Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3230303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3230303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          +Wjee+DIZNzXTsN8CaiLAE5j7zkxkibkICoHi29MqHQ=
Subject key identifier:   7A:00:DF:CF:D0:0D:2C:9D:75:97:11:31:CF:A7:FA:B2:34:4B:B5:26
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       73884AE17CC91A2FA6532F12D5440812741236CE
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3230303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Thu 19 Feb 2026 00:31:15 +0000
ROA not before:           Thu 19 Feb 2026 00:26:15 +0000
ROA not after:            Thu 18 Feb 2027 00:31:15 +0000
asID:                     273218
IP address blocks:        2803:8e50:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:4a:e1:7c:c9:1a:2f:a6:53:2f:12:d5:44:08:12:74:12:36:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Feb 19 00:26:15 2026 GMT
            Not After : Feb 18 00:31:15 2027 GMT
        Subject: CN=7A00DFCFD00D2C9D75971131CFA7FAB2344BB526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:12:26:09:47:65:41:df:0b:79:f1:1d:a7:
                    d8:b9:60:19:3c:c7:7e:49:2f:e0:69:75:79:b0:be:
                    78:f9:2a:e2:d6:82:32:2a:88:b6:34:48:16:a6:da:
                    8a:05:38:ac:21:22:4e:06:01:c3:bd:5c:85:e6:5c:
                    05:db:93:16:52:79:89:c5:ca:e2:c1:ef:12:b2:2d:
                    27:80:18:62:83:23:2e:1a:d9:77:cf:8e:1f:a6:ce:
                    33:04:03:76:56:8c:be:f9:bd:c2:1c:ae:f3:6e:43:
                    06:35:60:69:2f:12:65:84:8a:1e:ea:36:2b:71:2a:
                    9a:ca:11:cc:44:32:0f:15:e2:d2:06:0d:29:fa:21:
                    1e:a1:f1:9d:01:c8:a1:23:b8:7a:a1:82:fa:47:f6:
                    5f:57:d4:62:35:fd:89:2c:40:aa:d1:d8:e4:d2:0d:
                    97:1e:3c:6f:d7:f6:65:24:88:20:c1:0e:24:f4:9f:
                    a0:4e:fb:4f:61:7f:8b:ce:fd:b7:06:1c:8f:41:e4:
                    67:68:43:f1:12:9c:b3:fd:9b:4c:2a:c8:02:79:02:
                    be:eb:bd:cd:d8:79:ef:5e:75:85:35:af:fb:fb:65:
                    46:9c:0c:ad:37:b4:f8:b5:19:dc:47:d0:5c:45:47:
                    25:2b:84:d7:82:62:db:08:07:8b:96:6f:4c:24:19:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:00:DF:CF:D0:0D:2C:9D:75:97:11:31:CF:A7:FA:B2:34:4B:B5:26
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3230303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:28:70:c6:9f:3d:31:1b:a1:6f:e0:de:43:2e:23:12:c9:3f:
         e9:2f:ca:21:4e:77:eb:cc:b0:cb:cc:92:3e:89:48:c7:3e:46:
         c8:14:01:77:c7:04:9b:98:3b:8f:cd:1f:dd:a0:73:de:12:71:
         fa:98:11:e9:19:fe:70:c7:2f:77:8e:08:8f:8b:7a:69:4c:5d:
         73:27:2f:30:5b:c4:10:8d:eb:57:d9:eb:e4:e8:eb:09:c2:4a:
         5e:25:c4:03:c1:a3:eb:34:08:8a:13:1d:68:36:77:eb:56:9e:
         06:51:69:3c:df:25:39:26:79:0a:5a:16:e9:b3:cd:e2:4a:a1:
         e7:f2:2f:f0:f2:0a:af:33:b6:b3:ca:0a:bd:50:7f:f5:f5:47:
         d9:24:02:47:43:4d:67:1e:4e:b5:3d:23:e2:f1:4c:f0:a7:d8:
         71:e5:d8:91:db:5f:6f:9d:56:7f:36:01:86:b3:79:23:1b:d4:
         d1:51:9b:85:d5:1d:6e:ff:d8:52:f5:4f:e0:6e:b6:1f:ea:0d:
         fe:83:43:82:c2:2e:25:27:fb:a5:db:9f:39:a8:e6:fb:d2:44:
         38:07:e7:d7:3d:1f:25:72:87:62:11:c1:3c:ba:e4:66:78:94:
         7c:6e:65:32:e8:04:93:d8:e0:51:92:d2:28:aa:ad:39:62:12:
         9a:7d:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:48:28 2026 by rpki-client