Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d313230203d3e20323633373330.roa
File:                     323830333a326238303a3a2f33322d313230203d3e20323633373330.roa (raw, json)
Hash identifier:          KpUiwV3Cso7UPXrH3A9VrFnKl5J2Z2tjfKoSIR4sOmU=
Subject key identifier:   42:BE:32:A1:62:1E:BE:C0:A8:5B:45:BC:C8:FE:3B:AD:FE:D2:20:B0
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       796B29FBE1FE6367BB2494005D2586745A2D78D7
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d313230203d3e20323633373330.roa
Signing time:             Fri 03 Jul 2026 14:50:48 +0000
ROA not before:           Fri 03 Jul 2026 14:45:48 +0000
ROA not after:            Fri 02 Jul 2027 14:50:48 +0000
asID:                     263730
IP address blocks:        2803:2b80::/32 maxlen: 120
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6b:29:fb:e1:fe:63:67:bb:24:94:00:5d:25:86:74:5a:2d:78:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Jul  3 14:45:48 2026 GMT
            Not After : Jul  2 14:50:48 2027 GMT
        Subject: CN=42BE32A1621EBEC0A85B45BCC8FE3BADFED220B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:5e:52:d8:b4:58:ea:dd:66:f3:98:04:82:
                    d6:04:49:14:9a:97:de:1e:75:70:c2:75:f8:e4:b6:
                    bb:44:16:2e:cf:a7:5a:72:1e:79:48:e8:34:09:51:
                    e5:bd:68:e3:58:b7:1f:af:e9:39:ec:ac:8a:4a:4f:
                    8a:b0:0a:6f:4e:97:13:84:c8:ac:39:06:46:48:b8:
                    00:9a:03:11:c5:70:43:f9:f7:ff:15:d2:d6:eb:54:
                    a6:89:5f:2a:ed:98:fd:fd:e1:d3:f4:b3:b8:be:80:
                    6b:de:46:f3:a2:b7:14:1b:82:e0:bd:d5:7f:35:55:
                    ee:f7:84:da:9f:4d:ae:3b:44:8f:96:76:86:14:f8:
                    c0:9e:84:08:74:53:81:4b:cc:4a:d5:fc:a1:10:e1:
                    7c:95:10:b6:e3:a1:f8:c1:1e:ff:7e:9e:62:5a:ef:
                    0c:0a:8e:64:ab:b8:4f:f0:f2:7d:de:3d:f2:cd:a5:
                    5f:40:ac:21:98:ac:77:13:84:ba:47:82:3f:72:7b:
                    8f:46:95:54:68:ad:44:f5:66:55:6a:dc:83:69:af:
                    43:92:6f:89:8d:7f:63:b1:50:97:ae:2f:6e:da:7c:
                    31:3a:6c:ca:ad:93:4c:65:dd:82:4a:c9:e6:dc:8c:
                    94:a7:da:4d:5c:b5:59:17:9e:3e:40:91:9f:82:0b:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:32:A1:62:1E:BE:C0:A8:5B:45:BC:C8:FE:3B:AD:FE:D2:20:B0
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d313230203d3e20323633373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:4a:e6:d4:1c:ae:25:8f:5f:ac:ae:67:2e:54:ae:40:07:
         e1:75:fb:ba:95:ce:33:c4:e6:93:a5:6e:e0:ff:22:97:d7:7d:
         4a:7c:31:64:fd:43:36:ec:b7:47:2b:13:a2:95:5d:a4:4e:30:
         cb:41:4b:74:5d:d6:65:8a:b0:26:62:80:aa:ca:03:98:35:db:
         d0:7b:e1:e6:18:64:c3:3f:e2:b6:fe:11:72:6e:aa:a2:9c:54:
         ee:fa:81:b4:03:95:c0:fe:a0:ca:12:db:45:d2:cb:47:9b:b1:
         00:c1:86:c7:cf:69:90:5b:ec:76:07:ca:ba:eb:50:40:ea:bc:
         b6:2f:3f:bd:99:97:dd:1f:0a:ec:26:fb:d5:bb:05:49:62:ef:
         e0:52:20:cf:b6:1c:9a:44:73:ab:3c:32:86:90:fb:53:6a:0b:
         ec:45:fc:fd:37:bc:4e:6e:d5:f5:1c:32:e5:29:82:c2:02:9d:
         dc:56:15:e0:16:dc:5e:f9:9a:7a:8b:63:c2:cb:8f:79:77:aa:
         21:53:1d:df:83:2b:2a:66:eb:fd:99:71:5a:87:b4:40:b0:eb:
         e3:cf:cf:46:32:64:5c:34:1f:90:77:cc:4b:6d:19:f2:78:c7:
         87:e5:6a:a0:4d:f4:62:da:d1:fb:67:71:82:f8:9f:3e:c4:25:
         df:0d:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:59:55 2026 by rpki-client