Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34342d3438203d3e203634313634.roa
File:                     323830313a3138643a3a2f34342d3438203d3e203634313634.roa (raw, json)
Hash identifier:          hUVHGvo8oNUOOzdevC6hw7JF82lIHTAqXVJbjUsNxGc=
Subject key identifier:   B9:82:EB:8B:3A:D9:DE:81:07:F9:98:4C:F2:24:14:7C:DE:DA:83:9B
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       4F3D7EDF1003D2C1221F6DCFA1D959A5E9434314
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34342d3438203d3e203634313634.roa
Signing time:             Fri 27 Feb 2026 20:10:00 +0000
ROA not before:           Fri 27 Feb 2026 20:05:00 +0000
ROA not after:            Fri 26 Feb 2027 20:10:00 +0000
asID:                     64164
IP address blocks:        2801:18d::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3d:7e:df:10:03:d2:c1:22:1f:6d:cf:a1:d9:59:a5:e9:43:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Feb 27 20:05:00 2026 GMT
            Not After : Feb 26 20:10:00 2027 GMT
        Subject: CN=B982EB8B3AD9DE8107F9984CF224147CDEDA839B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:0b:f5:42:69:5f:02:11:07:fc:12:68:22:
                    15:7f:a1:db:05:ca:20:44:43:c5:43:2b:06:2d:ce:
                    2d:13:78:f9:a8:9a:af:51:ee:fc:ed:21:16:5d:64:
                    39:67:23:20:6a:3a:8c:43:30:f9:e5:14:36:c2:32:
                    88:88:c3:16:bc:16:c9:14:72:e9:a5:36:51:41:6a:
                    8f:1d:33:e1:66:07:57:3c:cb:34:74:6f:d9:03:76:
                    2a:fd:a8:9d:03:5d:aa:84:c2:b7:df:3e:eb:b4:36:
                    6d:d1:30:9c:52:92:01:ac:11:58:9c:6f:78:cc:79:
                    82:85:09:b2:7b:7a:d0:6c:df:26:62:66:7a:f3:ba:
                    5f:40:3a:d4:35:8d:46:83:80:33:f6:43:69:0d:76:
                    f6:af:49:b6:4f:d0:b1:f2:6f:f9:cc:04:bb:d6:5a:
                    3d:f0:83:2b:9e:fd:29:6e:53:d4:11:cf:91:8b:d2:
                    5a:92:d7:37:73:76:5d:4e:76:fa:b6:8b:05:49:1c:
                    fd:87:2c:43:78:19:5d:5f:fb:62:9f:6f:9e:33:f4:
                    31:a3:ad:8a:1f:2b:7b:33:dc:c1:78:69:36:c7:6f:
                    b2:97:c4:f2:09:ab:3e:b4:fa:ab:cb:fc:21:c2:66:
                    9a:bf:ee:88:fa:66:87:37:8d:e8:fc:9f:1d:13:ac:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:EB:8B:3A:D9:DE:81:07:F9:98:4C:F2:24:14:7C:DE:DA:83:9B
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34342d3438203d3e203634313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18d::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:62:90:6f:df:a2:7a:76:ae:40:69:01:db:f6:49:57:9e:
         70:e3:05:2b:c5:80:13:58:56:08:48:77:7e:bc:1d:53:fe:23:
         51:4b:b2:93:64:e5:e1:88:3f:a1:b2:17:4b:13:81:5f:8f:91:
         06:8b:33:e1:ab:0f:38:59:1c:ac:7d:d2:0a:57:a3:6a:9f:26:
         5e:3d:ec:84:40:bc:cd:c4:00:f3:38:3f:14:2f:55:67:07:b9:
         51:c9:5e:13:f4:f5:d2:d7:ad:14:f3:b2:b9:9b:84:2d:6c:6c:
         35:59:45:9a:f2:f2:6e:25:61:df:07:01:4b:ec:3a:76:b0:80:
         ee:bf:53:07:6e:1a:97:9a:1a:7b:c0:ea:9a:d7:f5:9b:43:f1:
         5c:16:fd:44:00:d3:78:74:59:90:5b:94:31:bb:f9:df:dd:2c:
         bf:41:85:d3:ea:ba:d2:1a:a9:99:ad:93:48:4e:28:63:fc:f4:
         87:e0:5f:df:e5:bb:55:28:0b:bc:f2:32:53:4b:9d:65:b1:39:
         69:42:47:c2:84:29:0f:d4:a0:34:c6:90:f4:a2:98:84:b3:4e:
         79:af:c8:0e:b5:50:08:9c:7c:0a:06:71:1b:28:b5:28:08:14:
         ae:50:4c:21:29:7c:cf:02:58:26:57:72:4c:88:c1:f9:fe:13:
         7f:ca:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:21 2026 by rpki-client