Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a323030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a323030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          uSZKjynlnB9PSit/mN7UTUcGIxj5Q+fTX06QNQJcG+w=
Subject key identifier:   E1:ED:D7:D0:61:FA:10:E8:99:D1:1B:8E:13:08:A1:40:D4:70:01:F2
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       0CE6D34BFD780A115DB834E4DFB0C50499E674B4
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a323030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:03 +0000
ROA not before:           Mon 16 Feb 2026 22:45:03 +0000
ROA not after:            Mon 15 Feb 2027 22:50:03 +0000
asID:                     273821
IP address blocks:        2803:e150:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e6:d3:4b:fd:78:0a:11:5d:b8:34:e4:df:b0:c5:04:99:e6:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:03 2026 GMT
            Not After : Feb 15 22:50:03 2027 GMT
        Subject: CN=E1EDD7D061FA10E899D11B8E1308A140D47001F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:08:40:5f:33:97:8d:94:87:35:0e:93:12:a5:
                    db:c5:41:90:ab:9c:7e:ee:cb:11:08:d6:d4:21:0a:
                    03:60:69:a1:89:82:81:f1:ee:00:63:4e:39:d1:0b:
                    37:b3:dd:26:38:d9:2a:21:c6:38:78:9c:4e:3b:0f:
                    ee:58:ff:aa:31:cd:ab:1e:72:a0:c2:26:52:ec:d8:
                    f5:77:9a:07:63:4d:c6:fd:ba:e6:4b:e1:cf:a2:b9:
                    f4:68:b4:e6:9b:fe:ba:58:43:16:60:53:0d:9f:fb:
                    1a:4f:12:6f:92:19:2f:ad:2b:09:5e:85:18:d2:52:
                    f2:5a:70:55:c1:37:8f:59:7d:0c:25:e2:10:e7:00:
                    a8:fc:81:58:0c:d4:55:46:62:53:75:9a:8a:a2:d5:
                    2e:9b:32:f3:0a:96:c9:e9:f5:e5:a3:33:b2:86:8a:
                    42:50:42:96:56:0b:1a:e3:87:ad:97:72:db:de:19:
                    b3:56:ab:e4:cc:a0:d5:df:59:12:92:2f:76:bf:40:
                    8d:1a:8c:99:06:b4:0a:7d:6c:9c:62:39:08:9b:c6:
                    11:c8:e5:7c:e2:14:64:05:66:b3:2d:13:b1:76:e4:
                    1f:4e:f8:86:3a:f6:95:33:ea:5e:c2:bd:d2:50:5e:
                    d2:c2:57:7e:77:9b:14:73:27:c8:cd:b1:42:68:ae:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:D7:D0:61:FA:10:E8:99:D1:1B:8E:13:08:A1:40:D4:70:01:F2
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a323030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e6:e5:30:d7:13:b0:bb:c7:e5:0e:95:d0:9b:77:bf:7c:8d:4e:
         7e:19:9b:c1:46:e2:b2:6e:7e:6a:65:a4:27:f5:c3:bc:16:cf:
         e0:74:de:88:42:44:a1:2c:e3:b6:56:28:4d:4d:66:cb:23:22:
         e8:77:71:b8:b6:ae:d6:24:92:17:79:f6:f7:3f:b0:7c:9d:25:
         ec:0f:5d:f5:de:ac:21:98:96:e4:f2:ce:0e:7a:7b:d4:4c:6d:
         43:5c:ef:c5:9c:5e:43:1d:77:4f:d6:70:88:91:ab:3b:21:72:
         f7:85:52:da:39:8e:5a:55:29:cc:f7:d9:64:17:91:62:41:99:
         3b:25:4f:2e:fa:4d:4f:be:06:5b:96:13:68:e9:e5:4c:d8:b9:
         2d:d7:2b:62:4d:7e:a6:e1:83:00:87:e1:35:ae:ea:95:b5:e4:
         c9:7a:b3:13:df:9d:12:c1:c2:4b:08:2d:14:9d:c1:a3:0e:d4:
         74:be:81:52:68:5c:69:46:52:75:ae:2b:53:dd:26:eb:c9:a4:
         73:9b:1c:78:f4:ed:4a:f0:f2:66:ae:db:6e:d1:ab:8e:7f:f4:
         bf:45:2d:98:cc:91:eb:b3:a4:6d:ee:d1:00:a7:48:4a:5a:d9:
         0a:2b:fd:7c:73:31:72:97:d7:c2:70:bb:bf:76:8d:fb:f5:54:
         1f:1a:21:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:05:11 2026 by rpki-client