Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          kcwgA6vpLJiBqR9GBaamTQJCZoJtbGm3yEzQs5mJMqk=
Subject key identifier:   1C:09:10:E7:B7:BD:7F:EA:03:6C:08:8E:43:F6:87:88:DC:2C:AC:36
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       7D4A32B7E0D0630E50EB2A04602ABFA2E80CB83C
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:05 +0000
ROA not before:           Mon 16 Feb 2026 22:45:05 +0000
ROA not after:            Mon 15 Feb 2027 22:50:05 +0000
asID:                     273821
IP address blocks:        2803:e150::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4a:32:b7:e0:d0:63:0e:50:eb:2a:04:60:2a:bf:a2:e8:0c:b8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:05 2026 GMT
            Not After : Feb 15 22:50:05 2027 GMT
        Subject: CN=1C0910E7B7BD7FEA036C088E43F68788DC2CAC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:73:aa:3d:48:0f:db:59:be:9a:81:66:2a:
                    e9:48:b1:70:3b:31:b2:a4:1c:7f:2a:95:65:45:21:
                    63:24:6f:6c:bd:61:eb:a9:32:f5:36:72:07:66:f1:
                    e5:b3:7a:a2:ef:55:3a:1d:be:25:33:37:39:28:e2:
                    f5:37:ba:0b:1e:94:61:ca:e9:a0:30:19:42:0e:87:
                    52:6a:96:9a:f7:77:d6:e9:04:6d:ea:b0:16:42:39:
                    02:93:b5:1e:71:27:ca:1e:99:7a:83:26:67:fe:0c:
                    7d:ca:d0:2f:62:49:5e:4f:fb:66:bd:e0:fb:22:ab:
                    59:c4:83:b3:64:dd:db:0c:4d:68:1a:2a:0c:cc:e9:
                    ff:3d:ec:63:83:13:70:2c:a4:42:87:dd:35:22:46:
                    87:71:92:af:92:aa:72:92:04:6e:f7:3e:30:ed:57:
                    99:02:32:8b:94:2c:89:e2:f7:f2:97:88:b0:7a:26:
                    38:de:14:b9:3b:3d:30:01:0f:c8:4c:c5:49:75:77:
                    62:db:10:53:c7:b6:1b:ab:fc:14:3a:fd:99:d0:75:
                    63:7b:0d:b0:5f:39:0b:da:35:a9:79:b7:45:95:3b:
                    ae:be:c0:8b:6a:50:44:e0:78:51:a8:e2:7a:84:41:
                    e0:ed:09:3d:29:d7:52:d6:b4:d5:5b:c4:42:18:39:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:09:10:E7:B7:BD:7F:EA:03:6C:08:8E:43:F6:87:88:DC:2C:AC:36
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:a7:9c:72:58:f4:99:cb:21:52:b9:ae:bd:2d:73:a5:60:
         7a:a9:cd:59:7c:cc:2d:e5:75:f2:70:12:a5:b1:62:a8:a2:22:
         0c:59:f5:32:ba:c9:10:2d:d2:92:c7:11:cc:4b:33:ce:50:02:
         16:73:33:04:96:ca:92:b0:21:24:c8:99:bd:35:dc:13:02:31:
         fa:6a:03:2b:d7:ec:8b:4a:c7:6a:47:64:d2:fd:e9:77:d3:aa:
         ba:df:76:eb:38:49:4d:6c:af:af:fa:ce:da:cd:be:f8:05:35:
         8e:f9:9d:1b:b1:b3:1d:7d:fb:72:4a:52:85:21:7d:9f:65:bf:
         81:eb:35:00:35:16:64:01:44:28:ac:5c:48:61:de:d3:b0:7a:
         89:90:52:2e:d4:36:27:8d:29:9c:1b:97:77:b8:2a:16:16:86:
         4a:58:c2:1d:ea:22:bb:6a:a2:24:25:44:b5:94:a2:5c:e3:8f:
         30:e7:38:d2:1b:c3:9a:cb:17:9b:c9:e6:4c:ba:dd:48:aa:f4:
         48:1b:eb:18:10:3a:d0:6e:a4:39:7a:75:d1:2f:72:37:d1:c2:
         21:0e:b0:db:66:5f:db:d5:55:92:4d:87:d8:2e:c7:15:2e:40:
         39:5b:a1:29:10:b5:b6:42:98:f7:4e:3a:4e:2b:91:ff:c9:a7:
         f1:0d:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:48 2026 by rpki-client