Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/323830333a386433303a3a2f33322d3438203d3e20323734393738.roa
File:                     323830333a386433303a3a2f33322d3438203d3e20323734393738.roa (raw, json)
Hash identifier:          DY/0vCKndcuNX0QKU0sVqIvpYqhYcRQdXH0MWeC5rMs=
Subject key identifier:   81:37:CA:D3:39:51:6E:3D:E8:31:2C:59:0F:81:3A:C7:F4:CE:E5:6B
Certificate issuer:       /CN=B50E332886F566E0B3B2F622C75452E38C4B5080
Certificate serial:       56B510E54AA06AD2F3392E600953EEEF1693D9E3
Authority key identifier: B5:0E:33:28:86:F5:66:E0:B3:B2:F6:22:C7:54:52:E3:8C:4B:50:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B50E332886F566E0B3B2F622C75452E38C4B5080.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/323830333a386433303a3a2f33322d3438203d3e20323734393738.roa
Signing time:             Fri 03 Jul 2026 16:25:00 +0000
ROA not before:           Fri 03 Jul 2026 16:20:00 +0000
ROA not after:            Fri 02 Jul 2027 16:25:00 +0000
asID:                     274978
IP address blocks:        2803:8d30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/B50E332886F566E0B3B2F622C75452E38C4B5080.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/B50E332886F566E0B3B2F622C75452E38C4B5080.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B50E332886F566E0B3B2F622C75452E38C4B5080.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b5:10:e5:4a:a0:6a:d2:f3:39:2e:60:09:53:ee:ef:16:93:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50E332886F566E0B3B2F622C75452E38C4B5080
        Validity
            Not Before: Jul  3 16:20:00 2026 GMT
            Not After : Jul  2 16:25:00 2027 GMT
        Subject: CN=8137CAD339516E3DE8312C590F813AC7F4CEE56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:88:93:3e:ea:70:0f:fc:4f:14:b6:0f:a3:
                    50:d9:78:f8:a1:69:06:12:8d:35:ea:06:ea:ce:ef:
                    48:bc:42:e4:ce:1e:81:1b:0a:e0:b1:44:0c:9d:32:
                    40:27:7c:bb:26:73:1b:2e:d2:e1:18:39:58:dd:b2:
                    32:4f:dd:11:d1:aa:00:73:ae:b0:44:12:c1:70:52:
                    28:70:e7:ac:e2:b4:36:ed:c2:06:cc:dc:53:69:ad:
                    50:02:71:d9:16:d1:0b:d6:c3:9d:e5:b6:20:d9:cf:
                    6f:e3:d9:fa:b7:95:82:bd:5b:68:5f:6a:a7:7b:25:
                    2b:aa:6e:66:00:b6:47:46:93:fc:12:67:c1:43:e1:
                    2c:94:29:ef:98:c7:13:93:64:53:08:68:1a:23:ac:
                    46:08:47:e5:58:14:84:66:8b:bd:18:bc:06:5e:75:
                    69:1b:a4:96:86:49:3b:27:87:9b:46:12:b0:b6:7a:
                    fd:ef:e7:d4:c1:ad:62:df:a8:36:52:a0:89:ce:ad:
                    b6:fb:90:cd:7a:13:bb:e0:d7:68:c5:ee:7b:cf:0b:
                    64:bc:5e:69:28:f5:0c:68:59:7b:18:06:f4:12:8a:
                    c1:26:d5:7d:e3:cf:a5:bf:63:df:00:a2:19:95:61:
                    b2:4c:34:0b:03:c7:4b:b6:bf:03:6d:a0:0b:d0:60:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:CA:D3:39:51:6E:3D:E8:31:2C:59:0F:81:3A:C7:F4:CE:E5:6B
            X509v3 Authority Key Identifier:
                keyid:B5:0E:33:28:86:F5:66:E0:B3:B2:F6:22:C7:54:52:E3:8C:4B:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/B50E332886F566E0B3B2F622C75452E38C4B5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B50E332886F566E0B3B2F622C75452E38C4B5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C733A9253D638056C274F7760CB7D791056CA70E930B14ED4530CA40AE6E77E/0/323830333a386433303a3a2f33322d3438203d3e20323734393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:db:3e:13:41:5a:fa:6d:43:66:0b:3b:86:72:5d:0a:3f:
         16:51:f9:ba:4d:4b:7d:74:85:21:27:47:04:3e:a7:c5:1a:44:
         7d:75:59:43:5a:1b:93:f9:89:2e:78:71:69:dc:74:01:51:b8:
         2a:59:16:e1:a8:76:e3:5e:70:b9:b9:ad:ff:97:b4:75:77:39:
         17:49:19:08:4d:3f:d5:c0:88:bd:23:41:7b:ff:ca:fc:b5:5c:
         7b:5b:eb:24:39:6c:7a:82:44:0a:91:fe:32:53:ed:45:ea:fe:
         cc:90:92:82:b3:e7:ef:d3:06:cb:79:94:fe:7a:ab:c5:02:6e:
         b7:cc:13:ca:ce:df:2b:95:35:3b:11:b9:64:6a:59:a6:8b:ae:
         a2:75:fa:0c:07:2f:67:60:da:cb:73:f1:f7:31:0c:21:3d:e4:
         33:a2:a0:fd:59:38:af:11:bf:1c:e4:c1:6e:ff:9e:d6:bd:1a:
         8e:70:33:0c:7d:d1:47:0d:e3:3e:54:89:e7:24:e5:5a:f7:8a:
         eb:de:01:4f:be:7b:86:99:76:5c:c8:b4:e3:d0:25:c0:59:5d:
         f2:f8:63:a1:a6:71:65:bb:94:c6:65:58:1e:bd:bd:a1:2f:7a:
         c4:04:f6:a6:67:bc:fe:0b:a3:82:08:e4:4d:85:74:1b:52:31:
         a6:dd:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:40 2026 by rpki-client