Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3332203d3e20323734303030.roa
File:                     323830333a373864303a3a2f33322d3332203d3e20323734303030.roa (raw, json)
Hash identifier:          TXx/fipqydjaUWKPWxtZ2nxSSjbXt8Zl71C2H6H8x7Q=
Subject key identifier:   DA:FF:A0:4C:80:33:BB:E8:45:B8:D1:67:34:68:2F:A1:AD:4F:BA:1D
Certificate issuer:       /CN=9294DE59B7A484BA44F61BB10730CC02EDA1C802
Certificate serial:       6368E3A16412C8B09AE7FF728C952E6511A45AD3
Authority key identifier: 92:94:DE:59:B7:A4:84:BA:44:F6:1B:B1:07:30:CC:02:ED:A1:C8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3332203d3e20323734303030.roa
Signing time:             Wed 18 Feb 2026 12:40:00 +0000
ROA not before:           Wed 18 Feb 2026 12:35:00 +0000
ROA not after:            Wed 17 Feb 2027 12:40:00 +0000
asID:                     274000
IP address blocks:        2803:78d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:68:e3:a1:64:12:c8:b0:9a:e7:ff:72:8c:95:2e:65:11:a4:5a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9294DE59B7A484BA44F61BB10730CC02EDA1C802
        Validity
            Not Before: Feb 18 12:35:00 2026 GMT
            Not After : Feb 17 12:40:00 2027 GMT
        Subject: CN=DAFFA04C8033BBE845B8D16734682FA1AD4FBA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:b0:6c:91:0d:3e:ae:d2:88:7d:4d:44:0b:
                    a8:f9:f6:a5:49:48:3a:11:13:af:6c:36:b0:b5:61:
                    ca:3e:f0:8a:9c:83:84:58:07:61:a4:99:c0:18:72:
                    d4:ea:30:d9:04:0a:5d:ab:5b:5e:8f:66:d6:d1:7e:
                    b5:1d:ef:9b:27:88:44:7a:34:19:5d:8e:c5:be:e9:
                    cc:e0:b7:0f:18:c1:bb:e6:3f:d0:10:46:e5:76:1c:
                    a6:b9:19:36:0f:b8:45:0a:18:e6:72:0a:1c:97:96:
                    1d:15:a6:a5:91:69:69:e3:96:13:4a:57:79:12:95:
                    5b:d6:3d:28:07:35:8c:c8:1e:c1:0f:b0:d3:19:77:
                    e4:0c:40:7b:4d:a7:25:dd:1c:56:fc:39:74:b1:42:
                    93:0c:3f:7e:bd:07:b3:b2:5b:df:92:9a:8b:96:2b:
                    b8:08:ac:91:55:fc:46:01:0e:d1:25:ae:1f:bd:4b:
                    9f:6e:7d:c6:bf:7a:62:2f:80:1e:6e:c0:00:10:3a:
                    60:4b:3c:da:11:90:f2:9d:b7:38:f0:ba:ad:ac:d8:
                    7b:75:5b:c4:63:2a:78:17:ce:e8:99:b0:b9:e0:c3:
                    87:44:5d:2c:22:5b:e4:11:88:38:cc:0f:d1:69:b8:
                    8d:3c:fd:11:8b:fc:7b:33:1d:85:7a:c5:15:24:99:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:A0:4C:80:33:BB:E8:45:B8:D1:67:34:68:2F:A1:AD:4F:BA:1D
            X509v3 Authority Key Identifier:
                keyid:92:94:DE:59:B7:A4:84:BA:44:F6:1B:B1:07:30:CC:02:ED:A1:C8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3332203d3e20323734303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:78d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:05:af:ab:5f:1b:be:be:08:65:78:1a:b6:9a:de:c9:91:e0:
         3c:eb:5d:89:ad:64:f5:cb:a4:b8:c5:85:8e:d9:a1:35:49:71:
         34:8a:00:3f:18:fe:3b:5d:c4:b0:31:29:68:04:d5:03:35:23:
         ba:57:52:45:08:dd:98:6b:28:8b:ba:20:ec:63:ad:bb:7c:66:
         a2:93:9b:2a:09:78:99:76:83:36:eb:b8:f8:72:66:36:4d:2f:
         83:b5:f5:b2:9e:af:be:5f:53:de:d1:18:14:cb:a4:1a:04:3b:
         1e:19:3c:85:7e:be:8b:9f:e2:38:7c:41:32:ca:e4:87:e0:40:
         c7:07:36:44:e0:d8:70:5d:d2:b0:6f:b1:1d:bb:91:ff:e7:fc:
         b3:e5:01:87:69:90:9d:0d:75:64:32:d9:01:e1:a0:e3:4b:ce:
         ac:d3:fa:c7:b3:2d:9a:a4:a5:71:b2:ba:c7:bd:78:0f:34:b3:
         b1:76:ba:0a:ed:0f:b7:06:d5:58:0a:c7:1c:9e:53:9a:ee:f9:
         4d:3e:35:b9:42:b7:52:e9:b9:19:04:25:23:66:ec:a1:f0:3b:
         b0:dd:1f:c3:69:20:0d:83:96:fa:50:cd:f1:e6:0b:25:66:33:
         f7:a0:aa:ca:cc:b7:81:87:46:2f:6c:07:be:8f:a2:51:a3:d8:
         d7:0f:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:11 2026 by rpki-client