Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/323830333a646133303a3a2f33322d3438203d3e20323734383735.roa
File:                     323830333a646133303a3a2f33322d3438203d3e20323734383735.roa (raw, json)
Hash identifier:          g7w1wnbrazUmJls3BboYp2NRq4p7HzJuAhPkQ8UKj/A=
Subject key identifier:   4D:11:B5:1A:4D:00:00:4D:18:D8:22:E4:46:4B:C5:59:62:E3:0B:22
Certificate issuer:       /CN=2764F675010DFC194A758971AD9F2C66C710287C
Certificate serial:       7DE40CC1975A81A17BCAD9606A29515B6C1683BD
Authority key identifier: 27:64:F6:75:01:0D:FC:19:4A:75:89:71:AD:9F:2C:66:C7:10:28:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2764F675010DFC194A758971AD9F2C66C710287C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/323830333a646133303a3a2f33322d3438203d3e20323734383735.roa
Signing time:             Thu 06 Aug 2026 01:55:00 +0000
ROA not before:           Thu 06 Aug 2026 01:50:00 +0000
ROA not after:            Thu 05 Aug 2027 01:55:00 +0000
asID:                     274875
IP address blocks:        2803:da30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/2764F675010DFC194A758971AD9F2C66C710287C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/2764F675010DFC194A758971AD9F2C66C710287C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2764F675010DFC194A758971AD9F2C66C710287C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 21:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:0c:c1:97:5a:81:a1:7b:ca:d9:60:6a:29:51:5b:6c:16:83:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2764F675010DFC194A758971AD9F2C66C710287C
        Validity
            Not Before: Aug  6 01:50:00 2026 GMT
            Not After : Aug  5 01:55:00 2027 GMT
        Subject: CN=4D11B51A4D00004D18D822E4464BC55962E30B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:95:d9:20:cd:a3:a3:b6:b5:08:3d:f3:b7:
                    99:86:07:21:8d:9d:5f:15:b6:58:11:e0:ad:d6:51:
                    5c:1e:88:76:b7:41:57:8b:49:ac:aa:8c:d4:8a:55:
                    d7:62:6b:70:aa:54:8c:fc:d6:17:1f:ec:25:eb:61:
                    f0:94:a4:29:74:f9:21:91:19:3c:98:c3:63:12:d7:
                    d7:a5:1f:e2:21:0d:92:af:0e:d9:23:24:19:67:88:
                    fe:dc:15:01:35:c4:5c:15:ef:a3:e5:36:36:68:8c:
                    3f:2f:04:d5:53:c0:27:7b:c7:1d:dc:32:14:4a:7e:
                    7b:fc:48:59:af:3c:65:a2:96:c8:33:87:01:dc:fd:
                    eb:3a:3c:42:91:7b:7f:12:83:dd:ad:65:e5:62:b9:
                    6e:58:04:47:fd:1e:64:e9:07:3b:0f:24:6f:1b:ee:
                    ea:5d:97:ea:31:1a:aa:a4:02:09:eb:59:6f:c7:10:
                    5c:f6:fe:bf:78:79:41:f0:21:0a:97:99:ee:57:27:
                    86:c7:ad:fb:85:80:9b:6e:30:f4:04:03:40:1e:28:
                    d7:61:48:21:1d:52:ae:6a:91:f1:4c:36:b3:92:5c:
                    f2:86:d2:cc:59:04:ff:f5:de:7a:e7:e2:a2:2d:02:
                    eb:23:33:c4:e7:79:75:78:fe:3c:a1:18:b5:2d:8c:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:B5:1A:4D:00:00:4D:18:D8:22:E4:46:4B:C5:59:62:E3:0B:22
            X509v3 Authority Key Identifier:
                keyid:27:64:F6:75:01:0D:FC:19:4A:75:89:71:AD:9F:2C:66:C7:10:28:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/2764F675010DFC194A758971AD9F2C66C710287C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2764F675010DFC194A758971AD9F2C66C710287C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E7AB44FDEC0C36FA6CE548BBA254A71AE428DA1AB30A6A05EE90B2C741135E0/0/323830333a646133303a3a2f33322d3438203d3e20323734383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da30::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:89:22:85:7d:71:34:6e:a4:cb:55:fb:95:da:72:30:67:84:
         b2:fb:1e:ce:bb:02:ab:de:78:6f:52:46:6d:80:86:3c:7d:57:
         2b:1b:2c:d9:3a:87:46:fd:aa:18:64:3a:21:ad:11:c9:d7:ea:
         c2:53:d4:be:ba:62:73:83:81:9d:9d:aa:cf:75:70:dc:1b:05:
         9e:b4:20:21:1d:31:a9:dd:1b:ce:3e:64:69:82:2c:ae:09:0f:
         39:38:39:b5:7f:22:70:74:63:dd:2e:38:01:82:9e:a6:96:ca:
         f0:54:18:3a:62:9c:af:83:10:94:af:e8:31:89:a1:8d:6a:b6:
         44:42:4c:ea:d5:02:08:45:08:1d:b1:b6:5b:58:11:6c:a2:4c:
         24:95:25:d4:87:3a:33:86:f3:b0:b9:d8:4f:9f:92:cb:38:4b:
         ea:1d:1b:3f:3e:4b:67:e2:82:b1:98:59:d9:1c:b6:63:f1:8b:
         e1:0f:b5:66:55:79:01:01:3e:ec:f0:96:d9:7f:05:76:4f:01:
         ca:0f:c0:e7:4b:f2:bc:00:b6:ad:9f:96:17:86:96:79:a6:2f:
         0f:d4:20:7c:71:68:a1:db:22:02:af:2e:67:3a:94:21:fd:43:
         13:b2:7f:c7:a0:74:0a:0f:c6:d0:b4:35:0a:73:bd:46:35:fc:
         89:62:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:05 2026 by rpki-client