Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa
File:                     323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa (raw, json)
Hash identifier:          g54llAgtqNPWXBZjwxu/wC+unRsUVbEv2vqiPwQZ6d8=
Subject key identifier:   D5:9F:6C:C5:15:7F:3D:28:6B:6E:87:5A:4B:10:5F:37:22:D6:EB:78
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       423550492E1630E8ACB8D1DA3614AA4C5A6320E1
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa
Signing time:             Thu 05 Mar 2026 19:33:03 +0000
ROA not before:           Thu 05 Mar 2026 19:28:03 +0000
ROA not after:            Thu 04 Mar 2027 19:33:03 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 08:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:50:49:2e:16:30:e8:ac:b8:d1:da:36:14:aa:4c:5a:63:20:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 19:28:03 2026 GMT
            Not After : Mar  4 19:33:03 2027 GMT
        Subject: CN=D59F6CC5157F3D286B6E875A4B105F3722D6EB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:14:3b:93:9a:6d:64:27:d7:c5:e3:7b:a8:
                    69:8b:ab:38:2e:8c:7e:98:c5:10:42:ec:f1:13:24:
                    d6:2d:b6:64:fc:80:1f:da:43:3d:4b:f2:e7:ba:be:
                    96:60:3e:7c:9d:a3:bf:77:ec:4f:8d:c1:ff:5b:32:
                    f3:72:87:8c:09:f4:d4:76:85:42:b5:d4:e3:e6:8a:
                    96:46:00:2b:32:3b:e1:a0:f3:3f:34:02:32:d2:b1:
                    a0:fc:89:1a:d4:b5:72:d4:86:25:0f:6c:73:ee:54:
                    84:f8:48:b9:4e:c4:41:f9:33:8a:9b:2c:24:79:9f:
                    b9:af:eb:ef:d8:f3:7f:86:08:c2:f5:6b:70:b9:b2:
                    1d:34:e8:9b:1c:6e:fb:5b:34:8b:2d:59:b0:01:5a:
                    48:17:bb:9e:37:47:10:46:45:dd:0d:ef:31:b6:ee:
                    c2:9c:d1:b6:04:94:f7:8b:a1:47:cf:91:ab:7a:a7:
                    68:d6:34:61:28:69:c5:cb:99:41:79:ed:c3:a2:00:
                    cd:33:ff:0e:f4:6e:23:0b:39:86:ca:a3:99:24:a2:
                    6a:0d:c7:92:14:84:73:bd:22:df:04:78:f7:d6:e8:
                    e9:dd:db:4a:95:34:e5:f7:02:34:92:05:f9:42:94:
                    60:9f:0a:8f:14:d3:6a:86:1f:6a:ba:90:05:09:c1:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:6C:C5:15:7F:3D:28:6B:6E:87:5A:4B:10:5F:37:22:D6:EB:78
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:6d:6c:09:94:8c:19:d7:22:0d:22:2c:91:28:86:01:85:
         31:ea:01:a8:9a:f1:3a:34:fc:4f:8f:59:e2:d1:51:68:73:9f:
         e5:23:7a:d6:21:2b:7c:d8:21:d6:60:7b:5e:25:e4:b9:de:bf:
         fb:1b:d9:0e:7e:4c:c0:f5:4a:e2:33:7d:27:16:cf:f8:c6:c1:
         87:5b:7c:c8:a4:d5:c7:a2:f4:80:23:f6:eb:c6:7a:c6:9a:c0:
         48:b6:9a:a7:a5:75:9c:70:0d:73:6b:4c:18:5e:7a:f7:7b:c7:
         83:91:7e:5f:43:33:4a:4f:7f:87:b5:d4:f2:12:c9:6b:15:af:
         5c:c3:66:4f:87:3c:cc:46:96:1a:bc:79:c1:d5:de:41:ec:b8:
         dd:3e:46:77:e7:2c:de:5b:9f:89:c5:c1:d6:09:c1:69:58:f6:
         13:66:f0:80:bc:b9:b3:d6:90:66:36:19:df:65:9a:60:5e:bd:
         07:3f:91:24:e9:a5:81:bc:7c:0a:3e:76:49:b5:7c:0e:77:ee:
         9a:72:db:0d:d1:1f:96:56:43:ee:1e:e4:b7:ed:e6:7f:cf:dd:
         b8:9b:73:21:11:0c:12:89:cf:0d:8a:fe:ef:c5:7d:cd:a1:89:
         55:2b:a1:f2:cf:37:ce:80:b3:85:6d:12:35:df:68:a8:fc:26:
         bf:4a:0e:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:33:13 2026 by rpki-client