Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
File:                     323830333a3630303a3a2f33322d3536203d3e203236313035.roa (raw, json)
Hash identifier:          QDG9tCM1V37qPEQ93N7GMK0wTsZZ8m0hHg9KngEbyCU=
Subject key identifier:   E8:08:A2:3B:13:BB:88:93:E2:AF:F2:C2:EC:57:5F:34:A2:EA:21:B8
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       0D441E522E5D9AF071A6644B6E53A0701283E1C7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
Signing time:             Fri 25 Sep 2026 14:36:57 +0000
ROA not before:           Fri 25 Sep 2026 14:31:57 +0000
ROA not after:            Fri 24 Sep 2027 14:36:57 +0000
asID:                     26105
IP address blocks:        2803:600::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:44:1e:52:2e:5d:9a:f0:71:a6:64:4b:6e:53:a0:70:12:83:e1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:57 2026 GMT
            Not After : Sep 24 14:36:57 2027 GMT
        Subject: CN=E808A23B13BB8893E2AFF2C2EC575F34A2EA21B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:14:70:36:ed:94:ca:c8:ec:85:d6:36:0c:
                    39:9b:9b:94:d2:d7:d7:32:86:c2:00:fb:5e:6f:e0:
                    7b:10:97:31:6e:84:c9:49:72:d0:c4:17:49:ed:3c:
                    ca:ff:29:6c:fe:e4:6b:18:21:6f:09:55:64:81:27:
                    69:44:65:c4:44:c2:d2:24:96:7a:e1:ad:75:f4:dd:
                    c8:56:8b:2d:d2:48:fe:fe:d0:8c:20:74:6e:c8:56:
                    4c:bb:da:11:35:61:d5:a0:9e:15:3b:b4:47:19:f5:
                    00:75:a0:9b:2f:dc:a5:31:77:ac:c5:d2:21:bd:2f:
                    23:04:58:e8:b4:c3:6c:7c:3b:41:04:f3:a3:e0:f0:
                    c7:1d:29:6e:23:db:93:3f:23:a1:9c:1d:f4:c9:94:
                    4f:3b:4f:60:ec:1b:6c:38:1a:f8:1c:8a:5b:cd:65:
                    e6:98:e5:57:b9:8f:e5:9b:03:61:2f:7c:e0:2a:68:
                    c9:05:27:dc:2f:e4:98:30:14:9f:12:fd:3d:9c:6f:
                    d4:75:f4:aa:76:c6:5b:b5:9d:1f:57:e0:7b:0f:06:
                    cb:0e:5e:e9:72:68:e2:96:cc:3a:64:76:5b:a8:bb:
                    84:8e:2e:89:17:63:03:73:5b:b4:b6:de:16:3b:e4:
                    48:46:f4:68:2c:35:51:83:95:a6:94:2f:ee:73:b5:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:A2:3B:13:BB:88:93:E2:AF:F2:C2:EC:57:5F:34:A2:EA:21:B8
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:bc:0f:c1:e9:ef:01:0e:fb:fc:ce:de:1c:a8:e9:8c:f2:
         41:6c:3f:29:28:36:2e:03:f1:1d:43:14:ca:55:e8:a5:13:6d:
         41:48:c6:6f:04:4d:67:87:66:de:be:b1:d6:0a:66:d0:f8:ba:
         8e:68:a3:c6:92:e6:a2:ca:d8:04:8e:cd:37:1f:15:6a:9e:51:
         e7:f0:f1:67:38:cb:79:7d:64:0d:cd:bc:c3:46:ea:a4:70:dc:
         01:a2:1d:c6:87:ba:ab:a5:a9:3f:46:75:a8:31:d7:c7:ef:34:
         fa:d0:20:7c:fa:f2:8a:95:74:e8:93:e6:81:b6:7c:f2:07:f6:
         67:2b:32:48:4d:85:98:ec:69:5c:40:13:58:cc:c7:e2:1b:cc:
         59:a8:e3:e3:13:42:b8:4c:36:4a:ca:40:af:fa:36:7f:54:70:
         9a:14:04:bc:82:98:e8:75:b7:76:b6:d2:98:6f:c5:a6:a3:60:
         bc:1f:7b:78:8f:07:b3:8b:4b:85:b2:a3:5b:39:87:bf:40:ca:
         1a:47:55:c0:a7:a3:ac:07:11:c2:da:03:d7:0b:e0:f4:df:03:
         5f:9e:8e:5d:01:44:bd:3b:61:67:5a:4c:09:91:cf:ce:a2:c8:
         9e:ce:10:10:c9:59:b4:db:18:4e:b7:b4:3b:12:bd:94:9f:84:
         c0:6f:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:27:49 2026 by rpki-client