Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a343030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a343030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          FTxY/5wlgNBj/fx28W6DZ1F38OXEj3Zh6KC76QRUTo0=
Subject key identifier:   E8:47:49:DD:60:95:07:D2:18:42:FB:30:B5:C4:20:D6:D6:61:76:FB
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       312094887DFFC607FCD1A34D60215774BAB7FDF3
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a343030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:04 +0000
ROA not before:           Mon 16 Feb 2026 22:45:04 +0000
ROA not after:            Mon 15 Feb 2027 22:50:04 +0000
asID:                     273821
IP address blocks:        2803:e150:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:94:88:7d:ff:c6:07:fc:d1:a3:4d:60:21:57:74:ba:b7:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:04 2026 GMT
            Not After : Feb 15 22:50:04 2027 GMT
        Subject: CN=E84749DD609507D21842FB30B5C420D6D66176FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:ec:97:ab:ee:ac:c7:5a:28:bb:ae:e0:04:
                    5e:01:09:c7:f0:00:ac:17:e7:e5:ae:ee:d2:31:35:
                    f0:b4:c5:20:d2:59:27:e4:dd:d4:40:2c:cf:d5:5a:
                    1c:92:d5:0c:74:34:a5:0a:18:b0:33:eb:5a:c4:de:
                    a1:ea:a0:f1:c8:42:8c:7f:9f:84:44:7d:41:c8:6c:
                    7d:d6:cf:b1:9b:6c:22:43:71:73:e0:00:21:bc:b5:
                    3e:d9:db:60:50:a5:ab:50:ce:bb:fc:ab:e0:8e:44:
                    c5:d0:78:cb:24:ee:3f:99:6b:fe:11:71:2f:ef:6f:
                    76:da:ab:36:ce:9c:93:79:e5:88:19:ca:45:b9:f7:
                    7d:cf:fb:48:d3:bc:1b:06:08:72:16:93:54:3d:21:
                    55:b6:6c:4d:b4:2d:0b:87:b0:bb:56:c8:14:3f:b3:
                    c8:24:25:75:42:39:63:f4:e2:b9:41:e0:4c:d2:36:
                    c0:aa:b4:ce:5e:46:1f:9e:9a:9d:7e:15:9e:72:48:
                    0d:ba:f3:bb:e9:c4:aa:12:ce:0b:76:55:82:8d:fd:
                    c0:b6:19:88:06:27:7f:89:6a:46:5b:8d:19:6b:b0:
                    3c:f0:61:5f:8c:30:b8:50:0c:8e:01:6f:02:4e:f9:
                    00:5a:ac:9d:e5:a8:ba:8b:73:57:13:f8:7c:69:99:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:47:49:DD:60:95:07:D2:18:42:FB:30:B5:C4:20:D6:D6:61:76:FB
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a343030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d4:48:8c:57:98:0f:c9:a5:b2:8c:70:d8:65:c4:80:59:e1:b5:
         25:a1:d0:c3:82:ac:f9:32:c9:22:08:f4:41:78:dd:59:b0:de:
         af:4c:29:47:3e:2f:b1:e4:66:fc:8e:ed:1d:4a:56:b8:fd:c6:
         9f:c6:c4:85:11:af:45:9a:1c:13:34:92:70:fd:cb:98:80:b6:
         42:c4:54:9f:44:5a:ae:00:ea:04:44:a5:ce:49:a4:5a:ee:f5:
         b2:24:0f:ac:a4:61:ec:ba:bb:6d:31:d2:62:f1:fd:2c:62:ca:
         63:32:58:e4:72:32:fc:68:12:5e:8f:6a:95:19:4a:49:8b:fd:
         bb:1f:5c:59:98:0b:02:01:ae:94:24:da:81:02:b0:d8:e4:a8:
         62:32:24:32:e4:a5:f2:9f:4a:91:dc:33:8f:1c:dd:33:e6:90:
         84:6a:b3:ca:bd:f3:e7:23:39:82:26:fc:e2:9f:1c:c4:ef:41:
         5b:aa:22:13:7b:96:41:47:3e:4d:67:1d:c2:a5:01:25:82:56:
         a4:6d:db:97:b5:09:13:8d:5d:4d:9e:dd:70:6d:b3:c4:34:8c:
         5f:49:33:60:af:ae:53:c6:06:5b:0c:aa:d3:3b:05:1b:e3:fb:
         8e:b3:1e:9f:68:79:a1:63:28:06:02:ad:c1:78:47:9a:c5:e6:
         4c:db:ba:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:42 2026 by rpki-client