Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/323830333a666531303a3a2f33322d3332203d3e20323731393832.roa
File:                     323830333a666531303a3a2f33322d3332203d3e20323731393832.roa (raw, json)
Hash identifier:          IZJs5cTXzX4PCyExlOZjCmSsTl1DTXojt9W4SesZBVo=
Subject key identifier:   B3:B3:FD:6B:9F:62:82:ED:28:08:B0:DC:98:36:8F:F2:F5:DF:48:A3
Certificate issuer:       /CN=78422FE700CC22ABDCCBDAF93B7E0055549FE121
Certificate serial:       681518927EAD8870B5E460E447FF5FBC9D01959F
Authority key identifier: 78:42:2F:E7:00:CC:22:AB:DC:CB:DA:F9:3B:7E:00:55:54:9F:E1:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/323830333a666531303a3a2f33322d3332203d3e20323731393832.roa
Signing time:             Mon 16 Feb 2026 22:30:48 +0000
ROA not before:           Mon 16 Feb 2026 22:25:48 +0000
ROA not after:            Mon 15 Feb 2027 22:30:48 +0000
asID:                     271982
IP address blocks:        2803:fe10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 21:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:15:18:92:7e:ad:88:70:b5:e4:60:e4:47:ff:5f:bc:9d:01:95:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78422FE700CC22ABDCCBDAF93B7E0055549FE121
        Validity
            Not Before: Feb 16 22:25:48 2026 GMT
            Not After : Feb 15 22:30:48 2027 GMT
        Subject: CN=B3B3FD6B9F6282ED2808B0DC98368FF2F5DF48A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:87:87:0f:d9:42:4f:9f:a7:86:fb:6c:79:
                    6c:fe:04:00:78:38:34:ed:e9:b3:0b:6d:87:8a:96:
                    8e:57:92:59:0d:a7:a0:d2:0d:5c:c6:36:b8:ad:d5:
                    b9:7a:9a:41:24:85:aa:e0:2e:2c:2f:d6:9a:85:26:
                    e6:38:9a:b5:a6:58:6d:a2:6f:c5:33:1e:06:d4:6d:
                    8b:98:5b:80:7b:46:0e:27:7a:57:3e:b8:ba:b9:95:
                    3f:62:48:f3:c5:52:e3:5e:37:9e:0c:df:d3:e9:54:
                    1f:c5:3a:7e:cf:43:54:2d:85:bb:ea:02:a9:31:ca:
                    f3:d7:48:dc:ec:be:b0:f1:83:d6:f9:ed:62:40:b9:
                    e1:25:f3:7e:9d:0c:c8:f7:a7:55:ea:f9:60:b2:0f:
                    34:52:8f:ff:80:0e:69:61:93:f0:14:47:b7:d3:16:
                    d9:7b:40:6c:bc:d4:43:a3:6b:9c:b4:d7:fa:aa:e4:
                    b0:b3:42:c5:ea:84:f0:34:32:ec:00:51:c6:44:11:
                    51:65:3b:01:cc:c0:dd:78:a5:eb:52:e5:d7:e1:0e:
                    01:3e:ea:83:75:2e:51:7c:61:2b:2b:78:3a:0b:f8:
                    01:f9:ab:bb:80:9b:58:da:ae:83:2b:29:b9:c8:ee:
                    c8:03:bd:e2:d7:03:d2:f2:4d:d5:23:86:33:eb:cf:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:FD:6B:9F:62:82:ED:28:08:B0:DC:98:36:8F:F2:F5:DF:48:A3
            X509v3 Authority Key Identifier:
                keyid:78:42:2F:E7:00:CC:22:AB:DC:CB:DA:F9:3B:7E:00:55:54:9F:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/323830333a666531303a3a2f33322d3332203d3e20323731393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fe10::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:e6:ee:a5:60:64:b9:a2:ae:10:38:51:d3:c6:e5:bb:27:
         8f:07:29:ce:50:3b:52:79:f2:48:98:dd:5a:af:9b:67:4b:60:
         fc:5b:2a:b9:3d:0b:7c:bb:f9:24:5a:cb:9a:07:63:d0:00:b2:
         45:ee:6e:0d:a9:60:20:5a:76:a3:d9:8f:31:6f:12:a3:09:b3:
         2c:fe:60:4e:2c:bc:b2:c5:ae:e9:2f:60:ee:72:73:6c:3a:4c:
         f0:52:c7:a0:0f:ba:91:0d:13:ea:83:f9:51:22:a8:fb:d3:1d:
         0a:ef:13:ee:24:e6:07:8b:ab:bc:ef:5a:10:68:ed:d6:1d:b6:
         79:d3:a0:ed:6b:a2:5d:a6:f7:d0:03:06:92:da:37:8c:9a:0e:
         6a:5d:ff:a3:55:4b:e2:17:41:56:e2:e8:3c:67:c9:13:ee:30:
         be:38:7d:c6:28:a1:8b:7d:d9:42:57:9f:d3:ea:0d:35:75:8f:
         93:22:b2:bf:e5:72:36:9f:39:42:50:84:0c:ee:56:83:19:8a:
         f6:c6:f8:f7:9e:9e:35:a3:a4:c3:c4:cc:9f:52:7f:c7:56:04:
         65:fa:f9:3a:65:4e:87:ed:5d:08:83:01:18:22:61:3c:20:e3:
         bd:8d:f5:49:76:9c:4b:2e:36:78:a6:f8:82:6c:5a:9c:b0:13:
         73:b5:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:16 2026 by rpki-client