Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3830303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3830303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          vBzw87LhPPG20T/Fm7ejHMIrDJUs72u5S3d0xLDRaFk=
Subject key identifier:   E7:95:F9:B1:C1:8E:1A:E5:A4:3A:ED:6E:1F:5B:10:6C:F8:D0:65:F5
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       450BBB69DD2E8B8025B68E794AAAEB9228813355
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3830303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Thu 19 Feb 2026 00:31:16 +0000
ROA not before:           Thu 19 Feb 2026 00:26:16 +0000
ROA not after:            Thu 18 Feb 2027 00:31:16 +0000
asID:                     273218
IP address blocks:        2803:8e50:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0b:bb:69:dd:2e:8b:80:25:b6:8e:79:4a:aa:eb:92:28:81:33:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Feb 19 00:26:16 2026 GMT
            Not After : Feb 18 00:31:16 2027 GMT
        Subject: CN=E795F9B1C18E1AE5A43AED6E1F5B106CF8D065F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:3e:2f:bb:cc:c4:a5:36:ae:f1:06:53:9d:
                    c2:90:cc:55:e7:b5:0c:34:e3:32:53:73:03:e0:7b:
                    f9:1d:b5:ac:94:69:ef:c8:b2:fa:41:8d:20:ae:b1:
                    b7:74:97:db:35:a3:0c:67:bf:10:8e:d4:3b:c7:39:
                    e3:23:94:30:fd:48:bd:2b:60:bd:3c:9a:bb:f4:2d:
                    4f:6c:bb:b5:0b:07:7c:76:3d:94:75:f4:89:32:63:
                    6e:ff:e1:57:d0:a4:31:d5:c6:0d:bb:9c:32:4a:04:
                    4f:91:99:8a:db:09:a8:6c:b1:06:ec:25:c2:93:d2:
                    51:13:64:40:2f:f6:55:dd:8c:df:ab:3d:ae:35:42:
                    da:d2:96:4e:c6:c4:af:23:a5:5f:4a:c1:d8:4d:c5:
                    29:0e:8a:d0:00:76:48:85:fa:39:ee:db:e8:a8:30:
                    d1:17:66:9f:7a:6a:97:1d:06:d0:f6:ca:fc:d9:86:
                    e1:fc:54:48:ac:fe:78:7c:6c:9f:be:4b:27:95:f8:
                    9f:a2:66:e0:cf:27:03:76:b0:4f:97:78:77:1e:90:
                    04:82:f7:59:e1:2f:d0:c4:27:cb:99:ac:10:cd:c9:
                    48:69:59:e0:56:b6:12:ef:30:70:ba:39:7f:99:20:
                    8f:f8:2d:61:fe:05:3c:e7:c6:f4:56:e4:04:c1:7c:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:95:F9:B1:C1:8E:1A:E5:A4:3A:ED:6E:1F:5B:10:6C:F8:D0:65:F5
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3830303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:82:3d:54:42:8d:6e:32:e9:0d:f6:cb:a2:75:3c:10:b8:
         8b:d3:06:50:d1:a8:05:05:3e:9d:a0:59:dc:2d:6a:e6:14:90:
         5e:32:8e:7c:d7:94:29:48:7f:d4:4e:b8:da:fe:5a:b0:21:ea:
         2b:2e:d1:e9:4b:dd:15:cd:de:0a:9f:14:38:b1:45:bf:7c:30:
         c7:8a:5b:39:57:62:9c:47:fe:2f:ef:a2:c3:a1:e6:09:88:cc:
         82:1d:ef:13:6f:d3:f6:f6:36:0b:63:79:30:dc:2e:0b:df:e2:
         dc:1f:ef:39:8a:7e:50:c0:04:12:e4:4b:87:a2:97:51:fd:2d:
         33:fa:12:a4:fd:d6:52:e3:88:fb:66:c3:8c:66:5c:c5:10:40:
         ac:07:28:8d:fe:19:e9:57:bc:a0:cf:e0:af:dd:26:df:5a:6c:
         0f:65:70:6e:d4:a7:21:67:f0:4c:f7:04:58:76:f3:c9:cb:e2:
         df:5c:c0:c5:78:f9:47:f0:93:28:51:c9:65:77:be:4c:be:2b:
         6a:79:f8:a1:69:f6:80:5d:d4:f4:f4:72:d2:cc:6b:2f:6e:25:
         6f:22:3d:c7:c3:93:2b:0b:23:fd:9e:d2:81:8e:ca:77:33:df:
         f9:0e:eb:1d:1f:56:ee:05:45:32:2c:07:ab:4a:95:e7:8b:15:
         78:4e:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:48:16 2026 by rpki-client