Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa
File:                     323830333a613838303a3a2f33322d3332203d3e203237383730.roa (raw, json)
Hash identifier:          Y4cuGly5xgZb8TUIKFaoBTrNHHMoTCc5Xdvsy6P46sM=
Subject key identifier:   5E:E6:15:4B:D6:DB:F1:60:9D:C0:7C:AB:10:7C:57:F2:12:4D:86:ED
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       7585970AB5F3EE63FE85381388139A15081EBC86
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa
Signing time:             Fri 30 Jan 2026 15:28:26 +0000
ROA not before:           Fri 30 Jan 2026 15:23:26 +0000
ROA not after:            Fri 29 Jan 2027 15:28:26 +0000
asID:                     27870
IP address blocks:        2803:a880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:85:97:0a:b5:f3:ee:63:fe:85:38:13:88:13:9a:15:08:1e:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Jan 30 15:23:26 2026 GMT
            Not After : Jan 29 15:28:26 2027 GMT
        Subject: CN=5EE6154BD6DBF1609DC07CAB107C57F2124D86ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:83:35:bb:32:6d:9e:4f:fb:30:73:6e:d9:
                    c1:cc:98:f6:dc:90:bc:bf:75:c0:1d:42:56:08:41:
                    f2:dc:65:a9:01:4c:14:29:d6:47:bf:d1:43:e5:ec:
                    4d:db:10:2e:79:29:e0:bb:37:f7:19:46:34:a3:01:
                    de:2d:e6:23:7f:63:19:a9:0c:9f:85:e9:67:95:d6:
                    32:bb:f0:5d:9b:e1:c5:73:63:b5:90:f2:ed:15:f1:
                    9a:f8:d6:a7:6d:c0:77:b6:38:50:a0:7e:08:94:14:
                    8a:ca:93:ee:e6:23:1b:55:d1:69:ab:a2:ec:51:27:
                    4d:13:da:e7:de:c7:93:ec:dc:a6:0a:8a:b5:39:ee:
                    11:49:62:02:44:d3:fa:95:33:7e:53:73:e1:75:ea:
                    6d:82:d9:15:72:c9:5d:b4:c7:d1:7f:e4:74:eb:04:
                    2b:ff:4c:dc:b9:e8:4c:52:94:27:6a:59:79:fd:96:
                    c6:04:f4:2c:80:73:17:77:bd:cd:c3:06:fe:5b:80:
                    db:23:0c:06:15:0e:72:f0:48:bf:e8:8e:c7:70:e9:
                    64:80:1c:ee:b8:ce:ee:7a:bc:95:dd:e7:a4:f8:30:
                    37:88:ea:0f:72:25:0a:e3:c1:14:67:58:4a:15:b2:
                    14:66:cf:6e:c3:0f:1a:5a:0f:e4:d2:01:8e:8e:5e:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:15:4B:D6:DB:F1:60:9D:C0:7C:AB:10:7C:57:F2:12:4D:86:ED
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a880::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:a2:ef:fc:fd:1e:05:6f:ca:40:f7:ef:49:3d:8b:7b:bc:
         69:95:dd:3a:c2:4d:49:23:2c:d2:90:8a:c7:b5:5e:02:51:1d:
         3b:b1:2b:f8:33:f4:31:c7:67:5f:e3:ee:de:ad:b1:fa:52:5b:
         27:8f:bd:f9:27:af:1d:0c:b0:ba:39:a8:49:a1:35:a6:78:f4:
         42:14:84:34:c0:27:34:2b:37:67:34:6e:9e:ca:3a:5e:17:10:
         3e:e8:cc:3f:cb:4f:84:a2:70:11:d4:4d:c6:85:c3:9b:ab:b1:
         c5:70:f2:3b:0a:7a:66:53:5c:05:01:37:a6:27:0d:35:ef:7f:
         32:8e:0b:90:fe:21:26:21:f4:3e:ce:ba:0e:54:02:a3:c8:4d:
         09:64:2f:db:7d:58:c9:44:9d:1b:1e:5d:fd:46:25:e7:b4:bd:
         bd:36:37:3e:26:be:b7:99:84:15:b4:72:0b:b0:aa:cb:d9:e1:
         fe:cb:61:74:7c:50:5a:73:ee:b6:82:fa:89:93:f3:46:ba:13:
         b2:21:cf:d4:f8:82:38:64:c2:35:92:5b:f3:18:f3:b2:bc:32:
         c4:7d:21:d2:74:32:38:75:62:52:c1:7a:0f:90:4b:87:96:08:
         e3:6a:4e:65:95:33:5d:67:12:4f:ba:e6:35:86:16:c0:be:7a:
         35:f1:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:47:11 2026 by rpki-client