Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa
File:                     323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa (raw, json)
Hash identifier:          DYnRkhA/FN5o9oqmyUQkOpmM1o0PNf1rhi4DYGcE9fg=
Subject key identifier:   BB:68:36:47:25:98:C4:74:EF:46:F1:F2:6E:FF:75:57:0B:C0:86:D7
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       3F6D87F226A572E727D613991F93BA209147D050
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa
Signing time:             Tue 10 Feb 2026 09:29:56 +0000
ROA not before:           Tue 10 Feb 2026 09:24:56 +0000
ROA not after:            Tue 09 Feb 2027 09:29:56 +0000
asID:                     269811
IP address blocks:        2803:3b60:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 07:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6d:87:f2:26:a5:72:e7:27:d6:13:99:1f:93:ba:20:91:47:d0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Feb 10 09:24:56 2026 GMT
            Not After : Feb  9 09:29:56 2027 GMT
        Subject: CN=BB6836472598C474EF46F1F26EFF75570BC086D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:aa:93:63:ac:ea:ee:b1:9b:92:a2:f5:02:
                    14:d7:85:f7:4e:b6:f1:41:5f:ff:88:79:0d:15:dd:
                    b5:e3:14:db:cf:e4:7b:42:89:92:cf:dd:c7:f6:fb:
                    c9:63:1b:e1:9c:8d:29:da:f8:9c:c4:2c:1f:7b:b1:
                    f1:fa:af:66:38:00:89:5c:64:4c:9a:61:a6:da:09:
                    47:39:2d:c7:25:b3:e6:13:00:95:20:9f:fd:87:aa:
                    9b:48:86:ef:ae:9c:b5:2f:69:11:0c:f2:e1:84:65:
                    3d:b5:1f:7b:9a:a5:0f:55:a4:f5:51:01:d4:16:c8:
                    e7:34:9e:67:74:e8:75:50:ea:e7:bb:1b:19:cd:5c:
                    f5:f5:a0:c5:9d:bf:11:0e:87:64:44:c5:a8:c0:51:
                    ce:50:1d:6a:b7:45:b3:1f:65:30:d7:53:3b:b5:41:
                    44:26:de:2f:f8:0b:80:26:0b:98:99:54:f4:d7:ab:
                    b9:71:73:b8:9e:cf:1c:42:87:c5:25:d2:3b:76:3c:
                    c9:7e:5e:fd:53:b4:e1:39:39:6f:d6:f0:e4:f7:ac:
                    e6:3e:3e:86:2d:31:3d:a0:cf:c8:4d:7a:49:09:ad:
                    b4:b6:e8:7d:00:15:a5:b2:e2:3b:9c:0e:7f:fc:5e:
                    05:bb:9b:ae:4c:dd:f6:49:ab:88:3e:a9:ed:83:aa:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:68:36:47:25:98:C4:74:EF:46:F1:F2:6E:FF:75:57:0B:C0:86:D7
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         85:be:1d:65:e2:14:22:32:a6:a8:54:ff:dc:63:14:1a:83:3c:
         bc:cb:1b:8d:ba:6b:e7:6f:db:f5:46:04:98:78:3e:48:3a:31:
         9d:22:21:74:ca:50:cd:17:6b:4d:65:1e:96:71:18:c9:cd:0f:
         35:cb:26:39:80:e5:94:1e:7c:5c:57:54:d4:38:61:a0:b2:fa:
         63:78:b3:03:19:06:e0:fb:15:a0:52:09:bf:25:3d:e3:82:25:
         8c:c9:3c:b6:2a:25:59:2f:ba:11:21:8f:ac:f7:db:34:61:03:
         2c:54:d8:15:bf:12:a5:c6:30:f2:d0:21:1d:d3:ad:ae:8c:a4:
         c0:27:d4:bb:63:a9:64:4e:51:b0:28:bb:e6:26:16:68:50:52:
         54:bf:e2:1d:29:e8:07:df:08:d1:6d:aa:35:a4:47:54:77:ca:
         9c:c1:12:9a:9c:47:65:83:b9:39:53:66:1d:dc:3e:9a:6c:c5:
         07:69:e8:ea:54:57:c1:49:3a:42:85:7a:fb:b5:50:3b:75:4a:
         6b:ef:ac:55:28:63:17:3c:98:38:66:e4:ef:f9:99:16:6c:c7:
         79:98:72:39:94:a3:27:a7:1d:75:4f:2b:fe:2f:19:c6:c1:ef:
         65:fe:0b:a7:ca:cd:ce:52:5f:20:be:b4:5e:26:ef:03:be:d9:
         80:3a:49:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:14:15 2026 by rpki-client