Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a643030303a3a2f33362d3336203d3e20323733383231.roa
File:                     323830333a653135303a643030303a3a2f33362d3336203d3e20323733383231.roa (raw, json)
Hash identifier:          yiRDx9kzEP+IEePWPScB/GAz/wE1NjsI8SI0LtsyxYI=
Subject key identifier:   AD:A8:65:52:40:E6:AD:4E:66:39:6A:A1:B5:61:46:0E:75:0A:5C:62
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       0CD0B3A020683C13E7E6C162178301FE14A76DB1
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a643030303a3a2f33362d3336203d3e20323733383231.roa
Signing time:             Mon 16 Feb 2026 22:50:04 +0000
ROA not before:           Mon 16 Feb 2026 22:45:04 +0000
ROA not after:            Mon 15 Feb 2027 22:50:04 +0000
asID:                     273821
IP address blocks:        2803:e150:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d0:b3:a0:20:68:3c:13:e7:e6:c1:62:17:83:01:fe:14:a7:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: Feb 16 22:45:04 2026 GMT
            Not After : Feb 15 22:50:04 2027 GMT
        Subject: CN=ADA8655240E6AD4E66396AA1B561460E750A5C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:88:b3:8d:80:a0:58:bf:3b:ea:f9:dd:36:
                    8a:8a:f4:24:35:e0:a3:4e:00:b1:5e:f5:41:11:46:
                    4a:b8:a2:0d:17:0c:39:e9:f6:d0:de:62:11:8a:d9:
                    2e:6b:06:18:bc:8b:c2:31:94:bf:68:87:64:e2:d2:
                    07:0d:6e:a6:14:9e:c5:46:d5:98:79:7a:af:85:4d:
                    60:3e:6d:28:8e:07:77:dc:a6:b5:33:d6:ac:46:aa:
                    f3:63:f1:ce:e7:9d:87:c2:16:15:25:ae:7c:e5:9b:
                    d8:55:42:1e:44:94:ce:f2:f7:5d:73:cc:7c:b2:6a:
                    f0:2d:2d:9e:9d:f2:c7:2d:08:87:53:f8:9a:61:8a:
                    9c:7e:6a:89:9e:17:e3:d8:c1:51:bf:ba:a6:70:d5:
                    68:e6:f0:62:e8:1e:98:23:2a:36:26:97:cf:43:3e:
                    10:e0:63:af:59:e8:e9:14:17:32:4a:5b:c4:81:d4:
                    30:b8:4a:ad:84:71:3d:bc:d1:dc:e9:70:60:84:37:
                    9e:71:3b:ed:22:33:aa:a3:30:32:0e:73:24:d5:f3:
                    2d:58:11:37:dc:04:aa:03:b5:db:89:7c:6d:60:63:
                    11:9c:c5:00:3f:b2:3b:12:df:b8:79:27:5d:a8:38:
                    25:3a:f7:e4:b7:fc:12:59:ca:b6:c0:4b:4d:5d:d3:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:65:52:40:E6:AD:4E:66:39:6A:A1:B5:61:46:0E:75:0A:5C:62
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a643030303a3a2f33362d3336203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:89:aa:a1:f9:48:b9:89:49:fc:c4:bf:45:1d:42:22:5c:49:
         83:5c:f6:9e:ff:fc:23:75:4e:86:7f:e4:f7:92:a2:db:96:4a:
