Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/323830363a3266623a3a2f33322d3332203d3e20323635353437.roa
File:                     323830363a3266623a3a2f33322d3332203d3e20323635353437.roa (raw, json)
Hash identifier:          zvm7vQBz2mwaoDV1rl2HhuNIeU83T63kuOw3M2OEPno=
Subject key identifier:   40:B0:15:62:E3:BF:A5:8D:62:97:71:85:C5:4A:A3:3F:DF:2E:29:A7
Certificate issuer:       /CN=069B69CFC3EF8B59480A7C79604E073AD70E7DD2
Certificate serial:       681618E00C857DB1A1C32BE92EF9327F5A1F3C5D
Authority key identifier: 06:9B:69:CF:C3:EF:8B:59:48:0A:7C:79:60:4E:07:3A:D7:0E:7D:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/323830363a3266623a3a2f33322d3332203d3e20323635353437.roa
Signing time:             Thu 19 Feb 2026 14:35:00 +0000
ROA not before:           Thu 19 Feb 2026 14:30:00 +0000
ROA not after:            Thu 18 Feb 2027 14:35:00 +0000
asID:                     265547
IP address blocks:        2806:2fb::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:16:18:e0:0c:85:7d:b1:a1:c3:2b:e9:2e:f9:32:7f:5a:1f:3c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069B69CFC3EF8B59480A7C79604E073AD70E7DD2
        Validity
            Not Before: Feb 19 14:30:00 2026 GMT
            Not After : Feb 18 14:35:00 2027 GMT
        Subject: CN=40B01562E3BFA58D62977185C54AA33FDF2E29A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:95:e8:b1:c8:c2:6a:51:68:63:e1:fd:50:
                    b3:0f:01:81:00:47:d9:49:45:89:f8:ef:51:db:f4:
                    47:89:19:dd:95:b1:7e:d2:dd:e9:72:39:0e:d9:5c:
                    10:80:ec:37:76:b3:60:76:6e:87:53:ce:a5:a7:4c:
                    d5:c9:0e:8d:dc:ef:01:fb:f6:43:9e:44:bb:fe:f7:
                    35:69:07:26:21:6c:8c:13:f1:66:71:98:2e:c3:87:
                    44:13:6c:2a:38:66:77:61:09:5b:0e:2d:22:c5:f4:
                    31:7a:9d:96:a2:73:28:b1:b6:00:bf:2b:16:b0:1b:
                    c4:70:45:b6:fb:42:7f:cd:72:04:6b:ce:7b:4c:c1:
                    ec:48:37:65:5d:0a:ab:e2:02:c6:ba:ff:b5:04:63:
                    d5:cf:82:da:9c:e3:37:22:01:85:1b:84:fb:35:12:
                    f4:c1:4c:9c:19:da:da:d3:13:cd:28:fc:dd:7e:c9:
                    ae:3e:28:5f:ad:5e:91:b1:33:90:7c:d6:ef:8d:4a:
                    e4:ef:ee:68:76:d5:16:78:eb:39:a1:d4:4d:d3:2c:
                    15:55:3a:f9:47:51:ca:05:26:79:bb:15:da:ea:d4:
                    e4:8c:89:05:8e:10:31:db:6b:40:93:91:70:4e:d9:
                    c9:68:99:1d:d4:78:d0:9f:74:a7:65:d4:4d:ba:c8:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B0:15:62:E3:BF:A5:8D:62:97:71:85:C5:4A:A3:3F:DF:2E:29:A7
            X509v3 Authority Key Identifier:
                keyid:06:9B:69:CF:C3:EF:8B:59:48:0A:7C:79:60:4E:07:3A:D7:0E:7D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/323830363a3266623a3a2f33322d3332203d3e20323635353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2fb::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:96:20:e8:6f:6b:6e:4b:86:01:f2:6e:1c:96:91:ed:d5:90:
         08:56:c3:1a:e0:25:ea:96:b2:ef:33:84:3b:6b:5e:5f:2d:b3:
         bd:4c:d7:17:f2:b1:b6:3e:fe:cf:f1:f6:6e:99:80:d3:dd:0c:
         0c:95:e8:ff:fa:dd:62:0b:c6:49:54:8e:3e:41:39:01:a8:0d:
         01:2e:f6:a3:ab:42:fd:c1:78:65:e9:36:77:c5:d8:9e:1f:f8:
         d9:e3:38:fd:77:61:16:2d:75:3a:05:cc:bf:51:25:c7:f4:3e:
         8d:38:57:f4:a8:dd:70:03:ba:40:17:9f:00:4a:0f:e4:5f:cb:
         14:2c:1e:c5:d5:02:0d:cc:10:17:54:3e:2c:e7:c0:43:84:59:
         91:f8:57:cb:9b:01:9c:5b:df:b4:d9:df:db:48:38:d4:07:88:
         d1:d0:8a:4a:92:8f:fd:88:8c:00:4f:39:41:8e:7f:0b:51:cf:
         39:5f:b0:ba:9e:67:b0:3b:02:19:21:a7:9a:d0:95:5e:e4:1c:
         ed:a3:ea:12:6b:b6:9b:d7:81:67:56:5e:ea:be:69:c0:9d:78:
         fb:aa:c4:0f:a6:8c:9e:5e:c4:2c:a1:6d:90:ed:7d:c0:af:03:
         3d:74:52:35:5b:63:4e:28:43:8f:13:2e:f9:4f:7c:51:81:be:
         b8:8a:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:41 2026 by rpki-client