Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa
File:                     323830333a363436303a3a2f33322d3336203d3e20323637383334.roa (raw, json)
Hash identifier:          RB092ODaeeciOm1VblYUyxWQf5RLavSk7EMbxa7u/8w=
Subject key identifier:   BE:1D:72:B1:57:26:A2:56:E0:F5:05:42:E4:F3:C5:C3:A0:AE:07:20
Certificate issuer:       /CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
Certificate serial:       14FA7D540736069A3817FBB9D85044D3D37ADDA9
Authority key identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa
Signing time:             Fri 27 Feb 2026 15:32:10 +0000
ROA not before:           Fri 27 Feb 2026 15:27:10 +0000
ROA not after:            Fri 26 Feb 2027 15:32:10 +0000
asID:                     267834
IP address blocks:        2803:6460::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 15:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:7d:54:07:36:06:9a:38:17:fb:b9:d8:50:44:d3:d3:7a:dd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
        Validity
            Not Before: Feb 27 15:27:10 2026 GMT
            Not After : Feb 26 15:32:10 2027 GMT
        Subject: CN=BE1D72B15726A256E0F50542E4F3C5C3A0AE0720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:ce:73:c3:ff:81:41:42:30:82:d1:85:b0:
                    b4:c5:e7:97:8b:13:dc:9a:9e:cc:bb:cd:25:76:a7:
                    bd:de:07:9a:41:2c:89:7e:3c:d9:7d:da:88:c5:00:
                    46:e3:12:e3:96:3c:00:7a:72:a5:f9:84:61:56:0e:
                    09:d4:2e:ce:6e:c4:5d:7b:81:38:06:fa:3e:b6:4f:
                    30:2c:92:6c:68:30:39:37:fe:b8:61:a8:93:19:95:
                    bd:87:38:6f:d0:ee:66:64:a3:b2:d2:8d:1c:57:6b:
                    55:a2:04:ed:48:48:7e:b5:a7:93:7d:e6:1b:64:7c:
                    61:c5:a0:61:4b:f3:f6:36:5b:e8:99:a0:7d:b0:79:
                    be:36:bc:2e:4c:c6:69:e9:a6:f4:30:74:1b:77:8d:
                    b5:5b:8d:42:b4:08:38:a4:2f:17:03:54:cb:71:33:
                    0f:0a:5f:c2:9c:11:97:a7:c3:d1:d3:e6:8b:b2:b4:
                    ea:da:26:bf:1b:f3:8d:6d:06:53:0b:1b:da:2a:d8:
                    c1:49:a1:e3:de:e7:5b:ea:5b:45:46:f9:6e:76:0f:
                    e8:08:29:49:65:29:de:58:08:96:66:6e:42:35:fa:
                    6a:81:72:82:19:72:a4:c8:68:ee:df:16:3b:01:62:
                    9f:60:1c:cb:ec:fc:7a:90:b2:a7:ac:ba:59:a1:02:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:72:B1:57:26:A2:56:E0:F5:05:42:E4:F3:C5:C3:A0:AE:07:20
            X509v3 Authority Key Identifier:
                keyid:D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6460::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:40:29:e7:c0:8f:66:78:23:64:39:3d:31:d3:77:e2:43:24:
         3d:5d:e7:74:46:71:07:3d:f1:e0:05:b8:cb:f6:d4:d1:4c:55:
         05:d2:19:6b:b5:37:a3:f0:d1:db:c8:25:7c:09:79:d6:c0:df:
         91:e3:21:0e:bd:f2:0a:d4:16:cb:07:f2:80:b3:6c:87:c6:2b:
         0e:f5:a4:95:04:2a:a6:12:90:39:15:5f:2f:88:56:65:7f:82:
         6a:a3:e7:0e:a3:7e:94:d6:8b:88:45:11:38:a3:d0:36:98:76:
         4b:4d:5e:72:1e:35:51:01:90:20:22:a3:98:d7:d5:34:63:b6:
         18:95:ce:57:2f:bf:ea:b0:05:19:bd:bd:0f:cb:1f:2e:05:a2:
         58:20:80:60:6c:80:4d:44:39:eb:3b:5b:22:ef:31:c2:e7:a5:
         b2:e5:f5:81:a4:99:61:e0:60:33:8b:2f:c2:d3:e1:24:4e:db:
         e7:eb:78:80:aa:29:2b:e2:21:17:3d:61:47:ef:1e:34:07:af:
         44:51:22:be:11:af:a3:2d:d0:51:b1:87:5c:ba:ea:82:0d:8b:
         66:f7:15:20:b8:f1:7b:5b:46:b2:57:2f:33:29:11:4d:5a:94:
         3e:cb:ad:86:e0:1d:e6:27:d2:ac:0d:6a:92:6b:42:03:aa:d9:
         c0:5d:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:29 2026 by rpki-client