Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/323830333a353064303a3a2f33322d3332203d3e20323733393732.roa
File:                     323830333a353064303a3a2f33322d3332203d3e20323733393732.roa (raw, json)
Hash identifier:          1WNaDE5j5Wl3EwIZYKpsa2UNDalzhEwF+HzaeDxOPcE=
Subject key identifier:   CC:29:0B:26:C2:2D:1C:F3:99:DA:9D:84:1D:68:7A:92:4B:D8:95:48
Certificate issuer:       /CN=6E772D647DA287B1BAE7D2319E2F9DF22B0D3795
Certificate serial:       03E61B9563AE6B6AACFAC0BBA0E7DDA1A0D6746C
Authority key identifier: 6E:77:2D:64:7D:A2:87:B1:BA:E7:D2:31:9E:2F:9D:F2:2B:0D:37:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/323830333a353064303a3a2f33322d3332203d3e20323733393732.roa
Signing time:             Thu 19 Feb 2026 03:31:18 +0000
ROA not before:           Thu 19 Feb 2026 03:26:18 +0000
ROA not after:            Thu 18 Feb 2027 03:31:18 +0000
asID:                     273972
IP address blocks:        2803:50d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 07:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:1b:95:63:ae:6b:6a:ac:fa:c0:bb:a0:e7:dd:a1:a0:d6:74:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E772D647DA287B1BAE7D2319E2F9DF22B0D3795
        Validity
            Not Before: Feb 19 03:26:18 2026 GMT
            Not After : Feb 18 03:31:18 2027 GMT
        Subject: CN=CC290B26C22D1CF399DA9D841D687A924BD89548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:1b:2d:a0:c6:7b:7f:1d:4a:94:f1:fe:02:
                    35:eb:e7:3e:6d:00:77:4b:65:a7:b9:b0:cd:91:e4:
                    60:bb:42:2d:8d:6c:de:25:f8:8a:e3:a2:c1:10:21:
                    ea:c6:98:22:a0:be:08:f8:53:54:2f:da:50:d2:00:
                    c7:58:42:e3:b8:77:50:2c:50:ee:aa:12:3a:5e:c1:
                    b4:bc:4f:fc:1e:48:21:ba:58:71:12:f5:1f:a9:8f:
                    b1:89:23:5d:ca:79:b9:f3:7f:ec:6f:15:66:73:43:
                    de:11:4e:08:63:e3:3e:a8:d6:66:c8:c1:48:7e:77:
                    dd:bd:f5:f4:3e:ee:08:e0:3f:b2:4f:a2:15:a9:78:
                    3e:cc:2a:40:28:75:08:e7:d9:3b:46:51:08:1c:f5:
                    6b:b2:49:39:c5:93:34:21:4f:4a:dc:f2:b7:b7:57:
                    c5:ed:b3:75:f1:33:65:b7:c7:29:b7:0a:59:05:80:
                    13:c4:45:84:c8:b4:54:ab:22:0f:24:3d:14:26:29:
                    85:87:f1:59:e2:e0:1c:8a:92:e1:3f:5e:fe:10:3a:
                    29:0f:61:36:03:80:3d:5b:e3:7c:e7:3d:cf:9d:dc:
                    b1:bf:08:a7:e2:25:b4:42:eb:6e:08:e0:e0:55:a0:
                    aa:cd:8f:c2:69:7e:a4:49:83:1c:87:c8:31:e5:3e:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:0B:26:C2:2D:1C:F3:99:DA:9D:84:1D:68:7A:92:4B:D8:95:48
            X509v3 Authority Key Identifier:
                keyid:6E:77:2D:64:7D:A2:87:B1:BA:E7:D2:31:9E:2F:9D:F2:2B:0D:37:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E772D647DA287B1BAE7D2319E2F9DF22B0D3795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4B1352D98E11B1C320E18314958F12325AB55045413AD2BDA148492AE071E59/0/323830333a353064303a3a2f33322d3332203d3e20323733393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:c8:ef:5c:a8:c8:d5:12:4d:41:d8:e2:46:06:69:1e:a2:
