Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a393030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a393030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          3UqyZDtU9eWU++BQCuX4PGMPqBnxw1PYfymQ0t8LLEA=
Subject key identifier:   69:7D:5D:5A:AF:E2:07:21:12:9C:83:75:7A:4A:A0:C0:23:B0:17:0F
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       15677043B21408111941645A8B483DE4471C1059
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a393030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:00 +0000
ROA not before:           Mon 16 Feb 2026 22:45:00 +0000
ROA not after:            Mon 15 Feb 2027 22:50:00 +0000
asID:                     273821
IP address blocks:        2803:e150:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:70:43:b2:14:08:11:19:41:64:5a:8b:48:3d:e4:47:1c:10:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:00 2026 GMT
            Not After : Feb 15 22:50:00 2027 GMT
        Subject: CN=697D5D5AAFE20721129C83757A4AA0C023B0170F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:b1:6b:af:9d:f2:fe:7b:4f:3b:46:97:5c:
                    53:94:89:a4:9f:2c:4f:c7:7c:52:af:53:c6:a6:60:
                    a3:82:ad:ec:97:90:5f:bb:b9:e8:b7:64:7a:ef:d5:
                    a2:3f:f9:b8:86:0c:24:57:eb:22:61:94:b7:a8:b0:
                    7d:5d:1c:b0:bf:e1:67:ff:a2:58:81:4d:64:ac:0c:
                    97:42:3f:26:75:60:82:60:36:4b:61:4f:c6:0b:27:
                    3b:64:1f:e5:96:82:dc:5d:16:1a:0b:c8:8e:0e:f0:
                    92:57:92:8f:e6:46:af:4b:df:85:48:17:8c:c0:08:
                    5f:21:7e:30:1e:d3:c7:2d:3d:ae:48:d9:6b:74:dd:
                    1a:2e:a9:93:6a:89:63:ee:94:36:75:94:fc:2b:ae:
                    37:3a:53:f5:b0:e7:a9:a0:63:c4:13:eb:54:33:06:
                    c1:c4:c4:ca:1f:f6:13:18:4b:1e:46:7c:ad:80:cf:
                    f0:ae:ce:88:3b:9a:b0:5a:b9:64:3d:c1:8c:f5:70:
                    7f:83:f7:34:30:8f:a2:bd:56:1b:08:c6:39:02:02:
                    68:85:f3:11:f4:85:9f:d1:d7:cd:8a:2a:97:89:bc:
                    97:2c:e8:45:58:6e:94:77:86:9d:bb:84:e5:fc:3a:
                    62:27:a8:26:74:53:47:12:c2:8a:4c:1f:50:73:c7:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:5D:5A:AF:E2:07:21:12:9C:83:75:7A:4A:A0:C0:23:B0:17:0F
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a393030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e2:f9:13:3e:be:c0:83:d1:be:00:70:01:19:e6:8a:f7:81:ed:
         19:53:9c:e7:d3:b3:31:7d:f4:59:f4:27:b9:2e:bb:e0:d8:67:
         d5:79:24:a3:8a:48:8a:58:bb:28:67:d4:d7:01:75:a5:a8:e1:
         1d:19:79:45:dc:25:3b:b5:b3:2e:5a:c3:8c:d6:e1:a9:fe:ce:
         f3:ff:73:32:55:bf:cb:67:32:6b:cf:20:cc:b4:e7:ed:07:2a:
         2e:96:af:e7:58:54:36:d1:46:f9:09:34:cc:23:8d:1b:07:66:
         6d:ed:a3:4f:8d:12:e3:b7:1c:af:56:16:09:b1:81:b8:0f:cb:
         d9:36:39:5d:40:3c:a1:a2:60:29:97:db:8b:82:63:70:d2:c0:
         b5:df:c2:e5:0a:d7:b9:ac:d2:ea:ea:a9:b1:17:b3:63:59:6f:
         16:08:fb:7e:ed:c1:e6:39:22:f9:19:47:4c:d5:66:8d:75:21:
         b4:86:85:9a:ac:d3:d1:29:16:5d:2b:bf:71:71:84:54:1e:77:
         1d:d8:f7:55:75:6c:f9:ae:0f:03:44:97:e5:6d:38:ac:07:d6:
         fc:ce:12:7f:1a:b1:80:21:43:66:ff:4e:64:9f:1b:3b:9f:cb:
         b4:3f:b1:98:71:4a:ff:52:50:c0:cc:ff:64:8f:e4:7a:32:46:
         50:97:d8:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:05:06 2026 by rpki-client