Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/323830333a346464303a3a2f33322d3438203d3e20323734313835.roa
File:                     323830333a346464303a3a2f33322d3438203d3e20323734313835.roa (raw, json)
Hash identifier:          5yP2bi1FfQ7JIjltcpsLGKa78tl2PGSnEgY09S1TFS4=
Subject key identifier:   0C:19:3F:DB:1A:F9:CF:90:C0:1C:61:BF:B6:EB:FE:BC:5C:47:D3:30
Certificate issuer:       /CN=29F52CFDE044531382DE4E4196C81E3567BABFFE
Certificate serial:       2D752F04A7F4E408B27E0CAEAF58349F8CA6DA81
Authority key identifier: 29:F5:2C:FD:E0:44:53:13:82:DE:4E:41:96:C8:1E:35:67:BA:BF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/323830333a346464303a3a2f33322d3438203d3e20323734313835.roa
Signing time:             Fri 29 May 2026 21:30:00 +0000
ROA not before:           Fri 29 May 2026 21:25:00 +0000
ROA not after:            Fri 28 May 2027 21:30:00 +0000
asID:                     274185
IP address blocks:        2803:4dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:2f:04:a7:f4:e4:08:b2:7e:0c:ae:af:58:34:9f:8c:a6:da:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29F52CFDE044531382DE4E4196C81E3567BABFFE
        Validity
            Not Before: May 29 21:25:00 2026 GMT
            Not After : May 28 21:30:00 2027 GMT
        Subject: CN=0C193FDB1AF9CF90C01C61BFB6EBFEBC5C47D330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:45:29:b8:b0:ec:0d:c3:b6:43:f0:30:ea:
                    e3:11:d0:03:ea:c9:71:99:ff:cb:4e:ba:d8:8e:c5:
                    b9:31:4a:a8:fe:08:de:25:0a:f5:dd:2a:78:e8:f8:
                    17:4f:92:fd:5e:db:1e:08:be:80:95:11:8a:ff:54:
                    7d:7a:b6:c6:9e:f7:04:e2:07:dd:c1:fa:3e:84:b3:
                    7a:3d:14:73:fa:1c:9f:ea:b9:48:94:45:aa:0e:50:
                    5c:4e:dd:77:24:14:3a:01:80:12:a5:84:1e:47:7c:
                    c2:2f:2a:82:5b:6c:74:b1:d1:79:4d:dd:d9:a4:41:
                    89:d6:7e:d7:6e:31:00:52:e4:ee:15:57:e8:43:b6:
                    8d:ba:e6:4d:8b:ff:cb:95:6b:34:5f:2e:9f:20:80:
                    18:ab:da:36:77:fb:86:99:fc:19:f8:89:0b:1f:c1:
                    0e:9c:7a:54:8b:9b:47:19:87:19:2b:2c:a9:dc:c2:
                    b0:c8:89:5e:c4:03:85:78:52:19:d8:54:af:ab:2c:
                    3b:71:63:4a:de:7d:a9:f1:50:75:d7:a4:bb:61:9b:
                    9e:89:63:7c:34:7f:60:13:43:53:79:65:51:cc:69:
                    3f:2f:8b:c3:79:11:28:7b:13:79:a4:69:42:5b:7c:
                    f9:99:6c:01:59:c8:2e:51:a1:fc:7b:bc:f8:b8:51:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:3F:DB:1A:F9:CF:90:C0:1C:61:BF:B6:EB:FE:BC:5C:47:D3:30
            X509v3 Authority Key Identifier:
                keyid:29:F5:2C:FD:E0:44:53:13:82:DE:4E:41:96:C8:1E:35:67:BA:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29F52CFDE044531382DE4E4196C81E3567BABFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7FB54210F83E6EA8AF9ED952A3C9EFE57CDC5D101E24D96FD125C9DE9B38CE3C/0/323830333a346464303a3a2f33322d3438203d3e20323734313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:0b:8c:73:3d:ab:30:63:f2:f8:51:7d:7a:df:2d:fb:06:
         dc:81:43:f3:eb:e5:55:d1:fa:48:55:ba:cb:49:07:15:ac:fe:
         08:33:8f:14:27:42:d0:2f:0f:04:5d:5b:e8:df:f2:d6:8e:c5:
         e9:d6:ca:04:dd:d3:78:28:30:f4:f1:0b:50:17:d7:da:b3:10:
         38:46:3b:7a:fa:2e:19:b5:74:76:1a:05:0a:b9:e6:53:56:67:
         16:15:4d:53:0c:bb:08:f1:77:e2:2c:d6:dc:0b:4c:09:e2:32:
         71:c8:03:66:bf:aa:ca:85:12:fc:32:07:d3:cb:50:8c:68:df:
         54:12:63:e1:74:74:4f:bc:8a:b1:25:ed:35:cd:92:1d:4a:ae:
         e4:d6:ce:d5:de:be:60:22:91:cc:7d:2d:69:1c:26:88:5f:34:
         b4:c6:d9:1d:07:d8:69:ef:c1:98:d3:37:03:0b:0a:79:15:fc:
         9c:ff:f2:9c:ae:d9:18:ae:a3:1d:ac:86:c3:85:e7:a7:b6:68:
         b4:fd:24:78:9c:3f:66:78:30:ce:57:50:af:f5:a2:f2:6a:7d:
         a1:0b:1d:f7:84:e3:d2:0a:37:f0:4e:8c:96:0f:88:fe:cd:de:
         c3:e3:47:12:85:c7:bb:9c:5a:08:c8:f5:d6:c0:60:2b:6a:6d:
         0f:9a:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:54 2026 by rpki-client