Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/323830333a393764303a3a2f33322d3332203d3e20323734323431.roa
File:                     323830333a393764303a3a2f33322d3332203d3e20323734323431.roa (raw, json)
Hash identifier:          4BkgUonk01FNbTQYymigyue85ssFCiwB4+ZOBnoAldw=
Subject key identifier:   38:85:CC:D4:7E:B2:DE:12:30:DC:9B:16:E6:D8:DF:28:C1:CB:87:CC
Certificate issuer:       /CN=6DCE0C5C459FE57EFCF135772FA5208E57DA3785
Certificate serial:       6B1F5E8086667008CB93D1D34A692483A46BC1BC
Authority key identifier: 6D:CE:0C:5C:45:9F:E5:7E:FC:F1:35:77:2F:A5:20:8E:57:DA:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/323830333a393764303a3a2f33322d3332203d3e20323734323431.roa
Signing time:             Fri 10 Jul 2026 21:10:00 +0000
ROA not before:           Fri 10 Jul 2026 21:05:00 +0000
ROA not after:            Fri 09 Jul 2027 21:10:00 +0000
asID:                     274241
IP address blocks:        2803:97d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1f:5e:80:86:66:70:08:cb:93:d1:d3:4a:69:24:83:a4:6b:c1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DCE0C5C459FE57EFCF135772FA5208E57DA3785
        Validity
            Not Before: Jul 10 21:05:00 2026 GMT
            Not After : Jul  9 21:10:00 2027 GMT
        Subject: CN=3885CCD47EB2DE1230DC9B16E6D8DF28C1CB87CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:c7:a0:16:80:02:18:1e:db:52:1f:e1:b0:
                    71:3d:34:3f:4e:05:5a:45:05:53:b9:a6:b3:28:95:
                    5b:42:c2:91:79:01:b5:2d:ff:c3:ee:77:51:ca:59:
                    92:f8:1b:fb:bb:82:f0:b9:57:d7:18:7c:81:c5:be:
                    56:b5:90:d8:c7:5d:32:11:72:38:4e:e9:89:28:27:
                    b1:b9:de:27:8d:39:37:81:93:86:4d:0c:68:d7:91:
                    75:2e:37:e3:08:57:6c:a0:78:17:48:d6:4a:41:3f:
                    cf:62:05:5d:31:d0:70:1f:e9:5b:66:94:6c:fd:2b:
                    c0:79:0d:b4:7b:7c:80:aa:12:07:9f:31:12:33:73:
                    3d:51:92:4f:bf:f5:7a:fd:83:16:bd:a6:c2:60:1f:
                    19:b9:e2:4f:da:e9:1b:ed:85:ce:b3:3b:9d:b3:5c:
                    48:77:92:9b:55:ac:4d:59:82:c9:ee:48:51:b5:5d:
                    cc:a0:5f:aa:c0:6f:fc:5e:c4:cf:16:06:77:1d:57:
                    c1:e1:be:04:00:99:7b:fd:c1:fe:e7:de:b4:10:ed:
                    32:f8:5b:96:00:52:d8:29:dd:4b:64:d2:8e:46:74:
                    12:4b:be:5a:80:21:cc:4f:f4:f9:a3:c8:2e:82:69:
                    38:e8:8c:bf:e2:62:86:e7:9f:a0:8d:e7:f7:32:c6:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:85:CC:D4:7E:B2:DE:12:30:DC:9B:16:E6:D8:DF:28:C1:CB:87:CC
            X509v3 Authority Key Identifier:
                keyid:6D:CE:0C:5C:45:9F:E5:7E:FC:F1:35:77:2F:A5:20:8E:57:DA:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DCE0C5C459FE57EFCF135772FA5208E57DA3785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37D3C178FC183BD4BACD94EBF576A2C5FD9230EF8A66E03F7AF8D6FE48AA64D5/0/323830333a393764303a3a2f33322d3332203d3e20323734323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:90:2d:78:48:6f:33:f4:36:33:c4:2e:ed:35:4d:96:52:8c:
         a1:cb:86:89:00:a0:01:cf:a3:df:3f:70:81:14:c2:96:db:9b:
         24:73:7c:18:0d:51:34:b1:a0:a7:aa:e5:a2:94:50:e6:64:5d:
         ac:10:91:f7:ab:5f:b1:ef:5b:eb:ac:28:b7:e7:d8:88:bd:0a:
         b5:06:59:4e:1b:fb:cd:f3:a1:a4:68:4e:9d:2e:75:89:18:fa:
         04:f3:e8:fd:75:e1:89:c3:15:f6:86:a5:1b:81:88:c2:5d:87:
         2e:fa:7a:ef:73:bf:39:9b:9f:57:c1:bb:c0:78:02:b1:36:63:
         60:25:d9:b3:ef:4b:6d:b8:2e:7b:9e:f3:f1:08:7e:7b:61:00:
         96:05:02:93:46:8d:29:27:5f:0c:a0:00:90:74:f9:3c:f7:78:
         6c:d1:a1:50:14:e5:28:9d:13:55:b6:3e:0e:80:c1:32:01:a8:
         6b:c7:c1:3e:62:8b:89:8e:8f:e3:56:d3:40:58:69:12:1c:aa:
         13:75:2e:89:3d:6d:23:20:23:c7:f2:e0:89:87:09:eb:d3:9a:
         ff:af:cd:1f:71:20:4a:14:2c:2b:f6:1c:cd:1e:1a:ab:26:f3:
         26:ed:8f:41:08:dd:a8:19:a3:e8:36:b4:04:90:34:1c:24:95:
         4f:ea:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:06 2026 by rpki-client