Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3438203d3e20323734303030.roa
File:                     323830333a373864303a3a2f33322d3438203d3e20323734303030.roa (raw, json)
Hash identifier:          8cKM0FGAAMJY8iQOsCPF0I/KtlTU/UEbCXuDKiH5XLs=
Subject key identifier:   84:B3:CB:7A:FF:52:D0:14:82:E0:92:63:54:DE:C6:28:79:7E:49:63
Certificate issuer:       /CN=9294DE59B7A484BA44F61BB10730CC02EDA1C802
Certificate serial:       7E17EB6A0272A63721AA9A86131D0A7B34A290EE
Authority key identifier: 92:94:DE:59:B7:A4:84:BA:44:F6:1B:B1:07:30:CC:02:ED:A1:C8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3438203d3e20323734303030.roa
Signing time:             Thu 19 Feb 2026 22:45:00 +0000
ROA not before:           Thu 19 Feb 2026 22:40:00 +0000
ROA not after:            Thu 18 Feb 2027 22:45:00 +0000
asID:                     274000
IP address blocks:        2803:78d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:eb:6a:02:72:a6:37:21:aa:9a:86:13:1d:0a:7b:34:a2:90:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9294DE59B7A484BA44F61BB10730CC02EDA1C802
        Validity
            Not Before: Feb 19 22:40:00 2026 GMT
            Not After : Feb 18 22:45:00 2027 GMT
        Subject: CN=84B3CB7AFF52D01482E0926354DEC628797E4963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:eb:12:06:37:c4:de:25:a5:13:2c:15:3a:
                    27:97:42:70:95:78:ca:a5:52:5b:dd:f2:29:47:3a:
                    fd:dc:bc:e1:fb:3c:ac:52:f8:68:15:a8:49:4e:14:
                    a5:74:6b:60:d0:da:a5:c6:84:73:b8:84:90:d8:5e:
                    52:e8:08:d1:ab:c2:78:13:9a:4b:50:0b:b1:9d:33:
                    9a:3b:c6:c7:32:e3:6e:90:84:86:a3:84:48:3c:9d:
                    3d:9d:05:b6:20:83:bc:48:c3:a9:0b:50:da:6d:1b:
                    ed:4b:52:3a:dd:db:a4:37:3d:ad:65:1c:9b:97:43:
                    a9:55:ee:84:14:f0:61:6b:dd:69:81:3d:39:07:6d:
                    04:97:1d:88:0d:c5:82:66:e7:ff:f3:c9:7b:c0:1d:
                    29:67:77:ba:ff:0f:e7:aa:a8:15:6a:50:9a:69:fd:
                    25:bd:bb:16:3a:25:8e:fc:b0:ac:0a:33:22:90:50:
                    6d:ce:ca:c1:f1:6b:a2:b3:38:fe:dc:40:71:ca:fa:
                    75:0f:11:fe:57:06:db:1b:d1:7c:de:3f:d7:db:ac:
                    fa:b9:a9:bc:1b:b8:2a:89:5b:26:ae:cf:af:8c:7b:
                    13:b1:05:bb:1f:39:62:17:7e:25:dc:54:7b:14:38:
                    2c:59:d4:3b:94:45:46:30:aa:6c:9a:c5:6a:a3:fd:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:CB:7A:FF:52:D0:14:82:E0:92:63:54:DE:C6:28:79:7E:49:63
            X509v3 Authority Key Identifier:
                keyid:92:94:DE:59:B7:A4:84:BA:44:F6:1B:B1:07:30:CC:02:ED:A1:C8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9294DE59B7A484BA44F61BB10730CC02EDA1C802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06ABE29408F3848E916DFC364734ACC8681BB93101D825AF7901922FD1E14E8/0/323830333a373864303a3a2f33322d3438203d3e20323734303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:78d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:cb:a3:f9:8f:b3:48:11:47:ca:4c:fc:48:da:a0:fe:69:33:
         26:80:a5:24:b7:b6:5b:17:de:33:a5:cb:94:0b:a0:6c:3e:7b:
         b0:a9:67:14:57:9e:e9:27:89:4a:0a:ff:ed:28:dc:54:66:1f:
         78:da:72:a0:62:af:13:48:87:4a:4a:ab:90:8a:b2:a6:86:2c:
         d8:2a:a7:92:6f:3d:65:19:d4:b1:6d:61:8f:c8:b9:91:e1:60:
         3b:62:be:cf:10:10:e1:2a:88:d9:4f:2f:83:9a:1f:91:da:97:
         2c:0f:e4:6c:84:fc:1a:a0:c5:67:74:18:23:21:ef:ff:5c:78:
         50:22:4d:46:db:87:a0:2b:03:e9:00:94:26:52:00:1f:14:a7:
         86:f0:30:4e:af:b8:f2:3a:45:41:ce:e7:be:d5:b8:3a:81:4f:
         7c:bb:c9:b6:15:f2:1a:7d:34:2e:18:00:10:6a:30:a2:96:79:
         db:ac:08:76:0d:9d:e8:1a:8a:8c:52:8a:98:a4:2d:c5:39:d4:
         67:50:5c:2b:8c:4e:f7:3b:62:22:99:22:ed:1b:4d:17:36:70:
         d4:be:68:bc:de:e1:a4:cd:5c:8f:37:8b:2c:ce:9b:c5:6c:93:
         51:ce:a4:1e:c0:18:03:b6:3f:2b:73:74:46:d6:ed:85:1a:a0:
         33:74:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:51 2026 by rpki-client