Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/323830333a613533303a3a2f33322d3332203d3e20323734393635.roa
File:                     323830333a613533303a3a2f33322d3332203d3e20323734393635.roa (raw, json)
Hash identifier:          VpITsrSe3pmJ+kqtiC9dgZDh49xEID0AXKMZjfDx1Gk=
Subject key identifier:   2F:22:A0:C4:EF:DE:61:87:5C:C3:EA:BA:1E:7B:FA:57:29:D5:12:8A
Certificate issuer:       /CN=7489502E9C93E7627B8B1E82253DDAD215C92549
Certificate serial:       7D1FC5DC213A2476771F700E8D89EC18B1D32ED8
Authority key identifier: 74:89:50:2E:9C:93:E7:62:7B:8B:1E:82:25:3D:DA:D2:15:C9:25:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7489502E9C93E7627B8B1E82253DDAD215C92549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/323830333a613533303a3a2f33322d3332203d3e20323734393635.roa
Signing time:             Fri 26 Jun 2026 03:00:00 +0000
ROA not before:           Fri 26 Jun 2026 02:55:00 +0000
ROA not after:            Fri 25 Jun 2027 03:00:00 +0000
asID:                     274965
IP address blocks:        2803:a530::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/7489502E9C93E7627B8B1E82253DDAD215C92549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/7489502E9C93E7627B8B1E82253DDAD215C92549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7489502E9C93E7627B8B1E82253DDAD215C92549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1f:c5:dc:21:3a:24:76:77:1f:70:0e:8d:89:ec:18:b1:d3:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7489502E9C93E7627B8B1E82253DDAD215C92549
        Validity
            Not Before: Jun 26 02:55:00 2026 GMT
            Not After : Jun 25 03:00:00 2027 GMT
        Subject: CN=2F22A0C4EFDE61875CC3EABA1E7BFA5729D5128A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:48:fa:5e:d4:3a:97:1b:9b:06:9a:93:07:26:
                    4e:c5:cd:53:4d:5e:d3:56:fd:84:50:c6:99:8d:5c:
                    01:93:4d:2e:fc:98:d3:3d:08:4a:4f:23:81:b9:ff:
                    f8:7b:7d:75:83:09:ec:77:4f:33:5f:b4:4c:99:05:
                    76:99:3f:e6:25:cc:49:8e:50:26:c5:6e:00:aa:b5:
                    92:3e:ec:73:94:f1:0c:7a:37:3d:9d:66:f2:3d:3f:
                    75:fe:6c:5d:0f:c6:c2:b8:bd:f9:e8:fe:aa:1c:21:
                    a4:9a:1d:ec:cd:56:7e:bf:22:18:22:23:38:c7:a5:
                    d4:bc:e0:72:4b:6c:16:86:87:a5:12:6a:05:8c:9c:
                    9f:85:c7:0a:99:30:e7:5f:a2:47:7e:7d:e8:b8:99:
                    80:35:3f:7b:0e:fb:90:87:36:4a:05:86:5a:4e:0b:
                    a5:1b:01:ef:fc:46:0d:9c:42:99:91:d7:fc:ae:4a:
                    9e:16:ca:6b:0d:9f:2f:77:f2:09:7c:c4:43:c3:6a:
                    b9:63:22:ed:63:bf:2d:8e:a1:84:08:74:33:18:cc:
                    38:b0:6f:08:f2:ee:52:06:13:93:9f:15:f0:a7:d2:
                    03:ef:ef:12:25:1a:89:4a:e6:ed:06:93:5d:c0:2d:
                    ca:37:79:85:d4:34:65:b2:da:4e:d6:62:04:01:18:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:A0:C4:EF:DE:61:87:5C:C3:EA:BA:1E:7B:FA:57:29:D5:12:8A
            X509v3 Authority Key Identifier:
                keyid:74:89:50:2E:9C:93:E7:62:7B:8B:1E:82:25:3D:DA:D2:15:C9:25:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/7489502E9C93E7627B8B1E82253DDAD215C92549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7489502E9C93E7627B8B1E82253DDAD215C92549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/323830333a613533303a3a2f33322d3332203d3e20323734393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a530::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:99:27:a0:e8:25:4a:f8:1a:92:33:ee:59:49:eb:4c:59:ec:
         d6:59:23:eb:18:02:b6:a5:53:91:fa:f4:be:54:a8:43:8f:1f:
         97:20:43:ec:5a:ad:73:d3:39:45:a6:8f:67:ca:55:71:8a:55:
         c8:32:34:92:51:3c:36:c7:4d:d5:cd:2c:39:d4:eb:14:54:67:
         c6:59:18:69:2d:81:44:1a:70:21:46:d2:e7:f7:19:77:73:8d:
         98:d7:a6:5b:e3:90:fc:74:d7:c2:49:00:14:92:32:e3:94:2e:
         13:f0:f2:14:21:70:c5:e2:aa:39:b1:3a:23:95:2d:21:0e:2e:
         57:22:62:d3:5d:6d:80:06:6a:33:7c:89:74:83:00:1c:a8:cc:
         6c:03:54:b9:24:fe:1c:51:81:8f:1c:eb:82:6c:55:79:73:8c:
         99:06:5b:5a:49:67:a7:31:23:ec:ff:e5:81:8a:c0:66:69:49:
         a9:db:a1:78:47:98:ef:d7:45:91:11:37:b0:e8:19:31:e4:ee:
         15:f8:48:3a:9c:5a:f6:71:09:7b:7d:d1:63:9a:fb:9b:1f:6a:
         d2:af:98:e4:07:87:1c:6c:ce:32:fe:c1:71:e0:a5:e6:95:ec:
         fc:cd:d2:a2:34:e1:51:64:ad:6a:a9:6d:63:b0:a6:3a:ef:2d:
         a5:5b:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:20:47 2026 by rpki-client