Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa
File:                     323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa (raw, json)
Hash identifier:          y3KjlNJ0bm0F4QoKyPCfQxX6NT4TkBREC0Lzoc8BQH8=
Subject key identifier:   A9:79:14:A8:D7:D8:89:C0:6B:1B:AB:02:A9:93:C3:B3:A4:B7:9E:03
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7E2C1C6547BC74B0FF2489A09E5C4B39EA539B29
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa
Signing time:             Mon 16 Feb 2026 15:30:46 +0000
ROA not before:           Mon 16 Feb 2026 15:25:46 +0000
ROA not after:            Mon 15 Feb 2027 15:30:46 +0000
asID:                     7777
IP address blocks:        2001:13c7:7001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 21:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:1c:65:47:bc:74:b0:ff:24:89:a0:9e:5c:4b:39:ea:53:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb 16 15:25:46 2026 GMT
            Not After : Feb 15 15:30:46 2027 GMT
        Subject: CN=A97914A8D7D889C06B1BAB02A993C3B3A4B79E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:84:ea:01:08:09:45:71:72:92:a8:46:6f:
                    d3:2d:1f:37:1c:74:02:bd:50:e4:24:a1:4e:65:43:
                    7d:77:d6:b1:dc:11:1c:50:a3:30:18:42:fc:5e:e3:
                    19:20:ef:04:e2:f4:ee:bb:e6:f8:d4:ed:ee:73:e0:
                    5e:f0:be:99:fe:cc:e5:1c:90:93:f9:b2:35:1c:6e:
                    52:92:48:aa:fd:72:cf:76:40:ad:82:04:03:6b:50:
                    aa:96:6a:d9:cd:76:59:0b:97:a9:8c:8e:4a:cf:eb:
                    c9:43:c1:f9:1c:1b:a3:45:17:37:9a:b1:ae:17:e0:
                    f8:08:49:5c:d0:fe:31:37:ab:8d:34:bc:54:fc:3b:
                    5f:b7:df:48:2f:10:19:bb:d7:ab:41:27:a2:fe:2c:
                    6e:18:6e:bf:68:ee:8b:72:8f:42:cd:54:aa:70:0e:
                    87:ae:d7:1c:eb:7d:8d:c5:d2:c8:cd:7e:6d:79:80:
                    ee:0e:24:74:5e:57:3c:6a:5a:ac:b3:5b:a7:dc:2b:
                    be:5a:92:5b:b7:b4:8e:8c:69:60:ed:d1:37:a1:a5:
                    98:47:40:47:b6:77:8d:da:4e:b5:da:13:07:83:cd:
                    5a:78:98:0e:43:a0:44:b9:32:df:fa:ea:90:99:eb:
                    66:3b:62:97:e9:ae:76:fb:bc:94:89:83:14:ce:96:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:79:14:A8:D7:D8:89:C0:6B:1B:AB:02:A9:93:C3:B3:A4:B7:9E:03
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:13:f7:a7:49:8e:1f:53:0f:26:2b:22:da:b1:af:0e:30:
         71:d3:6d:90:66:50:e1:5c:ff:c9:78:d6:7f:48:37:72:30:0c:
         21:c4:41:c0:df:c8:af:5d:29:0d:72:d7:5e:c0:a1:7f:e3:a3:
         b5:26:91:e7:a1:1a:26:34:52:54:66:ac:29:d1:0d:08:fe:09:
         1e:63:95:1a:80:da:c5:05:3c:e5:c4:b9:19:c8:7d:2a:4d:17:
         97:22:76:80:e0:79:39:7e:3e:b1:87:e6:5b:08:da:af:f7:39:
         87:15:65:50:d0:08:ed:3d:50:54:1e:bf:55:51:da:2b:3c:53:
         ac:4d:16:ed:24:3d:5f:33:65:d4:d2:81:12:b2:61:a0:cf:63:
         25:93:a3:a0:b0:f0:f5:70:b4:a3:db:f1:dd:d4:0f:3d:36:e8:
         0d:04:f8:40:f8:30:e8:3d:f8:0a:d9:45:5e:26:14:97:bb:52:
         37:3c:d9:75:96:57:6a:b5:1b:e5:cf:3a:c9:26:4a:03:6a:b8:
         a2:a4:ed:6f:bc:ad:09:19:95:36:07:05:5f:77:ac:13:68:da:
         8c:f5:44:e5:12:07:c6:d6:33:87:cb:c9:5e:a7:d7:23:c1:02:
         14:3e:22:6e:86:8f:ba:fb:54:c4:1e:3e:dd:b9:83:5e:e3:54:
         5e:90:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:44:20 2026 by rpki-client