Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3438203d3e203532343737.roa
File:                     323830333a336230303a3a2f33322d3438203d3e203532343737.roa (raw, json)
Hash identifier:          QAp3r91d+KxMrCLPPmfeVzalvp1TS/OMLfgcSSce77U=
Subject key identifier:   39:3D:C2:3A:04:FD:60:38:0C:91:9F:07:63:00:C5:0F:A5:1D:BE:51
Certificate issuer:       /CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
Certificate serial:       703FFB8654E564495EA821F5471B9BA381265F56
Authority key identifier: 7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3438203d3e203532343737.roa
Signing time:             Mon 06 Apr 2026 21:37:43 +0000
ROA not before:           Mon 06 Apr 2026 21:32:43 +0000
ROA not after:            Mon 05 Apr 2027 21:37:43 +0000
asID:                     52477
IP address blocks:        2803:3b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3f:fb:86:54:e5:64:49:5e:a8:21:f5:47:1b:9b:a3:81:26:5f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
        Validity
            Not Before: Apr  6 21:32:43 2026 GMT
            Not After : Apr  5 21:37:43 2027 GMT
        Subject: CN=393DC23A04FD60380C919F076300C50FA51DBE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:72:45:d4:e7:aa:6a:79:a4:9e:61:2c:e1:
                    a9:78:5c:9c:5f:35:98:f6:cf:66:42:8d:e3:4c:1b:
                    52:d9:4b:c1:31:78:8c:3d:9b:5f:2a:e4:6e:ff:29:
                    16:83:8c:a5:46:79:d2:4d:fa:eb:bc:22:1c:28:dd:
                    f2:bd:b2:8b:72:51:6b:0f:18:62:56:e0:e4:b8:a9:
                    a7:68:aa:e8:ef:82:f8:7c:4b:58:51:a7:1d:56:28:
                    1f:f5:c7:58:27:d2:5a:74:83:43:c5:3d:2b:34:64:
                    f9:93:4e:44:37:91:4c:6e:ad:c2:af:b4:f0:82:a8:
                    a8:97:b4:6f:f0:a3:6b:a3:49:c8:c0:8f:8d:ac:83:
                    7e:4e:0d:af:72:6d:4b:32:76:3a:5a:3d:db:3f:45:
                    c7:9d:c2:69:37:a1:4a:dd:fd:d2:b4:3b:18:9d:02:
                    a7:c9:e6:fe:40:a6:2a:5f:cb:24:b4:47:60:2f:85:
                    30:41:d9:20:dc:e8:af:a5:b6:8f:b5:07:90:7f:ef:
                    65:81:c4:4a:42:98:ab:58:5f:e8:53:29:cc:a4:cd:
                    e7:c9:4d:d6:5e:98:cf:1f:fc:b1:75:28:86:a2:42:
                    4d:ef:64:d3:50:88:b7:a3:21:5d:0c:37:a3:8a:0a:
                    01:bb:ac:9e:f2:af:e3:16:29:86:dc:f7:61:ef:16:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:C2:3A:04:FD:60:38:0C:91:9F:07:63:00:C5:0F:A5:1D:BE:51
            X509v3 Authority Key Identifier:
                keyid:7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3438203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:5e:a7:ff:5b:c1:6b:70:85:52:45:46:19:b9:c8:04:a0:
