Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          bQzUwpt9oo/tqRXek+V1bFb9B9IK1P4vF0tvlarVlvc=
Subject key identifier:   F6:4B:DD:11:54:1A:29:2F:D1:BA:39:3E:D5:75:D8:5D:88:0A:A4:45
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       31F99DD9B178923961856B0D51934627429DB7E1
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Thu 19 Feb 2026 00:31:16 +0000
ROA not before:           Thu 19 Feb 2026 00:26:16 +0000
ROA not after:            Thu 18 Feb 2027 00:31:16 +0000
asID:                     273218
IP address blocks:        2803:8e50:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f9:9d:d9:b1:78:92:39:61:85:6b:0d:51:93:46:27:42:9d:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Feb 19 00:26:16 2026 GMT
            Not After : Feb 18 00:31:16 2027 GMT
        Subject: CN=F64BDD11541A292FD1BA393ED575D85D880AA445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:1c:f6:f1:35:58:9f:48:68:4e:db:83:a9:
                    34:4d:ab:2f:d9:e6:69:a5:58:1f:ab:27:a6:89:7a:
                    c0:1c:97:aa:5f:d8:68:eb:d8:42:4f:38:3e:9c:08:
                    53:1f:37:29:a3:04:a9:af:a4:4b:78:33:c1:a0:5e:
                    d8:cd:75:85:49:9a:79:2b:e4:7b:39:cd:d6:f7:19:
                    da:32:56:88:6a:c9:cb:a4:7c:5d:bc:fc:5e:33:34:
                    ce:ff:43:4e:f0:c9:6d:13:88:2b:f2:72:7a:be:0c:
                    81:ac:e9:6f:44:cb:c1:33:75:9f:a5:4c:12:09:d7:
                    bf:b4:6f:35:a8:88:fb:92:9f:51:a0:fa:50:4c:7a:
                    fc:b6:b5:d6:9b:b8:8d:8c:d1:15:b2:d0:ce:cd:7f:
                    23:2b:97:7b:ec:1d:bd:84:c0:7f:52:5c:13:2a:c9:
                    a8:49:6b:bc:96:42:b7:87:f2:4f:7e:ea:5c:76:4b:
                    8d:ac:ba:c7:1e:b6:a3:f7:18:3c:3f:d0:77:68:ef:
                    81:53:e5:5d:73:56:ff:45:e6:58:8f:3d:50:1a:66:
                    a4:7c:5a:45:59:70:63:5b:70:d6:f7:90:e3:90:ff:
                    fb:f4:38:6f:f9:7a:ba:3b:cb:f4:93:de:36:bb:51:
                    f7:fc:e6:0b:f3:4d:19:33:fd:d7:f5:0b:a4:22:30:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:DD:11:54:1A:29:2F:D1:BA:39:3E:D5:75:D8:5D:88:0A:A4:45
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:f9:8d:67:3b:2f:c7:aa:9f:ac:f0:d3:46:f0:61:b8:34:4b:
         f1:a1:d9:46:53:d8:0d:cb:3a:6b:84:84:16:79:ca:b0:94:9b:
         73:28:d6:19:65:9d:37:18:fe:dd:3e:f8:5c:f5:53:a4:e9:a4:
         9f:c9:6b:61:cc:43:15:af:7b:db:c4:fc:00:0e:7f:5d:9e:46:
         8a:cb:6b:df:1e:3a:80:ce:4c:e4:f3:cc:22:e9:36:2b:30:8d:
         38:dc:fa:ce:92:a4:02:31:70:4a:2d:dd:5e:35:9b:2d:31:46:
         61:be:21:67:1d:59:0d:ff:5d:ce:fa:99:ae:5e:27:6f:94:aa:
         40:77:20:58:97:b5:3c:e7:1d:9f:d0:59:2d:b7:3a:69:2f:18:
         8b:dd:91:d2:9a:53:d8:37:ec:b5:ce:d6:7e:c4:14:ab:66:72:
         f7:91:b0:27:31:92:f9:57:06:6e:31:1a:62:7c:66:d0:26:d1:
         a4:75:43:84:02:c6:4b:63:d1:b0:16:bd:fd:50:be:c2:ee:07:
         4f:4c:bf:23:a4:8b:aa:29:d8:0b:18:07:37:8e:ac:1d:3c:2e:
         95:09:6f:a4:11:22:e2:51:5d:70:d0:52:9e:f3:76:d4:88:98:
         e8:94:9c:c0:4c:90:c8:c6:14:1a:c5:cb:06:75:90:74:cc:c3:
         9c:ea:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:48:27 2026 by rpki-client