Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a3130303a3a2f34332d3434203d3e20323637393139.roa
File:                     323830333a656536303a3130303a3a2f34332d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          tuV5qhEZ5byJS7kb86IWiylFKJa0re1Rt0hkxvx4oIM=
Subject key identifier:   B6:94:DC:90:A6:0A:3A:D4:34:78:EB:AE:F1:09:A2:54:3C:17:39:35
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       0DAAEC59C972B0F4C7E5F1360943FAB3ACB69561
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a3130303a3a2f34332d3434203d3e20323637393139.roa
Signing time:             Thu 05 Feb 2026 12:40:00 +0000
ROA not before:           Thu 05 Feb 2026 12:35:00 +0000
ROA not after:            Thu 04 Feb 2027 12:40:00 +0000
asID:                     267919
IP address blocks:        2803:ee60:100::/43 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:aa:ec:59:c9:72:b0:f4:c7:e5:f1:36:09:43:fa:b3:ac:b6:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  5 12:35:00 2026 GMT
            Not After : Feb  4 12:40:00 2027 GMT
        Subject: CN=B694DC90A60A3AD43478EBAEF109A2543C173935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:28:22:79:a1:15:06:21:38:cc:f2:5d:5f:
                    65:33:d1:a3:1a:fb:4f:49:8a:e5:4a:ea:e2:cc:a0:
                    d8:8e:7e:7e:85:71:a6:64:ad:d4:c9:90:56:e2:90:
                    fd:aa:e9:22:92:7f:1d:e3:e0:aa:9f:2f:37:21:41:
                    56:87:74:bf:31:58:df:0b:8b:c2:29:79:bf:66:f8:
                    9a:f1:28:e2:0d:fd:a3:77:32:2c:18:7a:75:28:86:
                    e5:1d:7d:17:32:47:a4:f4:5d:2f:80:ae:33:20:e7:
                    25:be:50:35:d9:b0:c8:51:8b:b4:5b:40:8e:c8:34:
                    fc:5a:6f:4c:ac:0e:f4:bc:d7:5b:61:36:74:ff:6e:
                    45:a0:9c:71:b6:ce:d4:0c:de:17:5c:60:6a:12:bc:
                    a1:49:90:94:f0:c8:8a:bb:71:4d:bf:0d:78:b5:49:
                    71:eb:41:cf:42:26:e1:e5:58:17:87:38:9d:10:31:
                    29:dd:7e:d7:df:0a:c5:fc:a8:6b:c5:63:fa:9c:5f:
                    77:14:02:3c:46:0d:1a:8f:cf:b8:21:5b:d3:66:c9:
                    8e:18:34:48:6e:db:ef:0d:f2:01:26:1f:02:cf:d8:
                    7f:56:7c:d8:c5:f8:23:49:19:22:3a:37:c5:2d:08:
                    c1:34:0d:5f:b7:ef:ba:ee:64:06:7b:cb:a1:c6:4e:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:DC:90:A6:0A:3A:D4:34:78:EB:AE:F1:09:A2:54:3C:17:39:35
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a3130303a3a2f34332d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:8e:56:ff:18:ab:24:47:d4:78:84:99:9a:39:72:24:90:
         59:5e:04:22:b3:b4:a5:db:71:2b:87:6b:ed:d4:30:df:28:2b:
         19:7b:e7:1d:3b:29:4c:90:ce:00:55:ee:05:de:0f:26:18:0b:
         ba:b0:7c:e2:4b:9b:b5:26:b2:0a:09:b1:9a:5e:6b:d5:42:4a:
         01:ce:a6:54:e5:6b:e4:e0:05:2c:b1:75:0b:84:23:ea:fa:35:
         9b:01:7c:2c:5a:f1:fc:31:1b:fc:49:59:4f:84:f7:a7:ab:9f:
         4c:74:50:fe:ca:43:9b:bf:5b:ef:26:6e:00:04:fe:5a:dd:48:
         47:bf:95:4a:cc:f7:2c:28:f4:33:2a:a0:3a:76:64:d1:fc:0c:
         e0:11:86:b9:d8:41:5e:b5:53:2d:f5:9e:bb:36:74:9a:51:35:
         c5:31:c9:e7:82:a2:01:f8:7e:00:8e:08:b7:79:85:73:96:ac:
         78:59:ee:a3:30:17:b7:cf:11:20:82:2d:d9:86:60:0b:94:cc:
         b5:b6:a8:36:86:cc:79:2c:3d:24:69:30:2b:ff:9d:88:ab:69:
         2a:af:25:c8:a7:47:00:cc:59:c5:d4:6a:14:96:9d:5a:39:a0:
         eb:c5:f2:3c:d4:d7:2f:77:51:92:2a:8a:e0:5a:9a:77:62:2e:
         e9:7a:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:38:25 2026 by rpki-client