Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3438203d3e20323636363938.roa
File:                     323830333a346432303a3a2f33322d3438203d3e20323636363938.roa (raw, json)
Hash identifier:          hrAAhcal+kpFY4aO9uNoCMMOoHzBgKVWngoXv+YzswY=
Subject key identifier:   53:F8:67:5C:4E:06:59:2C:80:DB:57:66:ED:FD:88:36:0B:0E:26:12
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       63D28E173B01A1AF1B846E5D3995A5178DCABABC
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3438203d3e20323636363938.roa
Signing time:             Mon 06 Jul 2026 20:20:00 +0000
ROA not before:           Mon 06 Jul 2026 20:15:00 +0000
ROA not after:            Mon 05 Jul 2027 20:20:00 +0000
asID:                     266698
IP address blocks:        2803:4d20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d2:8e:17:3b:01:a1:af:1b:84:6e:5d:39:95:a5:17:8d:ca:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Jul  6 20:15:00 2026 GMT
            Not After : Jul  5 20:20:00 2027 GMT
        Subject: CN=53F8675C4E06592C80DB5766EDFD88360B0E2612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:93:9a:17:30:bc:db:02:87:c2:eb:3a:e7:
                    47:72:4c:60:e2:0e:d8:e9:0b:d1:12:00:02:60:82:
                    e1:7a:14:df:62:ab:45:58:b4:38:14:c3:3f:96:1a:
                    48:26:58:00:35:40:1c:eb:72:94:7a:ba:6e:ed:71:
                    e3:df:11:32:5a:bd:16:7c:75:11:2a:a9:b0:16:6a:
                    5b:56:da:41:49:7e:85:67:23:a4:d5:cb:0d:3d:2a:
                    c8:59:8b:8d:a3:b4:a0:a2:18:51:97:c0:b2:16:ed:
                    62:79:2c:f2:cf:54:78:1e:20:4a:3b:16:55:96:b7:
                    2a:63:b7:86:0c:fb:0f:79:21:bd:52:72:c9:02:39:
                    a2:58:cb:e0:9e:df:d4:e2:a8:49:cc:d9:c8:47:8c:
                    92:5f:18:9d:8d:c4:97:04:a3:b1:d3:49:4c:0b:52:
                    26:80:78:56:50:a8:b7:70:2d:7d:e5:59:e8:a6:81:
                    5e:ad:cf:51:92:ee:b0:e5:fc:a3:3e:61:71:98:52:
                    35:19:37:e4:4f:c6:31:7e:85:65:f3:54:05:92:34:
                    56:55:bf:67:39:f3:78:6a:97:fb:35:30:29:04:29:
                    be:9b:14:42:69:f2:25:87:08:12:86:55:3f:19:b7:
                    09:9d:49:23:e9:de:98:d6:6b:e6:ee:a6:2a:77:f3:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F8:67:5C:4E:06:59:2C:80:DB:57:66:ED:FD:88:36:0B:0E:26:12
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3438203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:df:c9:6c:f8:ae:aa:8e:11:08:cf:31:5a:40:6f:82:d9:
         d1:3b:f3:78:87:dc:3b:84:9a:2a:9a:12:a9:98:87:57:98:9b:
         9e:be:d5:33:f2:b8:da:bb:e9:86:d3:4d:b0:21:76:44:2e:03:
