Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa
File:                     323830333a316634303a3a2f33322d3634203d3e203238303735.roa (raw, json)
Hash identifier:          13yTgKucnkntFN/wVbasP5SXH0CIJvdJ7oRGIWPLyh8=
Subject key identifier:   E7:39:FD:B5:DE:70:52:23:37:9C:99:02:F3:57:C8:83:B5:68:5E:F9
Certificate issuer:       /CN=4BE45DC748EE7774D4EF8F672A9497EE7DF030F7
Certificate serial:       32165D024F38DD2D5E2EBE10ABA89177D5B2DBE6
Authority key identifier: 4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa
Signing time:             Mon 22 Jun 2026 16:48:47 +0000
ROA not before:           Mon 22 Jun 2026 16:43:47 +0000
ROA not after:            Mon 21 Jun 2027 16:48:47 +0000
asID:                     28075
IP address blocks:        2803:1f40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 07:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:5d:02:4f:38:dd:2d:5e:2e:be:10:ab:a8:91:77:d5:b2:db:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE45DC748EE7774D4EF8F672A9497EE7DF030F7
        Validity
            Not Before: Jun 22 16:43:47 2026 GMT
            Not After : Jun 21 16:48:47 2027 GMT
        Subject: CN=E739FDB5DE705223379C9902F357C883B5685EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:e3:fc:e8:db:42:f0:4e:1f:60:0a:ce:d7:
                    49:4d:01:a4:b3:0a:7e:6a:6b:74:5e:f3:41:49:42:
                    5c:fa:15:8e:5a:45:97:3f:15:16:91:db:f9:a6:05:
                    fc:d6:a6:43:ac:5f:a1:c8:2e:e3:26:28:5a:87:d7:
                    ec:e0:74:2a:c4:1e:c9:ed:3f:1a:10:60:f0:ff:40:
                    2d:36:b0:ca:d9:45:da:f7:42:77:f0:65:c9:88:9a:
                    da:73:6e:ba:76:7c:ef:06:56:a0:db:2d:da:e1:00:
                    f0:14:1c:82:17:85:93:1a:af:18:d2:3c:2f:6f:5b:
                    49:bd:b5:36:28:08:f9:f4:35:b3:b5:27:f0:ac:ba:
                    18:3f:59:fd:30:b1:3b:28:b4:60:05:00:e1:6d:a2:
                    51:24:43:f4:95:0d:c9:a6:b9:7c:a6:64:85:80:d6:
                    c0:3c:ba:52:ea:65:ce:60:dd:05:b3:7c:86:94:d8:
                    20:74:1b:8b:0c:ba:b1:26:68:8c:2c:25:fb:fe:3d:
                    53:b2:fa:9c:8c:3b:6c:9f:e4:a5:2d:0d:fc:e1:ab:
                    cd:c2:2e:d6:c3:d8:c7:04:13:d4:99:0d:a6:89:9e:
                    51:97:2a:0d:8b:d9:2f:8d:51:78:c9:12:05:9c:0c:
                    3a:5f:11:c4:f0:dc:1a:78:6a:29:3f:9b:4c:40:5a:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:FD:B5:DE:70:52:23:37:9C:99:02:F3:57:C8:83:B5:68:5E:F9
            X509v3 Authority Key Identifier:
                keyid:4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/323830333a316634303a3a2f33322d3634203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:c8:c5:38:a2:91:74:86:bd:f8:b8:68:81:5d:3b:d2:cd:
         1c:cd:1e:bf:f2:8a:76:fb:e7:90:bc:77:c5:c9:fe:d6:49:a5:
         c7:50:95:18:d9:3b:eb:f9:92:59:1e:78:61:56:9f:46:99:6b:
         b7:ae:16:59:f5:30:94:6b:83:8f:d1:4e:6c:67:b1:a8:27:77:
         b4:52:67:ad:28:11:3a:9f:f4:29:23:77:33:37:88:17:f3:9f:
         c8:bf:dc:9c:13:12:39:79:6d:46:76:5c:28:81:ee:23:ac:08:
         7a:65:cc:0d:e9:3a:07:a5:27:0c:3d:9f:32:f9:3a:3b:25:d2:
         2c:8b:af:98:a4:f8:bf:97:48:c4:a1:83:ac:5c:03:ef:a0:b9:
         11:14:96:1d:a6:3d:fa:92:cf:e3:7f:55:7a:df:64:27:61:0e:
         44:6f:59:9f:2f:b4:7d:61:a3:6e:82:fa:55:29:b3:8f:13:12:
         4a:fa:90:99:08:f3:0d:09:69:39:d2:be:bd:3f:e8:6c:ff:0a:
         98:07:97:05:bd:cb:e8:df:7c:c1:c3:bb:31:a7:41:40:9f:99:
         31:cd:8c:f6:43:df:4f:ce:4f:02:08:98:85:06:53:f6:d3:7d:
         ae:33:43:a6:8e:44:2a:29:e4:b6:6f:5d:f9:4d:f6:54:e4:68:
         5a:20:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:49:25 2026 by rpki-client