Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/323830333a326333303a3a2f33322d3438203d3e20323734333231.roa
File:                     323830333a326333303a3a2f33322d3438203d3e20323734333231.roa (raw, json)
Hash identifier:          C9YceDcSk1xJDX1pSZQ3Pp7MXzQAEP32mnboqrFqhks=
Subject key identifier:   80:12:11:2C:57:E1:5C:BF:CF:37:53:91:11:DF:86:C0:AD:69:31:DB
Certificate issuer:       /CN=72E18924F5C9AA32B2EE37372808E639837F958D
Certificate serial:       22D9CF59C2DA27FF203B14E81D1817265C2A8C45
Authority key identifier: 72:E1:89:24:F5:C9:AA:32:B2:EE:37:37:28:08:E6:39:83:7F:95:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E18924F5C9AA32B2EE37372808E639837F958D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/323830333a326333303a3a2f33322d3438203d3e20323734333231.roa
Signing time:             Mon 16 Feb 2026 17:30:00 +0000
ROA not before:           Mon 16 Feb 2026 17:25:00 +0000
ROA not after:            Mon 15 Feb 2027 17:30:00 +0000
asID:                     274321
IP address blocks:        2803:2c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/72E18924F5C9AA32B2EE37372808E639837F958D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/72E18924F5C9AA32B2EE37372808E639837F958D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E18924F5C9AA32B2EE37372808E639837F958D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d9:cf:59:c2:da:27:ff:20:3b:14:e8:1d:18:17:26:5c:2a:8c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72E18924F5C9AA32B2EE37372808E639837F958D
        Validity
            Not Before: Feb 16 17:25:00 2026 GMT
            Not After : Feb 15 17:30:00 2027 GMT
        Subject: CN=8012112C57E15CBFCF37539111DF86C0AD6931DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:a3:eb:56:c8:5f:9e:39:f2:28:7e:89:fd:
                    6a:87:7a:cd:04:e8:a2:47:3e:22:be:08:1c:d5:d5:
                    42:1b:8a:2d:08:aa:f1:1c:c0:30:b4:29:c9:bd:da:
                    81:8e:f4:61:f9:af:ba:bf:bc:ac:89:82:43:89:59:
                    7c:1f:6c:04:0d:8f:2b:a1:31:53:db:59:5b:9f:82:
                    58:b5:2a:21:40:ce:fd:1e:7e:46:0f:46:10:7a:10:
                    79:b2:40:81:95:b1:30:7a:d0:e1:04:85:d0:37:2d:
                    cd:19:31:72:80:b4:e7:d4:34:be:77:1d:91:d1:61:
                    7e:c0:c5:b8:13:d2:7f:ef:f4:1e:b5:08:14:22:50:
                    24:e9:89:87:3d:a5:19:25:b4:c2:11:f5:a5:66:ba:
                    38:43:3a:07:30:1d:f3:90:f5:47:5e:e8:f4:fa:81:
                    f9:ee:2c:27:31:24:03:b2:36:d0:25:45:99:66:8f:
                    6a:ab:ab:de:c9:3c:15:fe:53:01:cd:28:55:ba:30:
                    e6:38:00:45:35:40:db:3c:88:03:0a:ad:9f:bd:f9:
                    2b:24:c8:aa:c1:8a:41:28:40:bf:b8:34:58:3d:cd:
                    f0:34:70:2b:0c:e4:2c:08:e6:2d:f7:4f:a8:3a:51:
                    b6:82:d3:a7:ee:50:28:7b:d2:70:dd:84:0a:cd:92:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:12:11:2C:57:E1:5C:BF:CF:37:53:91:11:DF:86:C0:AD:69:31:DB
            X509v3 Authority Key Identifier:
                keyid:72:E1:89:24:F5:C9:AA:32:B2:EE:37:37:28:08:E6:39:83:7F:95:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/72E18924F5C9AA32B2EE37372808E639837F958D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E18924F5C9AA32B2EE37372808E639837F958D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4144EA1907021E63EA5236536464BB5836A966ABEC5BABC3BE8C3307F486444B/0/323830333a326333303a3a2f33322d3438203d3e20323734333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:84:b2:22:b1:0f:f9:d2:97:fa:44:f1:03:09:2a:11:4e:53:
         47:46:3b:5f:bd:05:f1:c6:4e:89:6c:ec:49:3f:97:d6:9b:3f:
         bb:0c:7f:28:35:31:62:f7:06:bb:fc:bc:7e:fa:78:23:1b:10:
         d6:e6:bd:24:f1:56:84:4f:1b:ee:7f:c6:d5:d0:71:3d:eb:97:
         d1:f4:f6:6c:c0:64:b2:c0:55:ac:20:d9:3b:22:a9:a9:10:cc:
         e9:94:ba:a1:ac:17:3f:ef:60:bc:29:2c:41:2c:41:a0:14:6c:
         07:96:89:ce:66:7b:44:e0:eb:fe:38:fa:77:ad:ce:f4:53:69:
         e7:3e:b5:fa:d5:d5:ae:21:8a:b9:3f:cb:d9:a3:08:d6:50:40:
         96:21:db:5f:d1:78:07:f7:b5:c4:48:37:fd:d1:c8:cb:4a:79:
         62:d1:ac:1f:67:6b:88:58:ee:7c:d7:09:54:95:9a:71:88:9a:
         55:81:10:96:7f:b1:79:6f:8b:6a:07:dd:ca:a9:54:71:0f:02:
         ca:6a:3b:61:51:33:d4:9b:af:b5:dc:42:b8:4a:fb:8d:ca:8b:
         6b:4a:af:08:e9:f1:eb:47:06:55:4b:9a:4a:02:e8:c9:af:c1:
         81:47:45:78:58:e8:30:e4:72:92:91:81:80:10:2e:a9:e8:04:
         02:7c:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:09:59 2026 by rpki-client