Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
File:                     323830333a3235303a3a2f33322d3438203d3e20323733313535.roa (raw, json)
Hash identifier:          MVXEcImHGp6D8heohWC6Cd6c9haq1ROTg7LmKMSX4CQ=
Subject key identifier:   A7:7B:ED:FF:83:7C:C8:5C:C2:C9:74:52:C0:31:AE:DA:98:64:45:9D
Certificate issuer:       /CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
Certificate serial:       253E44F4804D670EFABE11D6A5AD6C40F8A534A4
Authority key identifier: C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
Signing time:             Fri 27 Feb 2026 05:32:05 +0000
ROA not before:           Fri 27 Feb 2026 05:27:05 +0000
ROA not after:            Fri 26 Feb 2027 05:32:05 +0000
asID:                     273155
IP address blocks:        2803:250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 09:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3e:44:f4:80:4d:67:0e:fa:be:11:d6:a5:ad:6c:40:f8:a5:34:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
        Validity
            Not Before: Feb 27 05:27:05 2026 GMT
            Not After : Feb 26 05:32:05 2027 GMT
        Subject: CN=A77BEDFF837CC85CC2C97452C031AEDA9864459D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:5e:df:00:e0:d0:51:20:7c:95:01:78:e7:
                    01:de:b0:6e:6b:b0:70:ba:99:04:ce:18:19:c2:f3:
                    2c:6a:35:d6:99:5b:56:db:34:85:91:ed:3b:5c:7d:
                    7a:94:5f:be:89:6e:49:a8:ac:95:c3:2f:16:48:24:
                    a5:18:40:c6:cf:7a:50:8d:ad:66:ab:3f:53:3c:e4:
                    1f:a5:d2:a6:0c:bd:ff:44:c7:af:48:ee:00:f4:9d:
                    a7:f7:70:9a:7f:78:ed:6b:0c:8d:b2:43:28:bc:4f:
                    2f:ae:8a:0b:27:73:de:b6:76:1c:d3:75:be:34:db:
                    ea:0d:c8:a2:6a:8b:ab:e3:be:f3:6b:f8:c2:02:23:
                    28:2d:22:bc:68:e2:3d:16:25:b7:a6:56:f2:52:81:
                    00:3a:b7:90:29:f6:cf:c6:89:8f:5e:2f:b4:73:66:
                    ff:c8:21:a4:44:9d:bd:6b:bb:4d:08:c0:16:75:50:
                    a8:23:3a:f2:af:1a:f2:f8:f3:9b:fe:62:37:87:da:
                    f7:b6:6c:a1:1c:16:c8:07:92:c7:4b:23:f9:60:78:
                    44:d8:05:b5:ff:b5:8a:aa:72:1a:98:e7:bb:eb:62:
                    3a:92:50:6c:ef:50:f0:21:bd:6a:4c:6f:17:e4:bf:
                    33:86:90:cd:13:d8:48:ea:b9:03:9d:de:ea:7f:86:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:ED:FF:83:7C:C8:5C:C2:C9:74:52:C0:31:AE:DA:98:64:45:9D
            X509v3 Authority Key Identifier:
                keyid:C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:24:bb:f9:0c:5a:89:6e:f4:c9:3d:1f:87:0a:6b:d8:6f:2c:
