Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa
File:                     323830333a643761303a3a2f33322d3438203d3e203532343635.roa (raw, json)
Hash identifier:          bp5K6HxOYDuu4QhY924hXUMWIzyNJ4wiP+qiIwLMjoU=
Subject key identifier:   2C:E5:75:D9:FC:C1:93:7F:F9:B1:4C:90:C2:43:50:C2:FA:49:67:D6
Certificate issuer:       /CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
Certificate serial:       78E193D3264DC36BFA6ED0BC29022CDC70B76ED1
Authority key identifier: 4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa
Signing time:             Tue 05 May 2026 15:41:18 +0000
ROA not before:           Tue 05 May 2026 15:36:18 +0000
ROA not after:            Tue 04 May 2027 15:41:18 +0000
asID:                     52465
IP address blocks:        2803:d7a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:93:d3:26:4d:c3:6b:fa:6e:d0:bc:29:02:2c:dc:70:b7:6e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
        Validity
            Not Before: May  5 15:36:18 2026 GMT
            Not After : May  4 15:41:18 2027 GMT
        Subject: CN=2CE575D9FCC1937FF9B14C90C24350C2FA4967D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:4d:bb:cd:e8:fd:3a:be:81:01:33:e7:68:
                    ab:40:63:20:47:84:55:75:a2:45:c5:00:37:d9:8e:
                    eb:bb:8d:69:05:29:12:bd:e8:c5:35:ea:0e:22:49:
                    3b:fc:87:63:27:d7:0d:c9:f5:b5:29:2a:06:3e:2a:
                    80:d2:d7:f0:d5:40:e4:25:b7:7e:74:2d:53:05:d8:
                    5a:60:10:c2:ce:51:92:b6:98:78:28:c7:78:b6:55:
                    9f:34:17:64:79:ff:9d:9b:a2:ae:3d:d9:77:f0:14:
                    a0:1d:76:a9:6d:95:c6:55:e8:80:1e:25:ef:59:da:
                    58:18:f2:01:ae:1f:6a:d6:69:11:1a:b3:48:d5:44:
                    e2:da:92:b8:f8:cf:cc:05:ee:43:74:4d:33:1e:d3:
                    8b:a6:ae:18:ca:16:7c:30:c7:4e:3d:11:a7:44:66:
                    46:dc:48:f7:37:90:35:6d:0e:c9:11:83:32:22:43:
                    da:e8:9f:d7:db:9d:c1:9d:7b:f9:8d:9a:54:69:4b:
                    4f:c0:27:fb:a4:b8:a3:21:b7:eb:6e:1a:b7:74:32:
                    37:34:0b:c2:73:20:9e:b1:8d:74:de:3c:a3:12:d7:
                    8b:06:ee:ea:f1:d5:44:99:60:30:22:8f:7c:ad:5c:
                    f2:b0:7b:45:84:e9:d1:22:23:29:32:fe:f1:e7:8e:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:75:D9:FC:C1:93:7F:F9:B1:4C:90:C2:43:50:C2:FA:49:67:D6
            X509v3 Authority Key Identifier:
                keyid:4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:3f:8c:3a:dd:1d:29:01:fb:44:d1:3b:52:71:23:30:d1:
         14:c4:4a:5a:0b:5a:58:50:04:62:10:e4:12:8d:93:9c:26:53:
         db:79:4a:66:f8:27:b7:7d:a9:74:05:6e:2d:2d:7d:9a:ad:93:
         e1:35:02:6a:64:8b:74:05:2e:28:df:7e:11:31:9c:1e:74:f0:
         2c:43:d0:ba:95:ba:79:55:87:59:63:9c:29:63:b9:ad:bb:32:
         52:0a:21:db:31:e5:2d:d0:51:3c:af:71:bc:a4:d4:95:60:96:
         f2:a1:b7:55:fb:58:4f:cc:fa:0d:06:19:b5:48:c1:bd:28:5c:
         5b:cd:9f:40:f4:47:16:fa:a3:4b:96:55:9e:0b:9f:e7:0a:36:
         4d:ed:08:1e:57:de:63:b9:f3:05:22:f8:51:ab:aa:86:84:b7:
         40:ce:ea:a2:03:f8:81:07:43:92:76:16:89:78:eb:48:f2:2a:
         dd:1d:b4:94:3d:92:09:38:5c:74:44:9b:68:98:ae:ff:ca:12:
         b2:86:22:3a:b1:b9:08:03:f2:69:e6:f0:2c:90:d7:b4:b7:3a:
         1e:a3:7b:b1:47:5b:70:00:a3:32:57:be:5d:e5:71:70:a4:94:
         c6:13:eb:48:cc:d6:b3:f5:f7:9c:03:54:7a:f1:39:a5:7e:79:
         05:e2:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:19 2026 by rpki-client