Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34382d3438203d3e203532343632.roa
File:                     323030313a313363373a363030343a3a2f34382d3438203d3e203532343632.roa (raw, json)
Hash identifier:          7kpoc8+yDOlfvxe6AurvSdWpKV1G1vND+A5nfUIhzk0=
Subject key identifier:   9E:CA:9A:B9:2F:30:EE:F3:E8:1A:74:BD:64:5B:66:F5:A0:58:91:22
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       705E549B1211FEF7758068A6FC0F4454B4752B05
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34382d3438203d3e203532343632.roa
Signing time:             Tue 14 Jul 2026 15:10:00 +0000
ROA not before:           Tue 14 Jul 2026 15:05:00 +0000
ROA not after:            Tue 13 Jul 2027 15:10:00 +0000
asID:                     52462
IP address blocks:        2001:13c7:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Jul 2026 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:54:9b:12:11:fe:f7:75:80:68:a6:fc:0f:44:54:b4:75:2b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Jul 14 15:05:00 2026 GMT
            Not After : Jul 13 15:10:00 2027 GMT
        Subject: CN=9ECA9AB92F30EEF3E81A74BD645B66F5A0589122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:72:68:9c:52:68:e0:31:85:59:e5:00:4b:
                    eb:50:e3:5a:5f:ea:62:41:74:8e:da:2b:56:68:69:
                    87:7e:f3:cf:c5:58:00:84:b9:5b:b5:1d:e8:32:62:
                    97:3e:7f:07:9d:77:d2:cb:d9:23:9b:a4:f5:a4:59:
                    b8:97:40:b8:8c:e8:84:95:b2:58:a3:cb:db:cf:47:
                    26:8a:b8:f0:07:25:fc:04:33:c1:96:72:29:f6:14:
                    c2:85:13:ca:35:2a:d7:0d:6d:bd:77:64:1c:93:ef:
                    e4:0c:90:91:94:78:66:b2:5f:ec:ba:ae:05:81:81:
                    42:39:8a:e4:e9:16:f8:ec:5c:7e:32:93:ea:6d:c2:
                    79:b8:d9:29:5b:6b:ba:23:dd:b5:02:45:6d:00:79:
                    c2:1a:69:d6:8b:e8:bf:90:27:6e:64:19:20:3c:33:
                    6d:63:12:96:71:7b:03:e6:c2:f4:53:95:66:fc:f6:
                    de:38:32:b6:59:c5:6b:5e:41:0c:57:99:c5:64:a3:
                    ff:cd:93:00:80:6c:86:eb:9a:df:a4:90:b4:87:bb:
                    25:da:93:a1:ab:c5:b6:77:f8:88:30:70:2a:fa:84:
                    e4:fa:32:88:66:23:b3:ef:a0:07:ef:ff:72:bc:a1:
                    8a:f2:23:ab:4e:e8:6f:2b:2e:69:4e:67:5d:b8:6f:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CA:9A:B9:2F:30:EE:F3:E8:1A:74:BD:64:5B:66:F5:A0:58:91:22
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34382d3438203d3e203532343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:06:01:5f:f5:03:95:24:b7:b7:b6:5c:f6:fc:8f:19:cd:71:
