Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a31303a3a2f34342d3438203d3e20323634373333.roa
File:                     323830333a643238303a31303a3a2f34342d3438203d3e20323634373333.roa (raw, json)
Hash identifier:          cesRTNSpoDiyIsxPjhWKW9M2TGjdo+DEI6cO/zCvlcA=
Subject key identifier:   A7:46:1B:CC:B4:AC:84:3D:89:40:EA:FD:83:C6:23:62:3B:D9:90:C3
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       5B302D1668996D05D57CA22CA4E4768F429AD74C
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a31303a3a2f34342d3438203d3e20323634373333.roa
Signing time:             Wed 04 Feb 2026 15:29:05 +0000
ROA not before:           Wed 04 Feb 2026 15:24:05 +0000
ROA not after:            Wed 03 Feb 2027 15:29:05 +0000
asID:                     264733
IP address blocks:        2803:d280:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:30:2d:16:68:99:6d:05:d5:7c:a2:2c:a4:e4:76:8f:42:9a:d7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Feb  4 15:24:05 2026 GMT
            Not After : Feb  3 15:29:05 2027 GMT
        Subject: CN=A7461BCCB4AC843D8940EAFD83C623623BD990C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:39:8a:0b:5e:93:d4:0d:40:ca:07:9e:a4:
                    de:80:37:6e:0c:31:19:8d:53:32:24:cb:bc:3a:ba:
                    bc:fa:27:94:95:18:2f:c4:3b:c5:b8:fb:c0:8e:14:
                    8a:0a:48:a4:97:56:bc:32:47:3e:64:4c:aa:94:ca:
                    df:f1:46:2f:86:63:75:1e:ca:ef:e6:85:9c:df:42:
                    77:6a:e8:37:ab:bf:5c:a5:94:da:a0:c0:f8:2e:d9:
                    ad:a9:2e:91:dd:ed:87:74:93:ce:09:56:39:d9:1d:
                    c9:33:80:73:bf:c5:1f:17:2e:ba:f6:36:23:a3:18:
                    21:4c:8a:76:0e:db:a8:27:58:9a:99:3d:67:4d:21:
                    62:4d:69:12:2b:66:fa:0d:3e:42:6a:7a:0b:f4:73:
                    63:9e:8e:84:a9:e2:17:cd:a1:d5:51:71:77:50:fd:
                    60:cf:a5:1e:5b:18:24:e2:20:29:b1:a9:6d:34:de:
                    bc:4a:2c:54:ae:ec:ba:a8:f9:94:f9:11:f7:38:1e:
                    79:ba:67:c4:7e:c6:7f:6b:21:43:df:26:83:4a:86:
                    75:b3:5c:eb:60:5f:bb:7a:9b:7a:43:47:bd:f1:c5:
                    88:d6:ce:e3:c5:0e:46:d6:0b:4e:c1:25:2e:d4:8f:
                    9a:c5:a5:03:bd:bb:db:78:9f:45:aa:dc:6b:00:33:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:1B:CC:B4:AC:84:3D:89:40:EA:FD:83:C6:23:62:3B:D9:90:C3
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a31303a3a2f34342d3438203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:01:cf:fb:24:8a:f0:12:e9:cd:26:aa:30:c9:05:4e:c8:b9:
         ec:2e:54:98:b0:f4:6d:88:2d:f3:20:c6:95:ac:91:d0:e6:c2:
         b2:b9:af:4d:5d:53:ee:1e:55:76:d4:1e:13:b5:ef:04:91:98:
         43:b2:62:c6:0e:5f:1f:a8:00:67:69:4a:bc:fb:9f:7f:6b:46:
         90:39:f5:17:f2:00:ff:89:e5:51:6d:48:b2:6b:d1:5a:ec:0f:
         47:cc:4b:70:f1:b1:1f:90:06:25:6b:9d:d4:14:dc:e2:a4:7b:
         41:ba:ac:c4:cd:de:49:7c:80:23:a4:4e:5a:a7:db:ac:94:72:
         d9:ed:2f:c9:37:a6:65:b2:0b:8a:b1:f3:45:d5:bc:c8:85:37:
         a7:08:77:48:0c:9a:21:29:84:f8:d3:f9:44:b1:d2:b7:32:69:
         5b:98:24:ea:97:2b:61:2e:dc:18:6a:ba:26:ca:b5:36:88:c3:
         73:22:b0:fd:7a:55:84:ac:e6:57:59:6f:4e:b9:2d:e4:d0:5a:
         eb:88:10:a7:2e:8c:05:1e:2f:76:9e:8e:d6:b2:ab:36:87:3c:
         d9:c6:ee:92:e3:96:22:f8:9e:3e:ee:6e:8f:79:e9:41:dc:eb:
         2b:2f:95:f8:c1:b4:9f:a3:dc:52:b0:47:1e:64:4e:60:be:03:
         66:a1:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:28:33 2026 by rpki-client