         45:59:e5:84:79:c7:54:a4:9e:e5:f1:46:c6:69:ae:56:4b:35:
         ef:6b:61:60:c7:23:d1:43:5f:68:ef:29:2e:ed:95:53:bd:e8:
         b0:1c:d5:7c:a2:b3:aa:5c:b9:e0:f9:0c:54:2d:82:1a:26:2e:
         df:e5:9e:71:22:24:db:bb:4b:86:99:c6:cd:f6:f3:11:a1:ad:
         07:eb:93:0a:b3:b4:e4:ae:bf:23:15:65:ef:ee:48:e5:84:6b:
         04:ec:b3:4b:c7:5b:57:c7:0b:1d:7e:66:91:2c:8b:97:08:58:
         bd:be:3d:22:cb:fc:22:e6:05:35:74:c9:77:7b:e6:45:b0:d5:
         d2:f3:ff:72:16:05:da:b6:2c:b7:14:63:10:4c:01:ed:c8:1f:
         b7:37:31:d8:60:35:22:b9:45:85:d0:84:f5:41:55:db:82:1a:
         f8:5e:89:e3:6f:8b:c7:74:8a:7b:3c:fe:13:9d:53:e4:b2:4f:
         17:d3:53:75:af:aa:2e:27:c8:70:44:cd:9f:73:35:25:19:e8:
         b0:9f:b6:18
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUY9KOFzsBoa8bhG5dOZWlF43KurwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1OUIwNDc3MUQ4RjZCNDgzNTNDOEM0NDMwQkRDQ0Uy
NEYzMzZDRDAeFw0yNjA3MDYyMDE1MDBaFw0yNzA3MDUyMDIwMDBaMDMxMTAvBgNV
BAMTKDUzRjg2NzVDNEUwNjU5MkM4MERCNTc2NkVERkQ4ODM2MEIwRTI2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0ZOaFzC82wKHwus650dyTGDi
DtjpC9ESAAJgguF6FN9iq0VYtDgUwz+WGkgmWAA1QBzrcpR6um7tcePfETJavRZ8
dREqqbAWaltW2kFJfoVnI6TVyw09KshZi42jtKCiGFGXwLIW7WJ5LPLPVHgeIEo7
FlWWtypjt4YM+w95Ib1ScskCOaJYy+Ce39TiqEnM2chHjJJfGJ2NxJcEo7HTSUwL
UiaAeFZQqLdwLX3lWeimgV6tz1GS7rDl/KM+YXGYUjUZN+RPxjF+hWXzVAWSNFZV
v2c583hql/s1MCkEKb6bFEJp8iWHCBKGVT8ZtwmdSSPp3pjWa+bupip388kxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUU/hnXE4GWSyA21dm7f2INgsOJhIwHwYDVR0j
BBgwFoAUxVmwR3HY9rSDU8jEQwvcziTzNs0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTM3RjE1OUM4MDE2MzI2RkYzQzI1NjRBREE3NkEyMkQx
Qzc5MzIyM0ZDQzVDMDZCNEU1NUNDRTNCMkZBQjk5LzAvQzU1OUIwNDc3MUQ4RjZC
NDgzNTNDOEM0NDMwQkRDQ0UyNEYzMzZDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTU5QjA0NzcxRDhGNkI0ODM1
M0M4QzQ0MzBCRENDRTI0RjMzNkNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTEzN0YxNTlDODAxNjMyNkZGM0MyNTY0QURBNzZBMjJEMUM3OTMyMjNG
Q0M1QzA2QjRFNTVDQ0UzQjJGQUI5OS8wLzMyMzgzMDMzM2EzNDY0MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM2MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDTSAw
DQYJKoZIhvcNAQELBQADggEBAIuO38ls+K6qjhEIzzFaQG+C2dE783iH3DuEmiqa
EqmYh1eYm56+1TPyuNq76YbTTbAhdkQuA0VZ5YR5x1SknuXxRsZprlZLNe9rYWDH
I9FDX2jvKS7tlVO96LAc1Xyis6pcueD5DFQtghomLt/lnnEiJNu7S4aZxs328xGh
rQfrkwqztOSuvyMVZe/uSOWEawTss0vHW1fHCx1+ZpEsi5cIWL2+PSLL/CLmBTV0
yXd75kWw1dLz/3IWBdq2LLcUYxBMAe3IH7c3MdhgNSK5RYXQhPVBVduCGvheieNv
i8d0ins8/hOdU+SyTxfTU3Wvqi4nyHBEzZ9zNSUZ6LCfthg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 05:31:09 2026 by rpki-client