         ca:f8:8b:6f:89:9a:f3:5e:b9:2a:33:c9:3d:7f:e2:a3:6c:4c:
         cb:2b:ad:7b:ed:15:c2:c1:66:3f:db:87:b0:84:95:3c:9e:ad:
         32:c2:a1:c4:09:44:58:7d:fa:43:39:48:b1:43:27:df:ba:6b:
         c3:3e:97:4e:a5:16:37:6f:18:47:bc:d6:68:e5:c9:fb:23:c9:
         01:3a:1e:8e:eb:68:7f:50:04:8c:c3:12:fa:3a:46:c2:48:6d:
         72:3b:cd:71:be:9c:70:b7:9c:5f:8f:dc:8a:b5:87:23:78:e6:
         d4:49:8b:57:75:d2:33:fe:85:92:1e:41:fe:17:01:a1:e5:a3:
         65:bf:10:1a:17:11:e7:36:6b:25:81:22:91:c1:70:a0:bc:fe:
         0a:ca:93:8a:03:34:21:22:29:54:14:98:53:7e:e3:77:cf:6f:
         72:2e:66:46:80:b4:60:a1:47:f2:b8:2e:5f:a2:d9:55:0f:67:
         2c:51:76:f1:0b:4d:01:a9:bf:82:10:0f:80:1e:c3:0e:b5:16:
         06:47:14:30:55:5f:92:14:e4:b0:ff:33:f6:d7:a0:19:44:84:
         aa:5c:be:81:54:14:b0:bc:a0:a4:e3:f9:eb:03:ab:aa:8b:10:
         71:81:7e:f9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUA+YblWOua2qs+sC7oOfdoaDWdGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU3NzJENjQ3REEyODdCMUJBRTdEMjMxOUUyRjlERjIy
QjBEMzc5NTAeFw0yNjAyMTkwMzI2MThaFw0yNzAyMTgwMzMxMThaMDMxMTAvBgNV
BAMTKENDMjkwQjI2QzIyRDFDRjM5OURBOUQ4NDFENjg3QTkyNEJEODk1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPhstoMZ7fx1KlPH+AjXr5z5t
AHdLZae5sM2R5GC7Qi2NbN4l+IrjosEQIerGmCKgvgj4U1Qv2lDSAMdYQuO4d1As
UO6qEjpewbS8T/weSCG6WHES9R+pj7GJI13Kebnzf+xvFWZzQ94RTghj4z6o1mbI
wUh+d9299fQ+7gjgP7JPohWpeD7MKkAodQjn2TtGUQgc9WuySTnFkzQhT0rc8re3
V8Xts3XxM2W3xym3ClkFgBPERYTItFSrIg8kPRQmKYWH8Vni4ByKkuE/Xv4QOikP
YTYDgD1b43znPc+d3LG/CKfiJbRC624I4OBVoKrNj8JpfqRJgxyHyDHlPmUTAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzCkLJsItHPOZ2p2EHWh6kkvYlUgwHwYDVR0j
BBgwFoAUbnctZH2ih7G659Ixni+d8isNN5UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEIxMzUyRDk4RTExQjFDMzIwRTE4MzE0OTU4RjEyMzI1
QUI1NTA0NTQxM0FEMkJEQTE0ODQ5MkFFMDcxRTU5LzAvNkU3NzJENjQ3REEyODdC
MUJBRTdEMjMxOUUyRjlERjIyQjBEMzc5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RTc3MkQ2NDdEQTI4N0IxQkFF
N0QyMzE5RTJGOURGMjJCMEQzNzk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRCMTM1MkQ5OEUxMUIxQzMyMEUxODMxNDk1OEYxMjMyNUFCNTUwNDU0
MTNBRDJCREExNDg0OTJBRTA3MUU1OS8wLzMyMzgzMDMzM2EzNTMwNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM5MzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUNAw
DQYJKoZIhvcNAQELBQADggEBAKKWyO9cqMjVEk1B2OJGBmkeosr4i2+JmvNeuSoz
yT1/4qNsTMsrrXvtFcLBZj/bh7CElTyerTLCocQJRFh9+kM5SLFDJ9+6a8M+l06l
FjdvGEe81mjlyfsjyQE6Ho7raH9QBIzDEvo6RsJIbXI7zXG+nHC3nF+P3Iq1hyN4
5tRJi1d10jP+hZIeQf4XAaHlo2W/EBoXEec2ayWBIpHBcKC8/grKk4oDNCEiKVQU
mFN+43fPb3IuZkaAtGChR/K4Ll+i2VUPZyxRdvELTQGpv4IQD4Aeww61FgZHFDBV
X5IU5LD/M/bXoBlEhKpcvoFUFLC8oKTj+esDq6qLEHGBfvk=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:33:48 2026 by rpki-client