Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/323830333a353664303a3a2f33322d3338203d3e20323734303937.roa
File:                     323830333a353664303a3a2f33322d3338203d3e20323734303937.roa (raw, json)
Hash identifier:          ZE3vxoqbfYobuoV+xQS92DpLMS3xnvaIyoatdXK0++w=
Subject key identifier:   2A:F1:5C:F1:11:52:8A:68:1F:51:60:DE:00:42:7D:8A:AC:35:AA:24
Certificate issuer:       /CN=D56A7C417268FD26AEFA48D4F454E7B1801BCF27
Certificate serial:       5F845946E5DC4046C49BCB5F83E9900D7DBBB952
Authority key identifier: D5:6A:7C:41:72:68:FD:26:AE:FA:48:D4:F4:54:E7:B1:80:1B:CF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/323830333a353664303a3a2f33322d3338203d3e20323734303937.roa
Signing time:             Tue 14 Jul 2026 16:52:39 +0000
ROA not before:           Tue 14 Jul 2026 16:47:39 +0000
ROA not after:            Tue 13 Jul 2027 16:52:39 +0000
asID:                     274097
IP address blocks:        2803:56d0::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:84:59:46:e5:dc:40:46:c4:9b:cb:5f:83:e9:90:0d:7d:bb:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56A7C417268FD26AEFA48D4F454E7B1801BCF27
        Validity
            Not Before: Jul 14 16:47:39 2026 GMT
            Not After : Jul 13 16:52:39 2027 GMT
        Subject: CN=2AF15CF111528A681F5160DE00427D8AAC35AA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:e0:aa:c2:5f:e7:cc:89:1e:b5:fd:fc:4b:
                    ba:1c:5a:5f:60:1b:fe:ea:e5:27:04:27:50:0c:4c:
                    f7:27:ab:24:06:d1:be:c2:b7:ca:3c:69:ea:df:9e:
                    62:c9:3a:9f:d4:7e:2b:40:3a:f1:0e:7b:4a:bb:90:
                    8a:d9:d6:0a:01:6b:49:c1:bc:67:09:8e:7a:99:47:
                    6e:5d:98:aa:e4:b1:c3:49:f9:99:4d:0b:5c:c0:a6:
                    c4:89:6b:6e:d4:0d:3a:ac:e8:72:11:3f:4f:25:d8:
                    60:aa:88:98:16:64:cc:c6:d0:7f:2d:1f:ea:94:cb:
                    9a:87:01:b2:61:96:97:dc:eb:d8:ca:1a:dc:a3:3a:
                    19:2a:ff:33:e6:8d:56:0d:b6:01:24:38:d0:55:b2:
                    fa:48:72:6b:23:6d:78:7c:f5:a3:ca:3a:02:7e:b7:
                    c1:06:c5:94:d1:d5:7d:16:35:f8:8c:15:e3:14:b3:
                    b4:4a:4e:3e:29:8b:56:36:aa:69:d7:af:1d:66:d5:
                    d1:f0:97:18:1c:1a:4a:00:19:55:02:65:68:19:49:
                    47:80:ea:a1:7d:ac:0f:ce:63:16:03:55:88:55:db:
                    4c:f5:85:90:60:9e:41:a5:60:de:9e:5a:f2:cf:6a:
                    c1:44:28:fd:1a:ec:6b:82:b5:d3:c4:13:50:67:e4:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:5C:F1:11:52:8A:68:1F:51:60:DE:00:42:7D:8A:AC:35:AA:24
            X509v3 Authority Key Identifier:
                keyid:D5:6A:7C:41:72:68:FD:26:AE:FA:48:D4:F4:54:E7:B1:80:1B:CF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/323830333a353664303a3a2f33322d3338203d3e20323734303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:e3:38:63:aa:c7:85:38:16:45:2a:af:19:ab:fd:4f:df:
         81:c8:8d:3c:4c:42:a8:73:2b:dc:6a:4d:48:b5:6d:21:d6:39:
         db:7e:d8:3e:0c:c4:17:36:13:63:13:42:42:53:a3:6b:56:f0:
         7c:c7:1f:2e:a1:4d:fb:8f:f8:8f:75:c7:4c:e4:45:50:58:6f:
         52:66:90:1d:21:65:9a:63:17:f8:32:d8:1f:95:39:38:5a:e4:
         4c:99:89:92:6f:b6:c5:25:cf:62:ae:c9:2b:5e:a4:29:4a:4e:
         60:38:fc:a1:80:38:71:95:6c:75:56:5c:98:61:5e:eb:07:67:
         c1:48:fd:60:48:9b:e6:de:f3:98:41:82:d5:eb:c2:55:cb:46:
         1f:c3:42:f2:06:5a:57:7c:4c:99:85:a9:a5:62:a9:4d:22:80:
         6a:ea:19:83:8e:f1:5f:ed:b2:68:b9:df:15:94:fd:6b:23:a7:
         b2:ca:c1:72:ba:78:86:36:b9:e6:48:78:d0:36:84:cc:ff:a2:
         f5:29:96:78:5d:57:0b:b8:22:c6:f8:d2:1e:7f:8c:77:da:02:
         3b:ac:5a:ee:9b:62:33:6b:cc:fe:c5:5e:cc:80:b8:33:67:8c:
         a7:9b:5d:d8:e0:c8:42:98:c4:83:8d:a9:00:29:ad:2a:7c:b4:
         6a:6d:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:50 2026 by rpki-client