Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a363030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a363030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          OELlrXWFjNu+ThJcFmf879ggfbBp19tBHgJIWYO4rEE=
Subject key identifier:   EC:4D:BA:E2:DB:4C:9A:2E:36:62:98:A8:A3:3A:0F:24:97:E6:5B:31
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       5C2F595EE79B20DF7BE39A39A2F1FC4BF377682C
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a363030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:00 +0000
ROA not before:           Mon 16 Feb 2026 22:45:00 +0000
ROA not after:            Mon 15 Feb 2027 22:50:00 +0000
asID:                     273821
IP address blocks:        2803:e150:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2f:59:5e:e7:9b:20:df:7b:e3:9a:39:a2:f1:fc:4b:f3:77:68:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:00 2026 GMT
            Not After : Feb 15 22:50:00 2027 GMT
        Subject: CN=EC4DBAE2DB4C9A2E366298A8A33A0F2497E65B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:b7:6f:dd:bc:66:f8:54:b3:51:88:b0:01:
                    63:3c:f2:d8:45:19:38:9b:7c:b8:e5:e3:7a:f9:85:
                    50:0b:d3:af:c1:73:07:95:52:8d:c8:79:07:19:90:
                    b1:f1:35:5b:84:2f:bb:46:7e:f8:bf:f7:65:b6:54:
                    8b:aa:bd:7d:02:af:48:cf:ab:bf:d3:cd:76:af:14:
                    b1:c5:7f:9d:d6:d6:57:f5:3d:63:27:8b:03:9f:a7:
                    e4:f7:4f:9c:60:04:07:48:00:6a:ba:eb:77:e4:ba:
                    6b:fe:5b:d4:1b:2b:83:8d:36:3a:40:d3:a9:dd:c0:
                    13:a4:52:3a:5a:8b:a4:b8:51:0c:fa:74:f7:d7:17:
                    6c:27:16:9e:bd:16:fb:03:b4:05:d8:80:20:e5:4a:
                    4a:75:b6:cd:e5:6e:d7:b6:72:4c:73:34:6a:1b:b4:
                    01:fe:64:8f:71:f4:7d:f7:48:b1:65:bd:f0:1c:51:
                    d0:1d:17:9c:df:e5:96:38:22:7f:65:3d:2c:f0:c7:
                    66:f9:c9:20:c7:13:f6:30:c2:8a:5b:45:d7:85:a4:
                    99:eb:06:bc:73:79:d1:0b:c8:5f:69:ab:30:86:32:
                    70:87:e2:68:43:fe:72:d1:e5:57:65:82:02:b1:ee:
                    8d:91:c9:1d:73:eb:0f:a9:5b:ea:14:47:03:40:63:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:BA:E2:DB:4C:9A:2E:36:62:98:A8:A3:3A:0F:24:97:E6:5B:31
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a363030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:d7:3d:55:21:36:5a:17:ed:4d:f3:f3:40:5b:ec:65:be:
         02:89:80:10:be:f1:81:10:94:06:35:02:dd:5f:91:02:4a:f8:
         77:56:87:59:6e:d6:1f:9f:53:e2:2b:97:cc:fc:f6:3d:72:af:
         16:e1:22:d1:eb:23:23:8d:f1:eb:71:ad:57:99:dc:f3:27:84:
         26:12:5e:4d:65:fb:3a:a1:82:ba:fe:22:62:c0:60:0d:4b:cc:
         e4:40:76:96:db:2b:52:43:8d:fa:24:ed:37:d6:84:41:ee:41:
         0b:3b:82:30:c0:15:5e:2b:e5:98:d6:65:55:91:f9:2d:b1:b5:
         98:1d:b8:79:ad:05:a0:00:54:10:cb:5d:7b:94:27:90:09:f5:
         77:d5:de:77:3b:d3:53:b7:80:8b:d8:96:c1:33:74:f4:b5:c4:
         9a:cf:9f:29:1b:c8:dc:76:3e:d0:84:e4:e8:d1:e9:15:85:2a:
         13:f0:5a:17:14:25:eb:cb:a2:0e:99:77:71:2f:44:3b:0e:7f:
         59:08:82:4b:2b:62:92:03:b6:f5:36:4e:eb:70:7e:68:aa:4a:
         ec:3b:c2:ea:a0:1d:45:82:f3:72:54:98:4c:1c:15:70:eb:e5:
         0d:b0:54:48:06:d8:ff:3d:58:66:cf:7e:57:bd:27:3c:08:8c:
         79:3b:21:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:52 2026 by rpki-client