Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3336203d3e20323734313133.roa
File:                     323830333a316564303a3a2f33322d3336203d3e20323734313133.roa (raw, json)
Hash identifier:          rIxEmPTkaFKslx/tH140tFFUos0E7VEIRSHcyRiuuMU=
Subject key identifier:   5A:EB:41:A8:FC:50:CD:BA:0B:8B:F1:14:6B:99:99:08:03:09:14:05
Certificate issuer:       /CN=55F03D1AB13935CBDE33069764787747A3721A5B
Certificate serial:       2A65983B602942FC59313D560497214B511E7B7B
Authority key identifier: 55:F0:3D:1A:B1:39:35:CB:DE:33:06:97:64:78:77:47:A3:72:1A:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3336203d3e20323734313133.roa
Signing time:             Fri 31 Jul 2026 20:15:00 +0000
ROA not before:           Fri 31 Jul 2026 20:10:00 +0000
ROA not after:            Fri 30 Jul 2027 20:15:00 +0000
asID:                     274113
IP address blocks:        2803:1ed0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:98:3b:60:29:42:fc:59:31:3d:56:04:97:21:4b:51:1e:7b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F03D1AB13935CBDE33069764787747A3721A5B
        Validity
            Not Before: Jul 31 20:10:00 2026 GMT
            Not After : Jul 30 20:15:00 2027 GMT
        Subject: CN=5AEB41A8FC50CDBA0B8BF1146B99990803091405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:b4:8f:39:b2:ea:b9:95:79:95:ab:d5:df:
                    bc:20:d0:ca:1f:1a:59:8f:70:d6:01:bc:d2:2a:eb:
                    c8:d9:63:47:4c:d8:e6:f5:53:8f:3f:41:3c:a1:28:
                    79:65:66:4c:c9:19:b4:3e:7b:08:4f:3f:70:d9:49:
                    1a:c5:a1:59:b2:97:1a:0c:9c:da:83:13:be:9c:dd:
                    3f:dc:66:0c:e0:78:f0:0d:10:23:bb:fc:be:4f:04:
                    65:f5:ea:93:16:1b:72:cd:c0:48:45:18:da:c5:d5:
                    8b:14:27:61:d9:7f:6c:c0:c0:61:cf:10:55:13:90:
                    12:b8:4e:99:c8:4f:14:11:3f:15:47:96:13:d6:cc:
                    bc:07:7b:dc:52:4b:63:a7:a2:f3:87:20:4c:d3:40:
                    f6:7f:59:db:af:4e:e1:d4:4f:43:83:8e:37:44:dc:
                    84:df:23:f1:5e:32:fe:25:a5:db:95:e5:3e:ac:2e:
                    00:d6:eb:e9:88:2d:a6:aa:ff:83:52:ce:b2:e1:91:
                    37:40:55:bf:a6:c9:cd:3e:c1:e3:c5:f2:c0:e3:49:
                    6d:bd:ac:01:00:55:23:87:00:99:b9:29:ad:a7:49:
                    34:54:a1:98:70:85:03:a1:7a:db:39:af:d4:5a:23:
                    fd:73:5f:05:33:2e:87:8d:9a:fe:4f:58:3d:bf:4c:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:41:A8:FC:50:CD:BA:0B:8B:F1:14:6B:99:99:08:03:09:14:05
            X509v3 Authority Key Identifier:
                keyid:55:F0:3D:1A:B1:39:35:CB:DE:33:06:97:64:78:77:47:A3:72:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/55F03D1AB13935CBDE33069764787747A3721A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F03D1AB13935CBDE33069764787747A3721A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E1C381525C0EB7A7A8F02CE63A50EE85901E8A53B7D5EB9D3E1D440D53D0AA2/0/323830333a316564303a3a2f33322d3336203d3e20323734313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:dd:22:aa:89:d7:bb:2e:29:bc:5d:2e:b2:74:37:26:0a:
         68:e1:18:8d:ab:e4:99:7f:b6:30:6c:5d:d8:81:46:3c:1b:ca:
         e2:a0:cd:48:3f:4b:23:93:ef:a8:9d:d6:dd:c4:81:d3:1d:9d:
         4f:9d:fc:24:cd:42:9a:d1:3f:b5:a2:eb:3b:f6:c3:ad:90:48:
         b3:2d:25:9f:98:ec:e6:d0:7d:14:1e:e1:0f:d6:09:75:61:eb:
         4f:a6:a6:fc:97:ae:25:ba:56:55:07:e6:07:60:a8:b4:ba:74:
         1f:5f:10:0b:59:a3:fb:72:7c:7d:91:16:dc:fe:5d:89:da:67:
         1f:1d:d2:ea:ba:e5:fc:02:6a:4c:1b:c3:2c:cb:11:86:50:5d:
         11:97:46:42:03:30:fd:97:90:93:87:e3:cc:c5:7a:fb:d8:c3:
         d9:64:d1:35:24:98:e9:b9:76:25:da:d5:d0:b4:24:a1:eb:36:
         e2:fb:52:8e:7a:22:b8:a0:e0:f0:84:6e:0f:38:3c:84:44:9c:
         ef:8b:cc:d8:1b:8c:5a:09:ce:15:ef:80:b8:1f:cc:cb:13:63:
         61:3a:6b:c1:e2:93:47:19:bc:da:4c:75:54:45:04:16:5f:c4:
         ed:2d:8e:d4:c7:82:79:18:11:34:54:eb:f3:67:fb:df:62:03:
         6c:97:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:37 2026 by rpki-client