         ac:c0:81:20:8b:61:bc:e3:71:35:4a:d0:88:e4:e3:54:09:62:
         4f:9d:56:d1:d4:cc:88:4c:08:a8:d6:35:1b:69:d6:56:2f:86:
         5e:f2:67:c6:32:c8:7e:8d:c2:60:ec:83:b3:11:12:bc:c5:db:
         a7:60:45:de:57:0a:93:57:2c:7d:d5:7b:c5:5f:01:e3:78:47:
         cd:05:84:a2:71:e2:e1:5c:8a:f2:29:67:eb:9a:23:d7:88:85:
         37:60:11:f4:be:d6:23:5a:d4:0b:2b:51:3b:f8:02:46:d9:09:
         ef:83:39:35:ef:f1:4c:fb:02:04:c5:4d:2b:22:31:b3:7d:23:
         76:91:a7:87:64:4c:f9:2a:28:44:d2:da:58:86:e5:be:4f:bf:
         f4:1e:f8:51:00:d0:a6:bd:17:e7:2f:4b:ca:af:12:90:79:88:
         f1:8b:87:73:62:e8:95:7e:91:94:78:b6:92:cc:0e:c2:cc:ca:
         36:72:ed:84:6f:96:dc:74:2d:6b:c6:b3:5e:ae:11:07:b6:6c:
         12:83:68:d5:6b:c0:ff:78:6b:51:20:fb:79:88:7a:36:b2:e0:
         2e:f4:ef:52:e9:8d:b2:65:78:b3:03:e7:ae:df:35:ae:96:a7:
         fa:f8:b9:16
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJT5E9IBNZw76vhHWpa1sQPilNKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA2NENBQjA1NzNDNTM3MjI3NTUzQThCNUMxNEVDMUM0
QjQ1MTFGOTAeFw0yNjAyMjcwNTI3MDVaFw0yNzAyMjYwNTMyMDVaMDMxMTAvBgNV
BAMTKEE3N0JFREZGODM3Q0M4NUNDMkM5NzQ1MkMwMzFBRURBOTg2NDQ1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimF7fAODQUSB8lQF45wHesG5r
sHC6mQTOGBnC8yxqNdaZW1bbNIWR7TtcfXqUX76JbkmorJXDLxZIJKUYQMbPelCN
rWarP1M85B+l0qYMvf9Ex69I7gD0naf3cJp/eO1rDI2yQyi8Ty+uigsnc962dhzT
db402+oNyKJqi6vjvvNr+MICIygtIrxo4j0WJbemVvJSgQA6t5Ap9s/GiY9eL7Rz
Zv/IIaREnb1ru00IwBZ1UKgjOvKvGvL485v+YjeH2ve2bKEcFsgHksdLI/lgeETY
BbX/tYqqchqY57vrYjqSUGzvUPAhvWpMbxfkvzOGkM0T2EjquQOd3up/hl2BAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUp3vt/4N8yFzCyXRSwDGu2phkRZ0wHwYDVR0j
BBgwFoAUwGTKsFc8U3InVTqLXBTsHEtFEfkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNzE2QzlCRTI4N0E1Q0Y5NkRFQTVCNjhGQTE1NDgyQ0ZD
OUUzRkEwOUVENEMzN0Q3RDBGQjRENUQxNDQwNDA1LzAvQzA2NENBQjA1NzNDNTM3
MjI3NTUzQThCNUMxNEVDMUM0QjQ1MTFGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDY0Q0FCMDU3M0M1MzcyMjc1
NTNBOEI1QzE0RUMxQzRCNDUxMUY5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDcxNkM5QkUyODdBNUNGOTZERUE1QjY4RkExNTQ4MkNGQzlFM0ZBMDlF
RDRDMzdEN0QwRkI0RDVEMTQ0MDQwNS8wLzMyMzgzMDMzM2EzMjM1MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwJQMA0G
CSqGSIb3DQEBCwUAA4IBAQAjJLv5DFqJbvTJPR+HCmvYbyyswIEgi2G843E1StCI
5ONUCWJPnVbR1MyITAio1jUbadZWL4Ze8mfGMsh+jcJg7IOzERK8xdunYEXeVwqT
Vyx91XvFXwHjeEfNBYSiceLhXIryKWfrmiPXiIU3YBH0vtYjWtQLK1E7+AJG2Qnv
gzk17/FM+wIExU0rIjGzfSN2kaeHZEz5KihE0tpYhuW+T7/0HvhRANCmvRfnL0vK
rxKQeYjxi4dzYuiVfpGUeLaSzA7CzMo2cu2Eb5bcdC1rxrNerhEHtmwSg2jVa8D/
eGtRIPt5iHo2suAu9O9S6Y2yZXizA+eu3zWulqf6+LkW
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:21:53 2026 by rpki-client