Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a3a2f33322d3438203d3e20323734393638.roa
File:                     323830333a313533303a3a2f33322d3438203d3e20323734393638.roa (raw, json)
Hash identifier:          VYhyy2AlMvH9uqM/zw9g+ZYYyYmkQv/4Bo0xB9T+4b0=
Subject key identifier:   59:A7:90:03:81:DD:59:27:B9:7B:A6:1F:72:59:0A:B8:F6:E3:DA:AA
Certificate issuer:       /CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
Certificate serial:       35D810776F18E1F0228736998610E1FBDCC5AFBD
Authority key identifier: 1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a3a2f33322d3438203d3e20323734393638.roa
Signing time:             Thu 20 Aug 2026 16:30:00 +0000
ROA not before:           Thu 20 Aug 2026 16:25:00 +0000
ROA not after:            Thu 19 Aug 2027 16:30:00 +0000
asID:                     274968
IP address blocks:        2803:1530::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d8:10:77:6f:18:e1:f0:22:87:36:99:86:10:e1:fb:dc:c5:af:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
        Validity
            Not Before: Aug 20 16:25:00 2026 GMT
            Not After : Aug 19 16:30:00 2027 GMT
        Subject: CN=59A7900381DD5927B97BA61F72590AB8F6E3DAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:0b:75:e7:48:fc:0b:95:d4:35:c8:b4:27:
                    b6:e4:42:83:76:64:60:31:df:e0:8d:f4:bc:f4:c3:
                    e1:e8:02:0b:dc:8c:e4:34:94:1a:03:fa:05:72:67:
                    98:01:d9:e6:84:79:cf:b2:e9:20:ed:e4:50:ec:c4:
                    ca:10:50:e2:d5:2e:e7:aa:c4:a0:2c:56:d0:f2:14:
                    19:11:04:1a:50:5a:90:32:cc:9d:34:ad:fc:4b:89:
                    87:ca:c6:15:2a:c2:62:b3:4c:72:f8:f7:4c:d4:75:
                    64:3f:22:e1:5d:0b:2b:c2:94:91:8f:c3:42:92:51:
                    a4:7b:64:d7:70:c8:d1:da:6d:fa:00:db:69:7e:c2:
                    bd:8b:59:7a:03:a6:6e:2a:57:0e:ae:c4:82:4c:14:
                    c9:1d:d3:00:44:a8:16:d8:2e:6c:4e:7a:34:45:d2:
                    32:44:56:4e:03:bb:f1:9a:70:bf:03:f1:28:35:fc:
                    be:bc:89:3b:6e:96:ad:7f:38:bc:06:5b:2c:53:4c:
                    b9:b2:84:c3:3f:c5:b4:c8:8d:63:d8:b4:2a:8d:c9:
                    94:e9:b2:fb:74:44:1f:c6:9d:98:e0:50:1a:f9:fc:
                    aa:6c:56:9d:a1:9c:6d:ad:30:c3:a8:2a:26:06:04:
                    fa:51:29:47:52:39:41:f9:df:88:93:69:ed:61:d7:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A7:90:03:81:DD:59:27:B9:7B:A6:1F:72:59:0A:B8:F6:E3:DA:AA
            X509v3 Authority Key Identifier:
                keyid:1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a3a2f33322d3438203d3e20323734393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1530::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:db:08:83:ae:9d:a8:89:00:f4:bd:5e:22:aa:f7:52:27:4f:
         d7:55:63:36:68:76:4b:9c:f0:25:63:1c:1e:25:90:d5:ed:87:
         79:ed:48:76:b4:ac:6b:ea:11:cf:bf:b2:00:9f:58:86:14:96:
         dd:f5:3d:d6:aa:dc:79:68:7f:eb:0a:2d:c1:d8:e2:66:df:83:
         d9:73:34:44:85:a1:3b:39:08:29:9d:f2:40:a8:b4:fe:f3:ff:
         e9:3b:da:cf:b9:09:7b:89:3c:85:5f:cd:eb:d4:d1:9f:3f:2d:
         68:a8:ba:72:53:60:60:a8:97:19:62:f6:a2:bb:ca:9e:db:c7:
         57:23:40:2b:d6:c2:ac:57:5a:a9:3a:af:67:56:1b:d6:4d:1a:
         49:64:c4:a6:98:af:4f:a8:e8:f9:50:fa:22:ff:01:a4:81:49:
         00:eb:ac:07:95:ca:96:c2:e4:5c:b2:7a:c6:35:a9:2f:3e:01:
         aa:9f:97:de:f6:60:35:b9:86:59:2a:70:b1:71:93:df:62:7c:
         24:d4:96:a4:27:6b:33:4e:a2:e6:81:69:fa:7b:af:a9:f7:5c:
         12:d2:ae:9e:af:6f:58:67:77:98:57:1f:19:29:ec:76:3a:01:
         0d:94:0e:ee:ee:c8:4f:89:3f:77:f4:45:ed:b6:ab:41:f4:c5:
         9b:09:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:28 2026 by rpki-client