Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e203634313238.roa
File:                     323830333a613835303a3a2f33322d3332203d3e203634313238.roa (raw, json)
Hash identifier:          klzTjp/Eft9tR3SvWNDv/vmdLQz+fg+fLxSCZV9gE9w=
Subject key identifier:   3B:40:02:8C:7F:9B:A4:52:C0:18:45:2F:9D:1A:5D:D0:DB:31:AD:AC
Certificate issuer:       /CN=56D44233415A00C655C5956535A315EB641D8195
Certificate serial:       747942F79A32B46BBDFB7A4D628223222DB6F3BC
Authority key identifier: 56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e203634313238.roa
Signing time:             Fri 24 Jul 2026 14:10:00 +0000
ROA not before:           Fri 24 Jul 2026 14:05:00 +0000
ROA not after:            Fri 23 Jul 2027 14:10:00 +0000
asID:                     64128
IP address blocks:        2803:a850::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:79:42:f7:9a:32:b4:6b:bd:fb:7a:4d:62:82:23:22:2d:b6:f3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D44233415A00C655C5956535A315EB641D8195
        Validity
            Not Before: Jul 24 14:05:00 2026 GMT
            Not After : Jul 23 14:10:00 2027 GMT
        Subject: CN=3B40028C7F9BA452C018452F9D1A5DD0DB31ADAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:46:26:7c:f3:09:ab:1e:e9:ac:93:8c:b2:
                    d6:23:0f:5c:53:fb:a8:a9:e3:bb:5e:89:05:33:1a:
                    e5:89:27:d3:2e:ee:ff:19:6f:06:16:15:eb:d9:cf:
                    5c:b2:e6:a9:65:85:62:c2:0a:a6:ff:7b:04:d4:83:
                    86:38:ff:48:09:f5:54:e5:46:20:68:75:76:99:bc:
                    9a:94:0b:ca:02:b2:1a:d4:29:d1:77:dd:f4:ee:da:
                    e8:b3:26:28:0b:e8:54:70:6f:09:2b:b9:db:4d:14:
                    af:98:ef:5c:65:39:91:32:cf:43:f1:e0:9c:fa:43:
                    16:3f:7f:0b:95:a5:4b:81:ab:71:da:d7:34:85:cf:
                    8f:f1:9c:9f:5d:2c:53:b4:ae:7a:6b:9f:8b:a8:f7:
                    11:78:6b:79:ce:c8:e4:42:94:34:8e:fc:2f:ab:b7:
                    0c:d7:b8:b4:c0:9d:bd:4e:e2:11:5c:52:e8:13:06:
                    48:40:93:31:8b:1c:97:08:b3:89:11:a7:1f:f1:e5:
                    45:5c:43:1f:d9:67:e6:6b:ef:31:71:6c:dc:d0:da:
                    f2:cf:a3:dd:75:0d:d1:c9:85:82:59:c2:ff:ac:18:
                    a2:b8:bf:d2:56:84:d2:08:47:e9:84:40:ab:96:b9:
                    7e:97:1e:b1:d1:c5:fc:66:1b:93:fb:a8:57:91:50:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:02:8C:7F:9B:A4:52:C0:18:45:2F:9D:1A:5D:D0:DB:31:AD:AC
            X509v3 Authority Key Identifier:
                keyid:56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e203634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:95:48:61:c0:05:20:5a:41:88:e4:51:3f:ea:b2:87:e4:
         17:de:fc:85:a1:67:27:d3:e7:86:11:aa:cb:29:b8:84:26:1e:
         50:2e:5f:28:05:42:97:df:ec:8f:11:9c:5e:48:c1:6a:b3:a4:
         01:d0:b8:26:20:69:1f:86:6d:a7:4a:8b:2a:c3:6f:28:48:09:
         94:28:c0:61:5a:13:2d:7b:6b:05:18:b0:6a:6d:61:e2:95:14:
         ca:d1:d4:a4:07:31:57:80:03:75:b6:42:42:39:01:eb:a5:8d:
         5f:98:8d:48:06:57:06:e0:1f:93:1d:09:1a:f1:05:ca:6e:7e:
         ca:2f:d2:7c:36:22:69:c1:6a:67:82:8e:26:5e:5d:20:ad:3a:
         ba:a4:71:e5:0e:e6:58:3f:b5:69:e1:07:a1:11:6d:d5:10:39:
         11:2e:22:3b:80:15:5d:cf:5c:8d:97:ab:9b:95:a0:ab:ce:b0:
         2b:64:79:cd:5b:cd:dc:7b:87:db:62:df:88:c2:75:2f:2d:fb:
         bf:e9:d8:40:9d:26:11:13:74:e3:a2:df:80:61:b6:ac:ed:7c:
         1b:81:49:46:52:07:f9:2f:ea:9b:84:8a:78:8e:95:3d:da:e8:
         99:ef:d6:d4:d3:00:3c:27:78:d0:ab:0c:43:b1:32:41:f8:07:
         4e:8c:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:27 2026 by rpki-client