Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa
File:                     323830333a376131303a3a2f33322d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          MMGs1JpOdsRqWtHDEduSRhSGn8FHmK19QX3Wsec48Ns=
Subject key identifier:   A5:4B:1D:07:65:88:68:45:92:99:C7:2D:DE:8F:D3:45:29:E4:18:ED
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       3193C720EE8BA1687971D351F842F9F5AC22A3DC
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa
Signing time:             Sun 02 Aug 2026 02:19:30 +0000
ROA not before:           Sun 02 Aug 2026 02:14:30 +0000
ROA not after:            Sun 01 Aug 2027 02:19:30 +0000
asID:                     271935
IP address blocks:        2803:7a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 19:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:93:c7:20:ee:8b:a1:68:79:71:d3:51:f8:42:f9:f5:ac:22:a3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Aug  2 02:14:30 2026 GMT
            Not After : Aug  1 02:19:30 2027 GMT
        Subject: CN=A54B1D07658868459299C72DDE8FD34529E418ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:49:3c:35:5c:b3:3d:92:6e:d5:60:a4:9d:
                    77:59:67:74:1d:62:52:53:02:09:78:7a:78:48:c8:
                    38:66:b4:6d:ac:7d:fe:f9:e7:e3:c4:22:7e:38:07:
                    8b:79:a8:bb:d1:92:e4:32:39:b4:96:7e:d8:c8:6d:
                    9a:b9:31:c9:c2:e0:c5:da:da:d4:88:40:f2:98:b8:
                    7d:64:94:45:f0:12:27:5e:b1:32:ea:94:4c:03:45:
                    a2:46:42:ed:be:f0:6b:c6:7d:f6:75:bf:ac:9f:e5:
                    26:45:24:d6:4a:06:00:82:8b:2b:92:96:da:0c:3f:
                    3c:f3:eb:17:c8:d9:23:aa:43:ce:83:7c:f6:d1:ac:
                    00:b8:f7:58:2d:14:b1:14:c3:b8:c5:9b:a2:5a:3e:
                    a7:7b:69:f2:9d:37:29:39:8c:89:26:0d:ca:50:45:
                    64:ea:d2:44:34:0f:12:8d:4b:1b:81:57:08:82:35:
                    ed:0e:d3:67:88:3b:c5:43:80:38:d2:98:44:b3:5c:
                    9f:57:37:96:67:e2:33:36:dc:a4:0b:75:50:8f:5b:
                    c7:16:a9:54:36:95:af:fa:2c:d9:c7:4b:2d:f3:fc:
                    a0:aa:3c:49:af:9e:06:c2:91:08:a4:0b:ce:1f:7d:
                    d6:a6:66:2f:41:9f:cd:f7:e9:b6:15:0c:dd:02:02:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:1D:07:65:88:68:45:92:99:C7:2D:DE:8F:D3:45:29:E4:18:ED
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:42:3f:85:62:6a:d3:95:68:9e:88:e6:11:20:1d:32:bc:a0:
         2e:71:f8:b2:de:ba:02:1f:c4:d3:14:e6:40:de:15:de:e1:12:
         4e:b3:2d:f4:ba:f2:89:a1:9d:05:d9:6a:fb:43:c3:9c:d4:11:
         a4:04:53:b2:aa:0b:6b:a2:fb:3c:06:eb:d7:37:f4:14:fc:68:
         fd:aa:22:c2:33:41:b2:ed:65:5f:d3:ea:69:fb:6f:31:00:6c:
         4e:1a:4e:90:b9:be:b0:5e:30:ce:bb:19:d9:59:27:d1:51:da:
         09:18:15:0a:08:b5:e3:4a:21:56:38:8a:42:3a:29:d9:e0:22:
         4d:02:b7:2a:dc:f1:79:79:36:ad:c3:4a:69:37:cc:d3:a0:7a:
         e5:f5:06:4a:25:89:d1:99:9d:eb:dc:21:c8:23:1d:e1:d7:30:
         e2:0d:b2:8f:2b:bc:4a:50:dd:6c:78:80:59:30:cd:28:8a:6c:
         e1:26:c5:ce:5c:86:4b:f1:ee:18:c9:eb:7b:bd:81:ff:53:f7:
         97:00:a7:91:65:29:b2:3a:47:03:39:07:7f:51:c8:ab:91:6c:
         86:95:d2:a0:47:c9:ae:7b:cb:14:72:45:cf:f9:69:ac:38:23:
         e6:b1:10:fd:58:20:de:7c:17:1d:fe:76:e5:07:1d:9c:ee:aa:
         29:6e:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:11 2026 by rpki-client