Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/352e3138332e38302e302f32322d3234203d3e203532343731.roa
File:                     352e3138332e38302e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          CjTlPCNKOLooH+CjS56dzrVUkWMdLdryZU9TTV7U+I8=
Subject key identifier:   75:75:E1:51:36:25:07:B5:94:8C:32:7C:06:7A:06:00:DB:B3:80:49
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       23142CD4B14995B3C8B539C37793E30B4A493284
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/352e3138332e38302e302f32322d3234203d3e203532343731.roa
Signing time:             Sat 25 Jul 2026 07:39:34 +0000
ROA not before:           Sat 25 Jul 2026 07:34:34 +0000
ROA not after:            Sat 24 Jul 2027 07:39:34 +0000
asID:                     52471
IP address blocks:        5.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 14:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:14:2c:d4:b1:49:95:b3:c8:b5:39:c3:77:93:e3:0b:4a:49:32:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Jul 25 07:34:34 2026 GMT
            Not After : Jul 24 07:39:34 2027 GMT
        Subject: CN=7575E151362507B5948C327C067A0600DBB38049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:73:c3:52:a1:f9:f2:2c:47:1d:94:ed:50:
                    24:16:fc:06:d8:b3:da:8c:89:3c:10:6c:33:2f:89:
                    fa:25:c1:20:d3:0e:60:e8:57:b2:de:a4:0e:a4:42:
                    0e:e5:4f:83:fe:27:38:ab:02:70:9d:85:42:8b:4b:
                    8c:dc:d2:1e:00:ea:7a:86:07:aa:5c:7e:91:65:54:
                    db:d9:f7:d4:b2:c4:5f:23:36:80:80:5a:99:c2:a9:
                    94:d6:36:73:42:f6:9c:d7:08:b2:99:b0:b5:5c:63:
                    24:63:47:d2:f8:50:5e:02:aa:e3:e2:75:09:95:c1:
                    2c:86:f2:7c:71:9f:6d:fe:f1:13:af:4c:16:d1:a1:
                    b8:d1:3e:6a:b9:da:3a:ad:b2:7a:73:90:2c:a0:c9:
                    da:71:3f:81:b1:08:38:2d:ba:22:a4:61:ce:06:d0:
                    1c:a1:10:1e:3b:cf:30:5d:fc:2c:3d:79:d0:70:3e:
                    e8:42:86:b9:57:01:f2:64:02:6a:4a:6e:2b:40:65:
                    a8:83:a1:1c:b1:c0:72:bc:c1:88:49:47:42:b8:ee:
                    f6:19:88:de:f0:60:5a:0e:19:47:23:09:7c:37:52:
                    a7:5b:e4:0c:db:8e:a1:9c:2a:05:47:52:f2:c4:c8:
                    32:d1:9d:ce:5b:87:41:62:66:68:3e:88:91:9d:3a:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:E1:51:36:25:07:B5:94:8C:32:7C:06:7A:06:00:DB:B3:80:49
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/352e3138332e38302e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:82:9e:80:01:8b:79:62:b6:b8:86:06:e5:39:2e:5f:1e:
         46:2c:46:7a:17:6e:a3:6f:f5:27:63:73:1e:7a:92:25:c4:b3:
         89:cd:9b:05:e6:d1:ce:db:4b:5a:e9:54:be:d1:0a:1d:0b:02:
         72:c4:c5:97:ce:b1:46:31:89:38:20:5d:b1:4c:82:58:6f:33:
         c8:e2:e4:01:21:63:07:88:c9:de:bb:45:8e:3e:a7:cd:c8:d7:
         1e:10:e3:0a:c5:b2:2f:e7:14:9f:e0:ff:d5:1e:14:60:e5:17:
         9e:a6:95:ea:82:be:d9:18:30:2a:ee:ea:bb:8d:44:3a:05:bb:
         55:27:9a:33:d9:86:1d:70:de:e5:0f:40:b4:cd:4e:6b:69:2c:
         ef:ab:5c:d0:7d:58:d4:ff:58:80:f6:c1:b9:7d:cc:fa:4c:f6:
         b6:8c:50:70:2d:32:3e:a3:dc:50:32:5b:13:33:71:59:b5:02:
         bb:1e:24:df:4d:b2:bf:47:b4:0f:9c:a8:20:40:6a:35:08:66:
         3f:fd:8b:8b:ec:e9:b3:2d:c4:08:d0:f2:41:6c:a9:bb:98:d1:
         39:61:fc:26:41:f5:5d:a9:d2:83:6d:38:93:07:63:eb:ef:29:
         b3:c8:f7:1d:fb:69:90:cf:c0:3e:55:83:7b:32:54:99:7e:4d:
         af:07:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:28:22 2026 by rpki-client