         b0:e2:5e:0b:f4:f9:88:bd:00:6d:81:cf:35:d5:d3:e9:ea:df:
         21:c7:99:d0:8a:18:e1:e7:8a:c5:48:33:17:61:8e:c3:1c:f1:
         02:e0:45:ec:08:0d:4f:2e:d3:f6:19:e7:f4:16:a4:31:e6:5e:
         71:3f:57:94:7f:e6:f2:f0:e6:ac:6e:d7:7e:1c:a7:c7:a7:9a:
         a1:7d:18:c4:0e:0a:4c:b4:cb:cd:4b:7b:48:3e:bc:05:e9:6d:
         5a:75:ed:6f:e5:0f:ec:1f:fa:4d:92:e3:db:22:84:12:b3:d5:
         2e:9a:82:ca:79:95:72:70:7f:77:55:34:17:89:ac:96:ea:73:
         5e:99:6d:ec:df:26:d0:79:c7:6a:b0:f1:c2:a1:45:7e:d2:36:
         79:f1:78:08:13:81:df:c3:fa:70:39:4d:5e:71:68:12:66:b1:
         b0:b5:58:ed:8c:65:04:c9:5b:00:2e:d5:5d:6a:9f:f8:6c:6f:
         65:e1:2b:46:ea:69:bf:9a:c9:49:80:66:86:7c:77:8d:74:52:
         20:24:3c:85:fe:1d:89:d5:11:8d:49:6c:28:49:58:c4:53:7e:
         69:b6:78:1d
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUDNCzoCBoPBPn5sFiF4MB/hSnbbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUwQjk0RkNDQTE1MEM0RkQ3OEJCNDg0N0RCODdDNUFC
Qjc3MEYxQTAeFw0yNjAyMTYyMjQ1MDRaFw0yNzAyMTUyMjUwMDRaMDMxMTAvBgNV
BAMTKEFEQTg2NTUyNDBFNkFENEU2NjM5NkFBMUI1NjE0NjBFNzUwQTVDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA4izjYCgWL876vndNoqK9CQ1
4KNOALFe9UERRkq4og0XDDnp9tDeYhGK2S5rBhi8i8IxlL9oh2Ti0gcNbqYUnsVG
1Zh5eq+FTWA+bSiOB3fcprUz1qxGqvNj8c7nnYfCFhUlrnzlm9hVQh5ElM7y911z
zHyyavAtLZ6d8sctCIdT+Jphipx+aomeF+PYwVG/uqZw1Wjm8GLoHpgjKjYml89D
PhDgY69Z6OkUFzJKW8SB1DC4Sq2EcT280dzpcGCEN55xO+0iM6qjMDIOcyTV8y1Y
ETfcBKoDtduJfG1gYxGcxQA/sjsS37h5J12oOCU69+S3/BJZyrbAS01d01DpAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUrahlUkDmrU5mOWqhtWFGDnUKXGIwHwYDVR0j
BBgwFoAU3guU/MoVDE/Xi7SEfbh8Wrt3DxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDE0M0Y2NkJGODg3MDgzOEE1RjRDNkVFRDdBOTA1NkNE
MjMwQzU5NzRFQUQxNjYzRkM0NzREMDhBNkZBNTczLzAvREUwQjk0RkNDQTE1MEM0
RkQ3OEJCNDg0N0RCODdDNUFCQjc3MEYxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERTBCOTRGQ0NBMTUwQzRGRDc4
QkI0ODQ3REI4N0M1QUJCNzcwRjFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxNDNGNjZCRjg4NzA4MzhBNUY0QzZFRUQ3QTkwNTZDRDIzMEM1OTc0
RUFEMTY2M0ZDNDc0RDA4QTZGQTU3My8wLzMyMzgzMDMzM2E2NTMxMzUzMDNhNjQz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzMzODMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA+FQ0DANBgkqhkiG9w0BAQsFAAOCAQEAB4mqoflIuYlJ/MS/RR1CIlxJ
g1z2nv/8I3VOhn/k95Ki25ZKsOJeC/T5iL0AbYHPNdXT6erfIceZ0IoY4eeKxUgz
F2GOwxzxAuBF7AgNTy7T9hnn9BakMeZecT9XlH/m8vDmrG7Xfhynx6eaoX0YxA4K
TLTLzUt7SD68BeltWnXtb+UP7B/6TZLj2yKEErPVLpqCynmVcnB/d1U0F4mslupz
Xplt7N8m0HnHarDxwqFFftI2efF4CBOB38P6cDlNXnFoEmaxsLVY7YxlBMlbAC7V
XWqf+GxvZeErRuppv5rJSYBmhnx3jXRSICQ8hf4didURjUlsKElYxFN+abZ4HQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:35 2026 by rpki-client