Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/323830333a656333303a3a2f33322d3438203d3e20323734333236.roa
File:                     323830333a656333303a3a2f33322d3438203d3e20323734333236.roa (raw, json)
Hash identifier:          bwNCeiOEgq1Weq0RV/awyaklSKkVR1cb5YWXBIkKSbE=
Subject key identifier:   8A:78:91:72:69:19:7A:D5:CA:BA:1B:68:F6:23:0B:89:0E:8E:EB:B9
Certificate issuer:       /CN=7B1D38A21A37D42822334BA9B9056AB322DA797A
Certificate serial:       799FA0908884C13B4ABD2557F7AB861458F26D9D
Authority key identifier: 7B:1D:38:A2:1A:37:D4:28:22:33:4B:A9:B9:05:6A:B3:22:DA:79:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/323830333a656333303a3a2f33322d3438203d3e20323734333236.roa
Signing time:             Tue 24 Feb 2026 14:55:00 +0000
ROA not before:           Tue 24 Feb 2026 14:50:00 +0000
ROA not after:            Tue 23 Feb 2027 14:55:00 +0000
asID:                     274326
IP address blocks:        2803:ec30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 05:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9f:a0:90:88:84:c1:3b:4a:bd:25:57:f7:ab:86:14:58:f2:6d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B1D38A21A37D42822334BA9B9056AB322DA797A
        Validity
            Not Before: Feb 24 14:50:00 2026 GMT
            Not After : Feb 23 14:55:00 2027 GMT
        Subject: CN=8A78917269197AD5CABA1B68F6230B890E8EEBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:d2:fe:74:9a:2a:04:4f:74:eb:89:7c:81:
                    12:09:1e:61:28:7c:b7:56:68:cc:cf:1c:d3:d4:ff:
                    4f:29:97:64:43:50:a1:d4:40:e6:8c:5c:c2:be:24:
                    e5:ba:d3:1b:76:95:c5:b1:f6:cd:74:4a:d6:f4:c5:
                    79:59:cf:90:15:12:71:9c:00:83:01:0e:b1:a0:bb:
                    9e:86:c0:60:30:8c:19:a5:83:83:da:d3:26:05:ed:
                    17:a1:c3:88:af:bb:11:c3:d1:13:dd:f5:19:78:19:
                    29:95:ac:b6:5f:20:53:12:d0:7d:c4:6d:c4:67:99:
                    94:6a:2d:6d:98:11:e4:71:bb:3a:70:dc:96:49:fa:
                    3d:65:d8:0c:9c:82:a7:2f:5d:bb:32:11:1e:80:f0:
                    75:6c:78:85:a7:1d:02:15:98:02:32:60:9d:8e:eb:
                    0b:1f:a0:9a:c8:fa:d4:45:34:be:f4:ed:c4:7f:b5:
                    13:b1:c0:a4:61:df:be:0f:f2:ab:62:f9:dd:40:ea:
                    18:2a:c8:63:21:b2:fe:d5:23:14:fb:cf:4f:b7:4d:
                    d9:94:63:f4:c3:78:2c:32:76:92:40:b9:cb:88:ec:
                    5e:38:77:fb:8b:67:30:57:ff:9d:a2:1c:c7:7d:32:
                    62:53:c0:e4:14:de:70:e5:dd:18:1f:34:ee:f8:9d:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:91:72:69:19:7A:D5:CA:BA:1B:68:F6:23:0B:89:0E:8E:EB:B9
            X509v3 Authority Key Identifier:
                keyid:7B:1D:38:A2:1A:37:D4:28:22:33:4B:A9:B9:05:6A:B3:22:DA:79:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/323830333a656333303a3a2f33322d3438203d3e20323734333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec30::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:d7:f7:e1:07:1b:e0:e1:cb:ae:81:d1:c3:21:e4:08:68:
         8c:28:72:60:8d:34:1a:80:1d:9a:95:a6:b5:b7:32:99:18:30:
         eb:75:9c:00:51:6a:fe:19:72:5c:16:60:95:f6:93:23:b8:bd:
         51:f8:5d:43:09:ff:4c:a5:ec:e9:82:be:71:46:98:c9:fc:af:
         b4:53:ba:38:e7:08:c5:7c:ab:47:00:d2:b0:5b:94:97:92:5a:
         e6:ab:f6:8a:64:b8:60:56:94:5d:1c:a6:70:99:a5:74:eb:8e:
         10:a6:37:e0:31:d9:2f:1a:00:9d:ea:fc:fd:3d:1d:d1:f3:6e:
         4c:72:86:76:26:24:5e:ab:2c:da:6b:8e:ef:67:ef:34:78:be:
         04:50:a5:78:e3:b3:03:f6:dc:75:63:68:40:7a:c0:06:24:d2:
         2d:09:a7:49:ea:1f:54:a5:da:90:98:c3:62:09:26:8a:08:1e:
         56:29:d4:10:db:a2:76:89:08:b4:62:3c:72:33:51:ff:60:af:
         ac:07:a9:bb:b7:95:55:8a:4a:ec:a7:cf:b9:f3:f8:e5:ac:2a:
         24:48:0c:b8:2b:38:ab:f0:68:dc:0d:6c:c0:0c:24:6d:70:96:
         e4:0a:2c:c2:1e:d0:ff:d3:31:94:91:83:35:d8:e9:86:26:27:
         ba:2b:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:45 2026 by rpki-client