Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa
File:                     323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa (raw, json)
Hash identifier:          ++qaJWM/S2LAjudelh+YH9I7IwVO8mrVwNe8Z2mRKDE=
Subject key identifier:   47:FC:25:2E:BA:8D:0F:1D:21:6C:DC:F8:0D:00:3A:EF:E5:01:DF:10
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       2A8D81B4F9783C5B1F60849C75621AFE9F37A411
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa
Signing time:             Mon 15 Jun 2026 16:47:54 +0000
ROA not before:           Mon 15 Jun 2026 16:42:54 +0000
ROA not after:            Mon 14 Jun 2027 16:47:54 +0000
asID:                     274039
IP address blocks:        2803:b2a0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8d:81:b4:f9:78:3c:5b:1f:60:84:9c:75:62:1a:fe:9f:37:a4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Jun 15 16:42:54 2026 GMT
            Not After : Jun 14 16:47:54 2027 GMT
        Subject: CN=47FC252EBA8D0F1D216CDCF80D003AEFE501DF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:af:8f:84:92:c1:77:41:60:26:63:db:2c:
                    79:40:29:7e:76:53:2c:0f:d3:1f:39:c7:89:6c:59:
                    93:4d:fa:ca:77:1b:65:e6:37:f5:48:97:59:71:76:
                    4f:32:de:9c:04:89:69:9f:84:46:6c:4d:7d:a3:61:
                    13:ee:57:c9:65:56:15:3c:0a:ed:f5:4a:ca:87:39:
                    b7:47:04:52:e1:16:68:6f:f4:ef:4f:71:ba:1e:d6:
                    f1:fe:9b:8e:26:02:0a:0c:ae:ba:9b:55:bb:59:73:
                    94:35:74:69:87:4e:78:82:03:4c:4c:69:42:fc:1a:
                    89:be:1c:98:6a:3b:22:9f:7f:30:23:68:89:26:d8:
                    cd:2e:a9:16:8c:c0:8b:56:d7:86:73:5b:25:40:94:
                    92:f3:4c:77:af:d5:f8:68:f5:3d:be:13:38:c2:f5:
                    2b:ef:f3:cd:e2:e3:33:4a:f0:49:d0:09:4e:99:94:
                    eb:45:f1:02:50:5b:1a:cd:5c:a5:20:55:09:e5:9e:
                    a5:8d:33:49:bc:c9:55:9b:a3:a4:b1:b1:e9:37:7e:
                    80:25:8a:46:71:26:ea:16:b5:01:a3:6d:38:e3:b0:
                    79:f5:cc:20:9d:73:09:c8:24:23:9b:1f:7e:38:e9:
                    26:a7:88:2d:23:c7:74:f1:8c:a0:29:8d:fb:d8:d2:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:25:2E:BA:8D:0F:1D:21:6C:DC:F8:0D:00:3A:EF:E5:01:DF:10
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:d1:20:0e:e5:8c:f6:ef:80:50:16:8d:a2:f2:58:0e:dc:
         1f:17:59:35:90:40:b8:5f:74:28:99:cc:62:01:69:79:b6:16:
         40:e5:f4:26:41:df:b2:02:8b:eb:99:db:f9:b4:1b:db:52:8d:
         6f:13:a6:62:82:1e:f0:73:c9:cf:4b:e0:af:c2:66:3d:0b:d0:
         e1:e1:5e:45:7f:a8:59:73:91:fe:d0:3c:7e:b5:45:e0:71:86:
         ca:db:47:a5:85:ed:c8:5f:55:e9:bb:d4:23:40:c7:11:76:6e:
         5e:ff:1b:fe:70:30:6f:c6:4d:95:fd:ae:e1:5e:84:ac:ff:0f:
         7f:45:e3:b1:b2:01:95:ac:86:f5:03:07:52:4f:d4:43:c1:cc:
         9a:30:0e:16:1a:c2:47:f5:f4:f8:95:d7:b8:02:f8:a2:ed:d7:
         8b:07:b2:91:d0:ab:8a:ce:c1:c9:51:b2:21:1a:92:10:4d:22:
         42:46:8c:a2:3e:53:8e:ab:00:a4:2b:ef:0f:aa:31:d0:de:36:
         37:f2:e4:e2:c0:bf:17:9c:fa:33:33:7b:65:66:ee:85:a1:f3:
         5f:d5:ac:17:72:d0:4c:c0:06:cf:74:40:22:94:2e:b7:77:60:
         b0:cb:d2:cb:a1:0e:be:16:27:0e:e9:e7:10:10:0f:93:25:fb:
         d6:2b:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:00:53 2026 by rpki-client