Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38333a3a2f34382d3438203d3e20323734303339.roa
File:                     323830333a623261303a38333a3a2f34382d3438203d3e20323734303339.roa (raw, json)
Hash identifier:          25oV7Fv6vsaUhN6fPG4ylAzh6L1nrumhk/nfv1yQKMs=
Subject key identifier:   53:D4:DB:48:32:5B:B0:3C:C5:E4:95:CE:FB:4F:74:73:3B:53:A2:D9
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       7B36ED374A82DF3500326A340A58160CC5E786CD
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38333a3a2f34382d3438203d3e20323734303339.roa
Signing time:             Mon 15 Jun 2026 16:47:53 +0000
ROA not before:           Mon 15 Jun 2026 16:42:53 +0000
ROA not after:            Mon 14 Jun 2027 16:47:53 +0000
asID:                     274039
IP address blocks:        2803:b2a0:83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:36:ed:37:4a:82:df:35:00:32:6a:34:0a:58:16:0c:c5:e7:86:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Jun 15 16:42:53 2026 GMT
            Not After : Jun 14 16:47:53 2027 GMT
        Subject: CN=53D4DB48325BB03CC5E495CEFB4F74733B53A2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:8a:d2:1d:ce:f7:31:a1:1c:a0:8a:6e:44:
                    be:de:bf:a4:94:65:45:37:eb:8c:2e:d2:40:e9:14:
                    cd:35:86:f2:81:b2:fc:08:8b:6b:53:28:d8:6d:25:
                    ba:ae:ba:a8:9e:c0:b4:53:b8:f4:1c:65:1c:7c:fb:
                    f2:c9:3f:32:65:15:7a:72:7e:e5:3f:a7:63:02:c0:
                    3f:8d:89:2f:f1:03:36:f2:d5:a0:c2:59:b2:10:4b:
                    44:cf:b6:db:df:e1:66:c3:66:4d:36:e9:4d:0f:f4:
                    1e:1f:bc:f0:86:38:1a:16:1f:e3:4e:ba:e4:f9:b0:
                    d3:df:25:8e:be:8e:16:53:87:b2:40:95:52:d5:f6:
                    06:ed:7a:20:8e:d6:5b:4a:6a:10:be:f9:c5:0d:99:
                    75:2b:1d:44:b0:24:d5:5a:65:15:13:86:26:ba:a3:
                    68:5b:4a:30:1c:b9:fa:c7:68:07:a7:fc:4e:71:5b:
                    e7:f7:39:cf:fa:0c:c7:6d:44:09:96:30:c8:b7:e9:
                    a6:24:7a:96:67:37:90:63:3c:53:37:ed:fd:90:43:
                    9a:9d:09:65:e5:d8:60:a5:2f:96:e2:d1:13:32:30:
                    61:95:99:10:dc:99:5d:1a:e8:d0:ee:73:e0:29:a5:
                    40:38:9e:0b:ce:59:e8:85:a1:4a:90:60:5a:1d:93:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:DB:48:32:5B:B0:3C:C5:E4:95:CE:FB:4F:74:73:3B:53:A2:D9
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38333a3a2f34382d3438203d3e20323734303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:ff:8b:b2:d7:49:4e:65:d0:7c:b4:de:c7:59:e0:d8:22:
         92:06:2e:fa:a0:03:98:03:ad:cd:e9:fa:31:f8:e1:6e:34:8d:
         63:f1:b2:b8:29:bd:a4:18:6c:c2:55:5c:a5:ce:52:cb:e3:7e:
         3c:0f:77:95:fa:ea:50:77:ba:2b:bb:0c:bc:f0:2c:37:a7:df:
         95:e5:b0:12:11:96:be:b6:a8:cf:05:1e:74:ee:3b:d7:f1:61:
         68:95:a5:d9:96:f9:e9:6d:30:da:5a:2e:ec:98:94:fe:59:fe:
         58:0c:66:5b:62:02:6e:02:33:2d:21:4f:5b:66:a1:c8:48:b3:
         15:fd:09:bd:ff:df:e1:7d:20:44:66:11:03:83:19:46:8b:ed:
         0b:0f:d7:0d:53:39:56:48:05:15:11:cc:ed:d3:6d:a4:b3:85:
         4c:96:7c:72:b6:d0:39:db:63:40:ca:85:2a:09:0c:06:ec:90:
         10:a5:8f:53:52:78:89:be:89:72:43:aa:5c:5f:78:72:56:92:
         34:ca:c5:3c:d2:3c:5c:76:42:c6:27:cf:7e:88:85:05:fc:7f:
         ae:8d:df:48:fa:a3:63:46:15:79:ec:b8:8c:27:3d:3e:bb:ea:
         f4:00:c7:3e:ea:f7:05:f3:e7:21:8c:c3:75:15:27:2a:ce:df:
         7b:8c:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:00:54 2026 by rpki-client