Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/323830333a636564303a3a2f33322d3438203d3e20323734313037.roa
File:                     323830333a636564303a3a2f33322d3438203d3e20323734313037.roa (raw, json)
Hash identifier:          GnEAit1lsVKCVOINyOufzmPcvM9abHb7G5fEny0WriM=
Subject key identifier:   A6:A6:61:C6:EA:64:05:2F:6E:93:D8:E3:1B:50:63:95:48:96:80:41
Certificate issuer:       /CN=6F30B719638EFB73522B490AFBC673DE71F75E45
Certificate serial:       6CE2589C3C4A8BAFEE6526C67A169602CDD62689
Authority key identifier: 6F:30:B7:19:63:8E:FB:73:52:2B:49:0A:FB:C6:73:DE:71:F7:5E:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F30B719638EFB73522B490AFBC673DE71F75E45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/323830333a636564303a3a2f33322d3438203d3e20323734313037.roa
Signing time:             Fri 17 Jul 2026 01:00:35 +0000
ROA not before:           Fri 17 Jul 2026 00:55:35 +0000
ROA not after:            Fri 16 Jul 2027 01:00:35 +0000
asID:                     274107
IP address blocks:        2803:ced0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/6F30B719638EFB73522B490AFBC673DE71F75E45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/6F30B719638EFB73522B490AFBC673DE71F75E45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F30B719638EFB73522B490AFBC673DE71F75E45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e2:58:9c:3c:4a:8b:af:ee:65:26:c6:7a:16:96:02:cd:d6:26:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F30B719638EFB73522B490AFBC673DE71F75E45
        Validity
            Not Before: Jul 17 00:55:35 2026 GMT
            Not After : Jul 16 01:00:35 2027 GMT
        Subject: CN=A6A661C6EA64052F6E93D8E31B50639548968041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:60:bc:9f:33:3f:51:08:27:35:10:85:c6:
                    34:17:69:8d:36:71:4b:06:a5:0b:af:25:92:70:2f:
                    c1:27:92:18:2c:59:83:39:33:76:eb:8b:df:f4:17:
                    44:67:0f:56:58:23:63:89:50:3f:33:d4:8e:dc:57:
                    4f:52:52:e4:09:a8:35:79:58:cc:9c:f8:bd:4f:36:
                    1b:d5:a5:f0:01:56:e9:8d:d2:85:ae:9d:a9:b7:1d:
                    36:73:6c:88:ea:56:1e:16:03:5f:36:2a:aa:93:c3:
                    58:7d:58:5d:17:06:5c:4c:12:1d:6a:26:36:67:83:
                    64:06:f5:fe:3d:46:5e:d7:03:85:b4:8f:5b:4b:60:
                    7e:29:29:8b:d1:0d:e0:f7:34:96:28:d4:c0:8e:8b:
                    4c:dc:7f:de:72:87:df:2d:7f:71:fd:53:ba:5b:46:
                    5c:16:43:e2:a0:5c:3b:19:32:a0:27:d5:3e:0b:d1:
                    39:36:0d:99:f9:bb:e7:98:40:fd:b8:99:9e:30:b1:
                    ce:49:ef:e9:f0:7e:34:bd:31:bf:5f:9b:c7:b6:b3:
                    d1:78:de:8b:1b:bc:7c:d3:dc:70:36:9e:e5:d5:b4:
                    0f:36:0d:3c:6d:7e:70:a3:5b:81:30:79:cd:64:0e:
                    37:8f:a3:30:88:63:58:fd:a4:60:8a:1a:96:71:91:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:61:C6:EA:64:05:2F:6E:93:D8:E3:1B:50:63:95:48:96:80:41
            X509v3 Authority Key Identifier:
                keyid:6F:30:B7:19:63:8E:FB:73:52:2B:49:0A:FB:C6:73:DE:71:F7:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/6F30B719638EFB73522B490AFBC673DE71F75E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F30B719638EFB73522B490AFBC673DE71F75E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F8148FDF4BEFF6E8AFEEFFC3A731E710195A94A244549B6AC2B204303608A3B/0/323830333a636564303a3a2f33322d3438203d3e20323734313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ced0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:c6:0e:26:b5:f1:ac:a5:a1:eb:8b:aa:d0:47:10:49:5c:
         ad:e1:f3:98:cc:f7:7d:e9:ac:49:dd:89:93:78:f9:7d:a0:d2:
         3c:ac:00:bb:a6:57:e1:1b:64:7a:30:f5:1e:47:82:5d:39:a9:
         f1:1d:63:2c:35:9b:57:d1:81:a2:54:46:c0:a2:b6:e0:c7:aa:
         06:5d:c6:a3:d9:2f:b1:34:f9:7b:f7:14:a4:d1:92:59:f0:36:
         36:e8:8d:e6:84:14:24:e8:f6:c3:3c:36:5c:14:da:d3:8f:91:
         99:d2:a4:3e:79:62:9c:a4:f7:72:1a:ac:b8:81:61:a1:b5:f7:
         89:8d:b5:92:ad:a9:72:0b:bd:85:14:46:08:57:98:fe:99:92:
         c3:d0:4f:5d:6b:24:63:45:4f:fe:b3:2a:bd:b2:46:64:f1:c9:
         99:8e:77:6b:11:52:3a:e3:f1:c8:37:fa:27:2e:b1:58:b0:cc:
         db:64:07:d1:bb:a6:12:ce:1a:bf:32:72:61:eb:e2:e2:4e:af:
         e7:2e:1a:87:71:2a:8f:c0:cb:23:2e:f2:be:90:a9:ca:e6:bc:
         74:a6:1d:46:c5:1c:56:55:85:6e:72:a9:74:e8:fc:0d:f6:ce:
         94:77:ea:2a:42:aa:c0:bf:5c:de:22:a1:a6:9b:81:15:16:1d:
         43:73:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:47 2026 by rpki-client