Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
File:                     323830333a356632303a3a2f33322d3332203d3e20323636383030.roa (raw, json)
Hash identifier:          JEbjaiEuHJFbg16ARvYkOgIvcja5ebisAu6LQs8L79Y=
Subject key identifier:   D2:2C:50:40:B4:1E:1E:FD:3C:57:91:DA:A9:8F:6E:16:7F:26:B2:48
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       38C6489808EC55B73C04DF244F3AF71DE6381781
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
Signing time:             Wed 20 May 2026 15:43:25 +0000
ROA not before:           Wed 20 May 2026 15:38:25 +0000
ROA not after:            Wed 19 May 2027 15:43:25 +0000
asID:                     266800
IP address blocks:        2803:5f20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c6:48:98:08:ec:55:b7:3c:04:df:24:4f:3a:f7:1d:e6:38:17:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: May 20 15:38:25 2026 GMT
            Not After : May 19 15:43:25 2027 GMT
        Subject: CN=D22C5040B41E1EFD3C5791DAA98F6E167F26B248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:74:9a:ba:1c:6d:49:e4:ab:cd:dd:92:78:
                    ab:d4:0a:e4:f9:98:dc:cf:f1:42:c9:ca:38:36:01:
                    5a:bb:28:d9:ee:5a:b7:f1:0c:49:e2:e4:48:96:08:
                    c3:8b:28:fa:ab:71:a2:84:1a:f8:6b:8a:c9:67:61:
                    a4:bf:07:d2:b7:f0:aa:d5:36:25:d0:0b:2d:12:ea:
                    22:e5:71:33:80:06:c4:35:df:93:50:6a:12:43:7b:
                    aa:64:6d:0a:83:77:df:3e:be:49:1d:20:1a:2f:af:
                    11:d8:96:58:8c:38:ba:ad:7b:d0:24:93:cb:b6:4b:
                    3b:48:f9:74:36:ab:77:09:54:c9:be:8f:3e:f8:2b:
                    de:27:5a:2d:2c:87:12:eb:9f:73:e2:a9:0b:fa:0a:
                    aa:f5:ec:eb:a5:69:d4:d3:33:d1:31:a0:a3:d5:d3:
                    da:00:b6:14:d8:21:8c:14:24:6a:97:08:2e:dc:58:
                    b8:6c:c5:f1:e7:63:07:6a:dc:03:48:8b:86:ab:d2:
                    65:a3:7a:14:3e:e5:45:11:9b:d3:a2:b2:52:1e:e3:
                    0e:9f:e3:96:18:2e:6b:dd:45:e9:6a:8a:b2:ca:3c:
                    55:6a:f5:6e:50:83:80:2c:89:ee:64:3a:aa:2e:b1:
                    8d:ab:39:55:1c:f9:3e:13:b0:8c:21:36:1f:a3:3a:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2C:50:40:B4:1E:1E:FD:3C:57:91:DA:A9:8F:6E:16:7F:26:B2:48
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:dc:32:47:13:4c:8d:6c:b6:e4:92:06:44:25:35:9a:81:
         99:04:76:6c:52:12:b3:87:bb:72:66:73:58:03:e2:5d:02:a6:
         81:8e:de:aa:43:7e:ca:c6:20:92:10:41:48:9f:d3:d2:c7:56:
