Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa
File:                     323830333a656434303a3a2f33322d3332203d3e20323634363736.roa (raw, json)
Hash identifier:          T0z7EE82LNMYWjmHhBS+nD25RCHIAUdE3aValOO/6fk=
Subject key identifier:   E6:B7:C7:2E:5F:3C:F6:B9:28:F1:97:AE:22:23:A4:50:C2:5E:DC:6E
Certificate issuer:       /CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
Certificate serial:       782F089B622A4BE2C05C352B873508E3DDE06A2B
Authority key identifier: 89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa
Signing time:             Tue 06 Jan 2026 19:33:14 +0000
ROA not before:           Tue 06 Jan 2026 19:28:14 +0000
ROA not after:            Tue 05 Jan 2027 19:33:14 +0000
asID:                     264676
IP address blocks:        2803:ed40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 10:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:08:9b:62:2a:4b:e2:c0:5c:35:2b:87:35:08:e3:dd:e0:6a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
        Validity
            Not Before: Jan  6 19:28:14 2026 GMT
            Not After : Jan  5 19:33:14 2027 GMT
        Subject: CN=E6B7C72E5F3CF6B928F197AE2223A450C25EDC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:c2:09:a9:67:48:d0:30:a5:e0:8a:81:f1:
                    2c:b4:07:53:01:99:24:0a:d0:fc:dd:4c:e8:60:a2:
                    1c:0f:51:2c:02:29:37:17:20:0d:15:af:57:b1:34:
                    a1:01:cf:95:c5:fc:d3:10:c9:ad:f4:ee:ad:ca:26:
                    1c:b2:b4:35:c7:b5:10:4f:13:85:7b:ba:1e:e3:ea:
                    17:cb:15:9e:7e:61:ae:fd:f9:8b:a4:92:1b:17:c1:
                    4e:90:8d:45:b3:fb:84:1c:60:f1:4b:17:52:43:ce:
                    7b:99:bf:eb:de:a8:4c:0f:2a:74:cb:1d:11:ca:51:
                    a0:73:e4:0f:65:d7:8f:ba:7e:da:1f:5f:1d:69:cf:
                    1e:aa:b0:14:34:62:d4:e3:aa:43:8a:60:a7:09:eb:
                    cb:b4:22:43:5a:9a:46:dd:b6:15:d7:fe:a5:b5:6f:
                    d4:4d:f1:41:66:1d:42:db:5f:15:b3:4d:58:b8:06:
                    3a:c1:33:f1:01:29:ed:cd:ec:8b:45:1c:77:63:c6:
                    76:bc:60:bc:06:5d:72:17:ba:fa:14:51:f5:e0:97:
                    51:a6:75:ff:29:66:10:6a:51:f9:9c:4f:a5:77:5b:
                    02:26:94:f5:0e:80:90:e7:83:b4:68:87:05:d8:3f:
                    c3:13:27:fd:91:0c:55:83:2d:e0:a5:c2:8c:10:6e:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:C7:2E:5F:3C:F6:B9:28:F1:97:AE:22:23:A4:50:C2:5E:DC:6E
            X509v3 Authority Key Identifier:
                keyid:89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:06:65:c0:ec:a7:28:d4:2e:54:5c:cf:36:52:8b:2f:2c:18:
         34:ce:13:b7:a5:83:73:f9:ce:72:5a:89:fc:21:a3:10:a2:79:
         30:14:08:78:db:11:31:1f:8b:81:c0:ec:34:ae:df:d8:f2:b8:
         72:8e:aa:36:94:d7:53:13:6f:8d:ea:90:5c:84:2d:12:7e:aa:
         c4:81:e3:d1:21:99:e1:c9:e7:fa:6e:0f:be:c7:7a:54:8c:77:
         42:37:35:f4:3b:dd:7e:35:47:14:2c:01:04:de:8c:f0:c9:19:
         63:0c:89:a2:b4:00:ec:c9:2e:d2:0b:b5:ad:e1:07:af:eb:df:
         40:91:87:23:e9:6c:ee:23:f5:1f:eb:9d:7a:2c:45:53:22:55:
         fd:3b:1e:d2:43:f5:d9:95:48:bc:20:27:43:7c:84:a8:a8:47:
         11:08:f1:f7:9e:e0:06:22:1c:d1:cd:a1:dd:44:e1:7e:9a:56:
         e5:cd:8d:6a:10:6a:93:33:8e:18:a5:6b:86:14:e4:38:7f:31:
         f9:a3:cb:6b:f5:57:ec:7c:42:14:4a:7e:52:50:29:8c:a5:4b:
         55:32:d6:bc:5f:02:04:9e:dd:79:58:72:1b:ad:c6:af:19:4a:
         54:9f:31:44:7a:d8:c4:75:6c:cd:b9:14:60:8e:33:5c:b1:42:
         15:ed:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:22:50 2026 by rpki-client