Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3438203d3e20323734383437.roa
File:                     323830333a376333303a3a2f33322d3438203d3e20323734383437.roa (raw, json)
Hash identifier:          S6A1T/ZOBlcuITpBvbNRyHTDn11hyWrgNST6+v9wcj8=
Subject key identifier:   B0:C7:B0:C6:36:10:A5:FA:18:14:D5:EF:15:F3:C3:2D:4C:ED:5C:D4
Certificate issuer:       /CN=5E296EA1742C1394B5C187CC33207F54BB54EAF7
Certificate serial:       04D197F3ECA178CACB99447D8699F7CB40A55820
Authority key identifier: 5E:29:6E:A1:74:2C:13:94:B5:C1:87:CC:33:20:7F:54:BB:54:EA:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3438203d3e20323734383437.roa
Signing time:             Thu 21 May 2026 12:10:00 +0000
ROA not before:           Thu 21 May 2026 12:05:00 +0000
ROA not after:            Thu 20 May 2027 12:10:00 +0000
asID:                     274847
IP address blocks:        2803:7c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d1:97:f3:ec:a1:78:ca:cb:99:44:7d:86:99:f7:cb:40:a5:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E296EA1742C1394B5C187CC33207F54BB54EAF7
        Validity
            Not Before: May 21 12:05:00 2026 GMT
            Not After : May 20 12:10:00 2027 GMT
        Subject: CN=B0C7B0C63610A5FA1814D5EF15F3C32D4CED5CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:60:2d:ec:60:fb:b0:fc:96:75:53:e5:9b:
                    9f:dc:7b:69:1e:98:49:43:94:35:9e:e9:d8:6e:3d:
                    5d:2b:05:89:d2:a3:8c:d3:fa:4c:42:2b:a1:e3:da:
                    22:ac:f5:32:90:e6:12:cc:99:d3:42:7c:3e:7c:91:
                    50:14:93:78:cb:77:f4:aa:ae:a5:19:31:84:0b:b0:
                    20:6c:f2:f8:08:8b:9a:7e:28:1d:a8:ab:3d:d4:b7:
                    44:85:f0:b4:ad:86:bd:b4:a6:99:1e:35:90:5f:18:
                    f1:1c:36:5d:e9:08:95:a9:c0:0a:0d:78:44:28:16:
                    b7:4e:06:73:22:85:9a:ac:a5:d2:8f:90:76:65:c3:
                    9f:28:a7:7c:6b:7b:13:5a:b1:cc:71:1f:e5:ac:0c:
                    70:30:26:77:89:81:d4:15:ff:e3:dd:34:6f:20:92:
                    48:17:52:77:c8:3d:32:50:97:68:a5:6f:50:7a:1d:
                    3d:82:67:3a:79:74:2c:44:14:93:42:ed:41:32:0f:
                    0c:fc:b5:3b:44:b3:79:d7:b0:b8:e4:72:ce:5d:ca:
                    e6:14:d0:73:fe:5d:0a:f3:cf:78:6c:21:71:54:de:
                    10:59:4b:0c:55:cc:26:cb:28:6b:22:d2:80:58:d5:
                    b7:a8:86:3f:4b:01:38:c2:4d:c9:f7:c5:ae:8a:36:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:B0:C6:36:10:A5:FA:18:14:D5:EF:15:F3:C3:2D:4C:ED:5C:D4
            X509v3 Authority Key Identifier:
                keyid:5E:29:6E:A1:74:2C:13:94:B5:C1:87:CC:33:20:7F:54:BB:54:EA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E296EA1742C1394B5C187CC33207F54BB54EAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB51FF4E11A3F9733D6A7BC21BF4189482D821EDE7382B62AA4AE29356ACB87/0/323830333a376333303a3a2f33322d3438203d3e20323734383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:7a:2e:71:4d:98:1c:31:c3:5a:23:51:ef:99:f6:d7:a4:
