Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e2037313935.roa
File:                     323830333a613835303a3a2f33322d3332203d3e2037313935.roa (raw, json)
Hash identifier:          PIY3hYcI4E0M2mfMN5AGg0PemYicVkge/Ud7kHoZ63c=
Subject key identifier:   B5:BD:6E:6F:12:4F:2B:4D:02:02:B3:0B:28:F3:E4:1C:E5:A9:24:C1
Certificate issuer:       /CN=56D44233415A00C655C5956535A315EB641D8195
Certificate serial:       0E63F77F1113534F215529D5AF784FB3DCFA8D84
Authority key identifier: 56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e2037313935.roa
Signing time:             Thu 23 Jul 2026 16:30:02 +0000
ROA not before:           Thu 23 Jul 2026 16:25:02 +0000
ROA not after:            Thu 22 Jul 2027 16:30:02 +0000
asID:                     7195
IP address blocks:        2803:a850::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:63:f7:7f:11:13:53:4f:21:55:29:d5:af:78:4f:b3:dc:fa:8d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D44233415A00C655C5956535A315EB641D8195
        Validity
            Not Before: Jul 23 16:25:02 2026 GMT
            Not After : Jul 22 16:30:02 2027 GMT
        Subject: CN=B5BD6E6F124F2B4D0202B30B28F3E41CE5A924C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:92:9c:b6:22:f8:2b:f9:05:26:5a:84:52:
                    ad:a5:60:ca:64:65:41:5d:c1:17:27:9b:11:96:5f:
                    1d:c4:ab:0b:8b:7b:46:b3:13:6a:86:fa:1f:27:b6:
                    d2:5a:f5:6b:cf:78:bf:d2:82:1d:b2:34:59:8d:ed:
                    1b:f8:94:87:e6:1a:1f:d9:8e:60:88:91:0a:40:b7:
                    39:cb:c0:52:0e:cb:a9:a5:79:a8:ef:15:f5:3c:92:
                    6b:41:85:90:0c:a8:ac:e0:a5:75:2a:92:a9:18:6c:
                    c2:d7:35:26:b3:3b:70:7d:06:98:ca:02:d8:1d:b0:
                    f2:80:6a:ff:06:d7:b6:21:da:03:3b:d1:48:f8:5e:
                    d0:7e:fa:86:1d:5c:51:7d:ed:8e:5e:43:64:37:20:
                    92:9f:80:d7:9f:3b:78:73:97:0f:bd:e1:30:ef:eb:
                    a3:8e:de:61:a4:26:a7:04:09:2a:5b:0f:12:5d:e7:
                    20:60:e4:b1:5f:d6:00:f9:31:20:38:7a:ee:57:c4:
                    67:c2:7a:b3:5f:b3:a3:92:43:b4:a3:f6:9c:76:0f:
                    db:bc:6c:34:34:44:cb:d1:c6:c2:e3:73:00:d9:98:
                    2b:00:f0:e3:de:f8:43:4a:02:09:8f:71:b4:bf:aa:
                    db:3b:98:a6:9c:2f:04:a0:43:98:f6:c2:91:5d:59:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:6E:6F:12:4F:2B:4D:02:02:B3:0B:28:F3:E4:1C:E5:A9:24:C1
            X509v3 Authority Key Identifier:
                keyid:56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:39:a5:f1:b9:60:57:24:a8:cd:8d:8a:6f:bf:f6:7f:a9:7d:
         74:ab:4d:ca:e9:52:58:b7:14:cf:5e:95:33:fe:a9:bf:ab:dd:
         43:fb:03:7c:7a:5b:04:1a:5d:91:d0:6a:94:c0:e7:b0:20:41:
         d2:a8:89:8c:54:c3:fa:a3:90:fe:9a:89:ba:53:3b:23:ff:cf:
         10:0e:35:93:d4:6f:f9:8b:35:fe:af:59:05:b8:d2:24:94:75:
         db:3d:61:a2:15:2c:f2:18:14:81:0a:d5:82:15:2a:6b:56:1a:
         c0:3f:fe:15:dd:0e:13:a2:29:88:ee:d3:e6:17:8d:6d:6f:0c:
         d4:18:dc:20:28:9d:da:56:2d:93:9a:07:d2:7c:47:57:a7:77:
         ba:2b:90:9d:a8:3a:21:48:4a:f4:24:ab:bc:51:65:ed:49:3a:
         da:7c:4c:7b:9b:de:f9:1b:ee:3d:3f:35:a2:5f:1e:dd:a9:8c:
         3c:b5:33:d2:3a:37:53:db:1c:5c:15:16:fc:c3:db:1a:4c:84:
         a3:32:f5:cf:a2:19:2e:9d:29:bd:69:6e:4f:a0:e0:65:25:30:
         43:37:b6:d9:88:8a:87:d4:da:c8:aa:c6:7e:e2:60:d4:de:80:
         e7:72:62:7e:f2:43:d8:c0:45:21:ea:b3:34:c5:c5:27:43:9a:
         09:f4:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:44:52 2026 by rpki-client