         ce:3e:bb:bf:c3:27:29:c4:65:20:fe:e7:57:e4:88:be:5d:8e:
         fd:95:18:84:69:c9:2b:db:9e:3d:ae:a4:16:2d:49:c9:43:f2:
         28:59:87:85:af:2c:91:6f:f4:68:71:41:a4:dd:58:57:de:4a:
         9d:4b:a8:b2:45:20:36:0a:c0:90:8e:45:f0:a4:7a:9a:d4:c2:
         08:f0:bd:5a:ae:d4:63:c7:9a:1b:22:45:04:06:f8:8c:e0:1c:
         48:e3:ab:6c:76:5d:8a:de:5b:ee:3e:c6:cd:bd:4f:1e:41:e1:
         d1:fe:c7:bf:09:db:21:98:35:44:42:be:09:c2:29:13:7f:5f:
         15:d8:8a:36:3d:b6:ff:96:de:85:c1:2e:50:f1:aa:f1:ee:3a:
         3c:30:bf:37:8b:9b:a4:3e:0e:e6:de:5a:f1:01:ea:03:3f:32:
         3c:47:bc:79:b3:ff:d2:b2:5e:68:5c:16:83:58:eb:23:7c:4a:
         3d:6e:79:a0:a5:19:86:e5:65:e8:dd:cd:ca:90:e8:11:05:56:
         15:0f:3d:7b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOMZImAjsVbc8BN8kTzr3HeY4F4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNUY1NUUzOTAwMUVGMjRENjU4NDMwRUIzQTUwMEQ4
MEU0MDM0ODAeFw0yNjA1MjAxNTM4MjVaFw0yNzA1MTkxNTQzMjVaMDMxMTAvBgNV
BAMTKEQyMkM1MDQwQjQxRTFFRkQzQzU3OTFEQUE5OEY2RTE2N0YyNkIyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRLXSauhxtSeSrzd2SeKvUCuT5
mNzP8ULJyjg2AVq7KNnuWrfxDEni5EiWCMOLKPqrcaKEGvhrislnYaS/B9K38KrV
NiXQCy0S6iLlcTOABsQ135NQahJDe6pkbQqDd98+vkkdIBovrxHYlliMOLqte9Ak
k8u2SztI+XQ2q3cJVMm+jz74K94nWi0shxLrn3PiqQv6Cqr17OuladTTM9ExoKPV
09oAthTYIYwUJGqXCC7cWLhsxfHnYwdq3ANIi4ar0mWjehQ+5UURm9OislIe4w6f
45YYLmvdRelqirLKPFVq9W5Qg4Asie5kOqousY2rOVUc+T4TsIwhNh+jOvTJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0ixQQLQeHv08V5HaqY9uFn8mskgwHwYDVR0j
BBgwFoAU5eX1XjkAHvJNZYQw6zpQDYDkA0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRUVDRTU0MTJDQjA1NzgzRjE0NDQxQzkzQzJEMUY2MkM1
NDRCOTE3RUFGREY3NTY1NUI0QTg5NkUwN0RFMjE5LzAvRTVFNUY1NUUzOTAwMUVG
MjRENjU4NDMwRUIzQTUwMEQ4MEU0MDM0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUU1RjU1RTM5MDAxRUYyNEQ2
NTg0MzBFQjNBNTAwRDgwRTQwMzQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEVFQ0U1NDEyQ0IwNTc4M0YxNDQ0MUM5M0MyRDFGNjJDNTQ0QjkxN0VB
RkRGNzU2NTVCNEE4OTZFMDdERTIxOS8wLzMyMzgzMDMzM2EzNTY2MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDXyAw
DQYJKoZIhvcNAQELBQADggEBAKDK3DJHE0yNbLbkkgZEJTWagZkEdmxSErOHu3Jm
c1gD4l0CpoGO3qpDfsrGIJIQQUif09LHVs4+u7/DJynEZSD+51fkiL5djv2VGIRp
ySvbnj2upBYtSclD8ihZh4WvLJFv9GhxQaTdWFfeSp1LqLJFIDYKwJCORfCkeprU
wgjwvVqu1GPHmhsiRQQG+IzgHEjjq2x2XYreW+4+xs29Tx5B4dH+x78J2yGYNURC
vgnCKRN/XxXYijY9tv+W3oXBLlDxqvHuOjwwvzeLm6Q+DubeWvEB6gM/MjxHvHmz
/9KyXmhcFoNY6yN8Sj1ueaClGYblZejdzcqQ6BEFVhUPPXs=
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:02:01 2026 by rpki-client