Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          pIqPKyqLPuQUMNCbLf/s019/aySbiNQXv+yzIApzfA8=
Subject key identifier:   C7:C3:0B:29:9B:D3:7B:E8:40:66:09:94:3F:12:7C:83:00:27:C8:75
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       1910CCE4E6732710245FEA37497A76A872D1C200
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Thu 19 Feb 2026 00:31:15 +0000
ROA not before:           Thu 19 Feb 2026 00:26:15 +0000
ROA not after:            Thu 18 Feb 2027 00:31:15 +0000
asID:                     273218
IP address blocks:        2803:8e50:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:10:cc:e4:e6:73:27:10:24:5f:ea:37:49:7a:76:a8:72:d1:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Feb 19 00:26:15 2026 GMT
            Not After : Feb 18 00:31:15 2027 GMT
        Subject: CN=C7C30B299BD37BE8406609943F127C830027C875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:79:06:70:6f:3f:39:18:d1:52:e3:20:3c:
                    8b:fa:fe:5c:2b:17:24:76:05:a3:5f:bd:54:02:59:
                    13:1d:70:e4:bf:49:d2:14:b6:0b:9f:7d:f5:89:93:
                    09:bf:09:6e:8e:b7:21:04:33:44:41:fe:ca:c9:6b:
                    58:b8:3b:fe:21:bf:73:9f:11:b3:71:b7:de:13:9d:
                    c5:ec:ca:00:6e:f5:4f:7f:2b:cd:f6:78:9c:6d:a8:
                    ee:64:35:bc:a6:c7:4c:c2:f5:41:ed:98:16:60:6e:
                    7c:a6:6b:52:af:a6:23:e3:5f:01:25:fa:0a:83:7b:
                    00:10:1d:3f:81:a2:9b:a9:8d:c2:db:fc:bf:f0:f6:
                    2e:85:c1:d4:97:a6:13:67:e5:ff:e5:1d:6b:05:0f:
                    33:22:5d:68:bb:ab:30:b6:2f:f8:10:7a:31:a8:bf:
                    68:5c:4a:e7:8b:76:20:98:2e:29:0e:a8:1a:38:63:
                    9d:a0:ca:0c:d7:19:74:4d:e9:25:a1:60:9f:4e:eb:
                    d8:8c:42:98:d5:80:44:27:94:4c:1c:22:e0:94:28:
                    ff:3f:4e:ff:45:3a:2c:01:ae:af:a6:7f:03:2b:c3:
                    17:be:dc:92:45:e8:b8:85:99:ef:17:84:bd:b2:35:
                    95:c3:1f:69:10:aa:b9:50:fa:4c:4d:69:f0:8f:68:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:0B:29:9B:D3:7B:E8:40:66:09:94:3F:12:7C:83:00:27:C8:75
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:0f:6b:62:98:f2:7c:93:f3:59:b9:f0:3c:b9:6c:a3:38:
         f4:7b:ff:5d:9f:07:44:9c:ad:91:23:4e:6d:91:90:f5:48:9e:
         49:3a:f2:82:1f:11:5f:25:19:8e:bf:51:0b:b1:8c:87:38:e8:
         f2:c2:b9:3b:2a:d7:33:fe:f4:10:50:de:e5:9e:03:4b:dc:39:
         9b:ce:ee:24:f4:2a:62:e5:75:a4:d2:86:57:1f:4f:c2:41:39:
         03:e9:e6:ab:f5:f5:7d:16:ba:64:28:6c:06:da:97:f3:84:2a:
         63:9c:87:78:d3:46:df:3e:af:55:ad:b9:b0:68:95:05:a2:7e:
         a1:66:34:d5:ae:2a:c1:8b:a4:f1:ea:65:73:ff:e2:fd:12:fc:
         09:25:6b:1d:db:22:6e:d6:89:5d:83:fe:62:a0:42:4c:e0:08:
         bf:6b:9e:8f:95:bd:84:24:36:6e:40:e4:7b:46:bc:54:f3:86:
         ce:dd:b4:47:97:ce:d8:1d:2f:85:94:75:67:ed:af:91:86:c8:
         ef:2f:42:25:b7:84:a9:c4:a0:44:ed:01:e7:44:fe:79:3e:ca:
         da:2e:d4:1b:b4:37:7e:8f:e0:2f:36:cb:78:e9:90:20:f1:68:
         3f:5b:1d:b7:32:8f:2b:1c:93:9c:62:45:d0:15:82:34:5b:e3:
         3b:d4:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:48:18 2026 by rpki-client