Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa
File:                     323830333a333430303a3a2f33322d3438203d3e203131353536.roa (raw, json)
Hash identifier:          7hJYpC14EFd2uw8olOq5OUEEULeWV5/+A8vMTjOVrB4=
Subject key identifier:   28:0B:90:FC:8F:B2:ED:10:37:2E:A0:47:FF:0B:69:B3:C0:F5:94:20
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       33D5434EE0A8FFAADD4A7E048CEEA38B3B5802B0
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa
Signing time:             Fri 13 Feb 2026 14:30:19 +0000
ROA not before:           Fri 13 Feb 2026 14:25:19 +0000
ROA not after:            Fri 12 Feb 2027 14:30:19 +0000
asID:                     11556
IP address blocks:        2803:3400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d5:43:4e:e0:a8:ff:aa:dd:4a:7e:04:8c:ee:a3:8b:3b:58:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb 13 14:25:19 2026 GMT
            Not After : Feb 12 14:30:19 2027 GMT
        Subject: CN=280B90FC8FB2ED10372EA047FF0B69B3C0F59420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ed:e3:53:ad:c1:12:1b:53:97:f8:79:77:a3:
                    cc:af:e4:49:2a:49:13:ce:f9:a7:c3:49:5d:5c:1d:
                    28:1f:96:3b:12:0c:cf:50:60:bc:91:89:c2:fb:02:
                    7a:60:14:55:0a:88:68:cf:2f:fc:cb:2c:6c:40:b1:
                    65:0c:76:dd:e1:77:5e:0e:8f:2b:ba:5b:7a:4b:dd:
                    09:87:27:6a:5e:af:df:bb:d5:3f:6d:6a:f5:15:01:
                    b2:b2:44:5d:24:49:d6:42:04:42:8d:aa:e3:d9:13:
                    b8:7b:f4:a0:87:b5:43:26:0c:d0:3d:78:56:08:de:
                    62:29:84:e3:7a:f5:34:3f:a1:c6:27:b6:a7:5c:ca:
                    d2:a3:00:18:23:cc:47:c4:d7:b9:04:e4:62:ef:cb:
                    e6:91:e6:40:12:83:6a:b1:94:22:0c:bc:fe:13:c3:
                    86:67:8d:de:33:36:9d:d8:26:0f:8b:bc:0e:b5:ed:
                    0f:9c:c6:df:a2:78:43:aa:ad:9b:3a:12:a0:7d:0d:
                    c1:a4:ee:95:d1:45:9c:bc:f0:76:bd:17:1a:b3:08:
                    69:cf:b6:b5:06:8a:b5:a6:4b:5d:7a:58:51:a4:cf:
                    c8:7d:ac:3c:ec:59:68:30:30:e7:41:e0:45:d0:f6:
                    96:19:5a:68:87:47:91:e5:47:cf:d8:9b:1a:83:46:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0B:90:FC:8F:B2:ED:10:37:2E:A0:47:FF:0B:69:B3:C0:F5:94:20
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3400::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:37:9e:9b:33:17:6a:62:31:17:54:33:60:b6:8d:9f:0d:
         77:3d:ed:dc:a8:16:d1:1d:bd:a5:fe:32:00:b2:01:a9:5b:b3:
         86:73:3b:65:51:dc:c8:ec:eb:25:c1:c1:69:6c:ba:1a:3d:c6:
         40:8c:55:7b:40:4b:3b:b6:29:e6:c0:91:28:e4:f2:61:5d:2c:
         16:d9:3a:e6:3b:03:91:76:f9:2b:71:f8:6e:18:bd:10:f1:a8:
         1a:c1:47:ca:9f:fb:2e:36:33:53:7c:58:d1:65:5d:d8:8b:b8:
         09:08:37:f2:49:a7:3a:25:d5:df:d7:71:84:0a:8a:1f:c7:e1:
         c3:12:a2:a4:d0:3c:2e:a9:7c:ec:bd:d5:91:d1:1b:2e:56:a2:
         7a:19:b9:e2:fe:28:2f:ec:62:8e:bc:40:a1:cf:a7:05:6b:00:
         bb:cc:45:b2:9c:00:ec:d9:3c:8b:30:6e:f4:fd:b1:7a:fd:d6:
         47:c9:79:66:85:f2:df:eb:34:3d:62:b4:14:6c:5d:f6:6b:c9:
         9a:1a:cf:56:77:c3:5e:b9:f2:00:d2:12:27:69:a3:70:fa:18:
         4e:db:12:f6:7e:be:6f:e2:50:40:52:56:67:01:30:a7:50:6a:
         7b:9e:3a:ca:e9:f7:32:eb:08:66:99:38:5b:12:8d:f2:b4:cc:
         36:16:83:8c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUM9VDTuCo/6rdSn4EjO6jiztYArAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNjAyMTMxNDI1MTlaFw0yNzAyMTIxNDMwMTlaMDMxMTAvBgNV
BAMTKDI4MEI5MEZDOEZCMkVEMTAzNzJFQTA0N0ZGMEI2OUIzQzBGNTk0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD27eNTrcESG1OX+Hl3o8yv5Ekq
SRPO+afDSV1cHSgfljsSDM9QYLyRicL7AnpgFFUKiGjPL/zLLGxAsWUMdt3hd14O
jyu6W3pL3QmHJ2per9+71T9tavUVAbKyRF0kSdZCBEKNquPZE7h79KCHtUMmDNA9
eFYI3mIphON69TQ/ocYntqdcytKjABgjzEfE17kE5GLvy+aR5kASg2qxlCIMvP4T
w4Znjd4zNp3YJg+LvA617Q+cxt+ieEOqrZs6EqB9DcGk7pXRRZy88Ha9FxqzCGnP
trUGirWmS116WFGkz8h9rDzsWWgwMOdB4EXQ9pYZWmiHR5HlR8/YmxqDRiMbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUKAuQ/I+y7RA3LqBH/wtps8D1lCAwHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMyMzgzMDMzM2EzMzM0MzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzEzNTM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzQAMA0G
CSqGSIb3DQEBCwUAA4IBAQCcBzeemzMXamIxF1QzYLaNnw13Pe3cqBbRHb2l/jIA
sgGpW7OGcztlUdzI7OslwcFpbLoaPcZAjFV7QEs7tinmwJEo5PJhXSwW2TrmOwOR
dvkrcfhuGL0Q8agawUfKn/suNjNTfFjRZV3Yi7gJCDfySac6JdXf13GECoofx+HD
EqKk0DwuqXzsvdWR0RsuVqJ6Gbni/igv7GKOvEChz6cFawC7zEWynADs2TyLMG70
/bF6/dZHyXlmhfLf6zQ9YrQUbF32a8maGs9Wd8NeufIA0hInaaNw+hhO2xL2fr5v
4lBAUlZnATCnUGp7njrK6fcy6whmmThbEo3ytMw2FoOM
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:26 2026 by rpki-client