21:d0:3b:3d:03:67:33:2a:
         c5:16:01:20:e7:ca:c5:a7:d4:53:d8:f7:63:a5:b2:47:b7:32:
         86:7b:9e:2b:7e:f4:3a:71:e7:6a:5a:a2:8a:35:eb:72:e5:c2:
         bf:b9:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:32:53 2026 by rpki-client