         44:57:57:02:91:51:5f:96:71:3a:97:c2:38:75:64:e2:07:93:
         3b:e6:3f:bf:47:bd:e1:86:e6:20:a9:d5:a4:b0:c0:c6:b5:1b:
         7a:b6:8c:2c:06:5b:32:78:75:43:54:90:8a:cb:8a:d6:6c:ea:
         49:a9:cd:b8:f4:d3:31:04:99:fd:f3:d7:b7:ef:20:67:ca:e1:
         f6:4e:38:bd:23:a6:d8:22:00:f2:62:5d:23:bc:8f:8f:02:9f:
         b0:ae:70:76:e6:e9:a9:c8:2b:74:f5:8e:b7:ca:26:4b:3d:d2:
         f9:a6:69:96:53:94:d2:a9:f2:af:d6:69:46:bd:fb:0c:78:01:
         18:6c:16:e1:74:a5:73:26:f7:4c:bb:e3:85:07:c3:7c:95:c5:
         a4:b6:78:d2:c6:3f:08:56:c4:f4:3e:2d:76:07:20:51:57:78:
         41:37:05:71:a8:71:a9:72:31:78:1e:ea:46:43:4d:cd:63:82:
         78:26:66:fa:cb:3d:02:76:0c:d3:10:57:70:3f:16:d8:40:76:
         19:cb:49:fc:d4:41:93:4a:b5:c5:13:1a:cd:de:19:36:d3:3b:
         1e:13:3f:26:3a:4a:57:74:a3:7c:b2:5a:cb:9f:5f:7c:08:4d:
         51:fe:c2:28
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBNGX8+yheMrLmUR9hpn3y0ClWCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUyOTZFQTE3NDJDMTM5NEI1QzE4N0NDMzMyMDdGNTRC
QjU0RUFGNzAeFw0yNjA1MjExMjA1MDBaFw0yNzA1MjAxMjEwMDBaMDMxMTAvBgNV
BAMTKEIwQzdCMEM2MzYxMEE1RkExODE0RDVFRjE1RjNDMzJENENFRDVDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2mAt7GD7sPyWdVPlm5/ce2ke
mElDlDWe6dhuPV0rBYnSo4zT+kxCK6Hj2iKs9TKQ5hLMmdNCfD58kVAUk3jLd/Sq
rqUZMYQLsCBs8vgIi5p+KB2oqz3Ut0SF8LSthr20ppkeNZBfGPEcNl3pCJWpwAoN
eEQoFrdOBnMihZqspdKPkHZlw58op3xrexNascxxH+WsDHAwJneJgdQV/+PdNG8g
kkgXUnfIPTJQl2ilb1B6HT2CZzp5dCxEFJNC7UEyDwz8tTtEs3nXsLjkcs5dyuYU
0HP+XQrzz3hsIXFU3hBZSwxVzCbLKGsi0oBY1beohj9LATjCTcn3xa6KNtP1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUsMewxjYQpfoYFNXvFfPDLUztXNQwHwYDVR0j
BBgwFoAUXiluoXQsE5S1wYfMMyB/VLtU6vcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkI1MUZGNEUxMUEzRjk3MzNENkE3QkMyMUJGNDE4OTQ4
MkQ4MjFFREU3MzgyQjYyQUE0QUUyOTM1NkFDQjg3LzAvNUUyOTZFQTE3NDJDMTM5
NEI1QzE4N0NDMzMyMDdGNTRCQjU0RUFGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTI5NkVBMTc0MkMxMzk0QjVD
MTg3Q0MzMzIwN0Y1NEJCNTRFQUY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCNTFGRjRFMTFBM0Y5NzMzRDZBN0JDMjFCRjQxODk0ODJEODIxRURF
NzM4MkI2MkFBNEFFMjkzNTZBQ0I4Ny8wLzMyMzgzMDMzM2EzNzYzMzMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDM4MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDfDAw
DQYJKoZIhvcNAQELBQADggEBAIqoei5xTZgcMcNaI1HvmfbXpERXVwKRUV+WcTqX
wjh1ZOIHkzvmP79HveGG5iCp1aSwwMa1G3q2jCwGWzJ4dUNUkIrLitZs6kmpzbj0
0zEEmf3z17fvIGfK4fZOOL0jptgiAPJiXSO8j48Cn7CucHbm6anIK3T1jrfKJks9
0vmmaZZTlNKp8q/WaUa9+wx4ARhsFuF0pXMm90y744UHw3yVxaS2eNLGPwhWxPQ+
LXYHIFFXeEE3BXGocalyMXge6kZDTc1jgngmZvrLPQJ2DNMQV3A/FthAdhnLSfzU
QZNKtcUTGs3eGTbTOx4TPyY6Sld0o3yyWsufX3wITVH+wig=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:53:33 2026 by rpki-client