         aa:36:a7:69:b7:34:fa:d1:12:19:6b:19:7d:b3:61:64:37:5e:
         b7:d8:fd:32:68:4b:0a:81:92:ce:e1:1e:59:0b:e6:85:a6:ef:
         14:d0:3c:b2:cf:a6:44:93:be:7a:a7:62:f2:83:f8:13:66:73:
         ec:54:aa:4e:d4:ec:ff:df:a6:84:ae:c7:d4:9d:12:0e:60:12:
         6e:7a:ce:ce:d2:36:8f:85:5f:bd:87:aa:e0:9c:41:c5:c2:c2:
         7f:57:59:4c:bd:f5:6c:cc:b6:14:c9:e5:2d:4f:be:c3:8b:d7:
         77:a7:28:d8:cd:0c:0e:fa:61:8d:09:87:c2:31:d4:5d:23:fc:
         c3:0a:27:6c:d1:49:ff:34:ac:af:82:08:6e:f2:de:ff:83:26:
         bb:85:55:e3:56:9a:90:7c:06:9e:39:73:dd:98:1f:dd:1b:1d:
         58:b4:04:37:c8:44:17:46:6d:b0:c9:6f:38:7c:7f:a7:e2:7e:
         82:3f:38:9b:48:4e:48:16:6d:44:8f:cd:15:cf:a1:40:09:23:
         ca:56:8c:62:19:27:09:a4:99:4c:3b:75:9b:9d:82:f3:a9:fd:
         87:ee:c4:70:f5:da:79:61:e2:50:94:7a:4f:33:d6:7f:ce:70:
         81:b8:9c:cb
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcD/7hlTlZEleqCH1Rxubo4EmX1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRUFEMzhDN0E5OTdBREQ0NTEyNkU4NEQzNkM0MDU3
QzU2MUMwNjAeFw0yNjA0MDYyMTMyNDNaFw0yNzA0MDUyMTM3NDNaMDMxMTAvBgNV
BAMTKDM5M0RDMjNBMDRGRDYwMzgwQzkxOUYwNzYzMDBDNTBGQTUxREJFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtXJF1OeqanmknmEs4al4XJxf
NZj2z2ZCjeNMG1LZS8ExeIw9m18q5G7/KRaDjKVGedJN+uu8Ihwo3fK9sotyUWsP
GGJW4OS4qadoqujvgvh8S1hRpx1WKB/1x1gn0lp0g0PFPSs0ZPmTTkQ3kUxurcKv
tPCCqKiXtG/wo2ujScjAj42sg35ODa9ybUsydjpaPds/Rcedwmk3oUrd/dK0Oxid
AqfJ5v5ApipfyyS0R2AvhTBB2SDc6K+lto+1B5B/72WBxEpCmKtYX+hTKcykzefJ
TdZemM8f/LF1KIaiQk3vZNNQiLejIV0MN6OKCgG7rJ7yr+MWKYbc92HvFgt3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUOT3COgT9YDgMkZ8HYwDFD6UdvlEwHwYDVR0j
BBgwFoAUey6tOMepl63UUSboTTbEBXxWHAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkM1RTgzNjExMjcyRUMyNUVDMzc0NzBGNUI0ODk5ODQ4
QjAyNENBQzQ2Q0Q4OTM4RjEzNjQ5ODE2MDdERUY0LzAvN0IyRUFEMzhDN0E5OTdB
REQ0NTEyNkU4NEQzNkM0MDU3QzU2MUMwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjJFQUQzOEM3QTk5N0FERDQ1
MTI2RTg0RDM2QzQwNTdDNTYxQzA2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDNUU4MzYxMTI3MkVDMjVFQzM3NDcwRjVCNDg5OTg0OEIwMjRDQUM0
NkNEODkzOEYxMzY0OTgxNjA3REVGNC8wLzMyMzgzMDMzM2EzMzYyMzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzsAMA0G
CSqGSIb3DQEBCwUAA4IBAQBNfl6n/1vBa3CFUkVGGbnIBKCqNqdptzT60RIZaxl9
s2FkN1632P0yaEsKgZLO4R5ZC+aFpu8U0Dyyz6ZEk756p2Lyg/gTZnPsVKpO1Oz/
36aErsfUnRIOYBJues7O0jaPhV+9h6rgnEHFwsJ/V1lMvfVszLYUyeUtT77Di9d3
pyjYzQwO+mGNCYfCMdRdI/zDCids0Un/NKyvgghu8t7/gya7hVXjVpqQfAaeOXPd
mB/dGx1YtAQ3yEQXRm2wyW84fH+n4n6CPzibSE5IFm1Ej80Vz6FACSPKVoxiGScJ
pJlMO3WbnYLzqf2H7sRw9dp5YeJQlHpPM9Z/znCBuJzL
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:27 2026 by rpki-client