Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a323a3a2f34382d3438203d3e20323734393638.roa
File:                     323830333a313533303a323a3a2f34382d3438203d3e20323734393638.roa (raw, json)
Hash identifier:          /Qf8hFKQrQamXUrrI5kKTGHB9FxXXiZgrl2ajy/mwCs=
Subject key identifier:   EC:00:C6:C1:7B:D5:D0:7B:9C:90:86:BD:85:3D:15:AB:36:8B:64:19
Certificate issuer:       /CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
Certificate serial:       5ACDF71C2E827B691F82CBDC013FD744F534B0F5
Authority key identifier: 1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a323a3a2f34382d3438203d3e20323734393638.roa
Signing time:             Tue 11 Aug 2026 19:45:00 +0000
ROA not before:           Tue 11 Aug 2026 19:40:00 +0000
ROA not after:            Tue 10 Aug 2027 19:45:00 +0000
asID:                     274968
IP address blocks:        2803:1530:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cd:f7:1c:2e:82:7b:69:1f:82:cb:dc:01:3f:d7:44:f5:34:b0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
        Validity
            Not Before: Aug 11 19:40:00 2026 GMT
            Not After : Aug 10 19:45:00 2027 GMT
        Subject: CN=EC00C6C17BD5D07B9C9086BD853D15AB368B6419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:e1:da:fe:df:99:f5:3e:07:24:15:af:5f:
                    22:bb:8d:76:49:96:1b:a8:59:ec:2b:6e:21:0a:e1:
                    fc:17:16:59:d3:ce:1f:dd:a5:46:4f:e2:9c:b8:99:
                    70:a5:43:39:76:7d:e1:a5:39:91:5c:56:e6:2d:17:
                    79:0f:a4:f7:0a:36:74:9c:be:e9:6a:11:53:43:41:
                    e5:01:2f:82:15:1d:66:2c:d1:50:df:1a:57:60:56:
                    36:ed:1e:df:c9:f1:c6:ba:7b:84:3c:81:f6:ac:4e:
                    f3:b7:c1:a2:1a:e8:b0:69:02:f9:45:ee:a7:c9:fa:
                    32:a3:b7:2f:e4:85:c9:9e:ac:95:5f:e0:64:95:7d:
                    ad:c4:25:4e:2a:7e:7c:61:63:35:ed:f9:c5:6c:54:
                    97:6d:82:ec:a8:19:01:bd:4e:c6:64:72:26:55:62:
                    26:56:d2:c6:9d:93:86:d3:16:66:67:0a:ff:1e:ba:
                    4f:b3:59:57:63:d7:55:bf:d3:9d:3e:b0:7c:2c:e0:
                    4d:da:c5:de:2b:ff:f1:7a:d8:86:84:86:4f:bc:30:
                    5c:a4:79:ae:68:96:4b:b5:d0:eb:bc:35:a4:51:fb:
                    4c:d2:c4:2c:65:f3:33:9c:46:ca:d2:b6:ab:09:c3:
                    a2:6e:96:8e:0b:53:73:21:1f:11:63:7a:e3:ec:b9:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:00:C6:C1:7B:D5:D0:7B:9C:90:86:BD:85:3D:15:AB:36:8B:64:19
            X509v3 Authority Key Identifier:
                keyid:1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a323a3a2f34382d3438203d3e20323734393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1530:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:04:73:d2:27:db:6c:ca:b2:01:08:48:7e:ac:40:94:3a:dd:
         c2:6a:4c:b2:e2:14:c7:95:57:70:e5:09:75:9b:c8:67:78:2a:
         81:6d:45:69:f1:62:de:c5:d2:4b:94:5a:a7:bb:37:93:13:c3:
         9a:77:cc:76:a8:c7:5f:66:9c:13:e5:5d:05:4d:a8:1f:c2:48:
         bd:20:04:06:d7:3e:71:50:19:cc:f2:48:10:0e:3b:91:a0:c0:
         61:46:80:36:e1:96:4a:9c:83:f8:39:82:a9:e7:be:2c:21:e8:
         93:b6:53:0d:19:eb:b5:9b:2c:24:bb:23:db:c0:5f:81:eb:34:
         f7:24:eb:99:c4:4a:41:10:9d:14:59:f8:f5:8b:eb:6c:44:63:
         9b:49:ef:39:59:57:bf:43:71:fa:84:90:5a:a3:c2:95:84:f9:
         ad:b3:a9:2b:af:2f:75:b6:eb:67:bd:2c:1b:fc:53:3e:ad:74:
         53:4d:9c:b8:3d:5b:d0:6c:0e:75:fd:ab:a0:bd:ea:60:0a:a9:
         01:a7:b1:85:b1:29:3b:1a:00:f9:c9:4f:bf:28:3c:9f:ca:bb:
         bc:b4:9d:a8:88:ee:a0:81:a0:c4:94:c7:4d:eb:7e:b4:43:7e:
         78:51:45:e6:67:b4:40:a5:25:48:43:91:e8:e3:7b:99:92:c2:
         16:8e:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:28 2026 by rpki-client