         4d:aa:18:2f:a4:77:87:31:3d:52:a3:de:cc:59:99:3f:19:e0:
         8a:21:12:fd:74:fc:58:37:2a:f8:77:fb:f9:a0:ce:91:2d:84:
         15:60:75:82:36:7d:d0:cc:0f:65:4a:2b:c9:31:80:0a:6a:ea:
         b8:82:47:c2:57:b6:34:e4:ab:5e:23:75:34:8c:62:c2:4c:19:
         fe:e8:8c:a9:ec:2a:23:89:72:53:94:41:cb:14:6b:7f:84:6f:
         c0:63:7b:eb:b9:fb:d6:38:66:d0:94:5c:48:15:33:d6:b8:d2:
         19:dd:46:f9:5b:da:a9:43:c4:93:7e:2f:5d:f7:bf:65:10:ac:
         a7:e9:01:ba:99:ef:03:4e:3a:db:32:e6:e1:19:2b:fb:1f:4b:
         3d:2e:b2:21:e5:23:50:e3:af:f4:6a:50:a2:41:10:cd:bf:62:
         c0:5a:78:da:a9:bb:8f:13:c0:b5:ad:af:0f:64:ec:dd:40:c2:
         87:7a:5d:e4:e7:df:e3:a0:f6:34:66:bb:d7:ca:56:22:ea:98:
         0e:a3:e4:72:bc:d6:95:c2:dc:8d:d4:18:ec:0d:b9:8f:e9:1f:
         b1:c8:0c:ed:67:79:ed:d4:6e:74:99:ff:78:57:16:50:b6:2a:
         6f:89:fa:85
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUcF5UmxIR/vd1gGim/A9EVLR1KwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5N0QyNzAyOEVEREQxMjQwRDUxMTUwRjQ1MDYyRDRD
RTBFODdGNDAeFw0yNjA3MTQxNTA1MDBaFw0yNzA3MTMxNTEwMDBaMDMxMTAvBgNV
BAMTKDlFQ0E5QUI5MkYzMEVFRjNFODFBNzRCRDY0NUI2NkY1QTA1ODkxMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPnJonFJo4DGFWeUAS+tQ41pf
6mJBdI7aK1ZoaYd+88/FWACEuVu1HegyYpc+fwedd9LL2SObpPWkWbiXQLiM6ISV
slijy9vPRyaKuPAHJfwEM8GWcin2FMKFE8o1KtcNbb13ZByT7+QMkJGUeGayX+y6
rgWBgUI5iuTpFvjsXH4yk+ptwnm42Slba7oj3bUCRW0AecIaadaL6L+QJ25kGSA8
M21jEpZxewPmwvRTlWb89t44MrZZxWteQQxXmcVko//NkwCAbIbrmt+kkLSHuyXa
k6GrxbZ3+IgwcCr6hOT6MohmI7PvoAfv/3K8oYryI6tO6G8rLmlOZ124bxkzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnsqauS8w7vPoGnS9ZFtm9aBYkSIwHwYDVR0j
BBgwFoAU0JfScCjt3RJA1RFQ9FBi1M4Oh/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDU5ODQ0MjA5MzBGMkU1QzA0ODJENEFCOEZFRUY2M0U1
MzBDOTY2M0UwQURDM0IxNjFDNjM2NUI1RjkzQzhELzAvRDA5N0QyNzAyOEVEREQx
MjQwRDUxMTUwRjQ1MDYyRDRDRTBFODdGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk3RDI3MDI4RURERDEyNDBE
NTExNTBGNDUwNjJENENFMEU4N0Y0LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTA1OTg0NDIwOTMwRjJFNUMwNDgyRDRBQjhGRUVGNjNFNTMwQzk2NjNF
MEFEQzNCMTYxQzYzNjVCNUY5M0M4RC8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2AEMA0GCSqGSIb3DQEBCwUAA4IBAQBmBgFf9QOVJLe3tlz2/I8ZzXFN
qhgvpHeHMT1So97MWZk/GeCKIRL9dPxYNyr4d/v5oM6RLYQVYHWCNn3QzA9lSivJ
MYAKauq4gkfCV7Y05KteI3U0jGLCTBn+6Iyp7CojiXJTlEHLFGt/hG/AY3vrufvW
OGbQlFxIFTPWuNIZ3Ub5W9qpQ8STfi9d979lEKyn6QG6me8DTjrbMubhGSv7H0s9
LrIh5SNQ46/0alCiQRDNv2LAWnjaqbuPE8C1ra8PZOzdQMKHel3k59/joPY0ZrvX
ylYi6pgOo+RyvNaVwtyN1BjsDbmP6R+xyAztZ3nt1G50mf94VxZQtipvifqF
-----END CERTIFICATE-----
Generated at Wed Jul 15 07:26:53 2026 by rpki-client