Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a353030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a353030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          +P8ach5r9cA39+Jqx2CTRJIlAYcwZj7gCBacSZFWLu0=
Subject key identifier:   68:94:17:AD:E8:E5:28:74:DB:20:1E:03:E0:28:41:3C:BB:C3:87:8C
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       6E233D16DD0FBC402D132217BE87FA5152EEFC94
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a353030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:03 +0000
ROA not before:           Mon 16 Feb 2026 22:45:03 +0000
ROA not after:            Mon 15 Feb 2027 22:50:03 +0000
asID:                     273821
IP address blocks:        2803:e150:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:23:3d:16:dd:0f:bc:40:2d:13:22:17:be:87:fa:51:52:ee:fc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:03 2026 GMT
            Not After : Feb 15 22:50:03 2027 GMT
        Subject: CN=689417ADE8E52874DB201E03E028413CBBC3878C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:cf:ee:2a:15:f2:0e:a7:67:16:34:fb:f7:
                    54:3e:d5:db:10:7c:97:86:10:1a:3d:da:65:d1:08:
                    c9:00:12:bf:08:16:97:04:a8:96:eb:32:3c:cf:82:
                    f5:14:8c:7d:19:ca:88:2d:31:b2:e5:b7:34:cd:6c:
                    16:88:49:29:92:ac:05:39:f3:43:21:a0:2d:14:f5:
                    1a:ba:bc:f7:28:f2:bd:5d:f6:86:92:6d:4b:56:ce:
                    4c:2a:03:24:d7:ee:8a:e0:8d:0b:18:d5:fc:d8:c1:
                    66:59:fe:da:ac:e7:df:fe:14:ef:13:b7:a7:8c:d4:
                    7c:be:aa:af:eb:f7:6a:68:84:1c:09:f6:4c:b6:11:
                    7f:3e:f6:99:5a:16:5f:8e:48:e0:08:6b:de:1a:42:
                    0e:af:d4:27:80:42:b4:cf:dc:8f:02:62:f1:23:eb:
                    04:4c:e9:44:7d:dd:c9:df:1a:a5:de:7a:3a:77:6e:
                    b5:09:32:46:0d:17:7a:09:7d:a0:29:9d:2f:b6:99:
                    d8:66:0c:dc:ca:0c:7e:a0:81:f5:29:9f:03:37:68:
                    06:9b:cc:e9:f9:20:76:d2:b1:95:7a:12:97:3c:3a:
                    91:07:65:4d:49:f4:c0:46:83:54:fc:8b:02:1b:5d:
                    f0:41:72:f1:b4:54:aa:94:26:2f:80:e7:55:c6:1b:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:94:17:AD:E8:E5:28:74:DB:20:1E:03:E0:28:41:3C:BB:C3:87:8C
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a353030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d7:f2:e4:92:01:75:a5:4c:54:cf:58:39:19:38:77:34:84:99:
         a3:f2:d2:64:20:32:64:d1:21:24:ab:e7:5b:b8:c5:5a:57:10:
         26:4c:83:a9:70:a0:10:8c:30:22:c4:08:c5:e9:a3:f5:5d:57:
         c4:0e:93:69:37:b2:3d:b5:b2:d4:ab:fe:06:c9:f2:1a:aa:e6:
         11:ea:2f:fe:2c:4e:0c:e9:9a:13:ca:c0:9b:7a:f1:b8:cb:34:
         11:e6:32:1b:cb:9f:53:2b:47:37:12:e2:f2:36:cb:fb:f8:48:
         7f:ba:92:1e:bb:4e:42:93:7f:47:3a:19:3b:fc:8c:0e:b0:e4:
         f2:90:b3:03:c1:19:3b:69:1c:de:d4:4f:15:a0:f0:3c:76:d0:
         77:f5:17:18:7e:23:f6:50:cb:17:f3:af:eb:e8:d5:54:c3:24:
         5c:74:41:37:77:92:a5:12:27:b6:23:49:49:ec:95:29:31:86:
         fb:e7:14:fa:c7:0c:1b:7f:37:f0:8d:3c:27:df:cb:fd:1b:8a:
         6e:39:f0:11:47:a6:b4:51:dc:8e:3f:dc:65:c4:b8:5f:17:f7:
         71:ed:7e:a1:7a:aa:df:8e:99:06:0e:f8:82:57:6f:64:13:3f:
         9a:21:e6:2e:ef:02:2a:a1:90:fc:aa:0f:cc:87:a5:37:39:fc:
         7b:a8:c4:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:13:00 2026 by rpki-client