Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/323830333a636438303a383030303a3a2f33332d3438203d3e203631343738.roa
File:                     323830333a636438303a383030303a3a2f33332d3438203d3e203631343738.roa (raw, json)
Hash identifier:          X20VWPCHkKjrq01RJpssuASqXOzUm0X6eMm33orhfLQ=
Subject key identifier:   E0:C3:B1:A9:9E:14:CA:60:FD:57:1E:DC:BC:44:98:30:16:B3:A0:B4
Certificate issuer:       /CN=0B85C072201D3DC921F121020F043E1B35429A6A
Certificate serial:       3CB717D421886F92B8C27B3A83931403E828DEFC
Authority key identifier: 0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/323830333a636438303a383030303a3a2f33332d3438203d3e203631343738.roa
Signing time:             Thu 19 Feb 2026 20:45:00 +0000
ROA not before:           Thu 19 Feb 2026 20:40:00 +0000
ROA not after:            Thu 18 Feb 2027 20:45:00 +0000
asID:                     61478
IP address blocks:        2803:cd80:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 14:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:17:d4:21:88:6f:92:b8:c2:7b:3a:83:93:14:03:e8:28:de:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B85C072201D3DC921F121020F043E1B35429A6A
        Validity
            Not Before: Feb 19 20:40:00 2026 GMT
            Not After : Feb 18 20:45:00 2027 GMT
        Subject: CN=E0C3B1A99E14CA60FD571EDCBC44983016B3A0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:57:35:eb:08:af:35:fb:59:8e:93:89:18:
                    ca:93:58:a4:20:f5:a4:22:37:84:f3:a4:a5:61:47:
                    82:6e:48:49:b1:0c:a2:f8:d6:83:95:33:38:74:70:
                    00:7d:9b:ae:bd:8e:e2:45:20:a3:fa:cf:c8:35:a6:
                    50:64:be:b8:81:9b:39:b0:4f:58:f0:be:2e:0f:2a:
                    f2:a2:ad:7b:d7:b6:a6:7a:5b:dc:d0:52:2a:b5:99:
                    35:06:43:99:2c:69:8e:66:e3:75:17:68:2f:5f:14:
                    f6:e1:6c:f8:d8:71:5d:bc:d3:3c:41:c1:66:d3:0e:
                    f9:b3:3d:8b:96:66:fc:a0:19:21:fb:70:9f:bc:1f:
                    6d:ae:50:d6:2b:fd:c7:85:4f:8b:c5:f8:63:5d:cc:
                    45:73:32:34:9d:f2:bc:4a:df:15:af:ef:99:e3:d9:
                    3d:d5:b5:ee:73:91:d5:a0:97:6e:e2:b9:8f:9c:76:
                    30:b3:ca:af:f8:9c:e0:1b:ae:75:ee:bf:4a:61:0c:
                    7b:24:1c:b3:1a:36:52:61:f0:fa:30:eb:53:7d:bb:
                    49:cf:2d:2d:64:55:bc:3e:c8:34:c4:91:77:e9:c6:
                    46:4d:03:9d:63:bd:7e:de:89:66:d9:be:27:f3:89:
                    56:8c:db:95:4a:84:d3:bd:9e:f4:a6:d3:43:78:23:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:B1:A9:9E:14:CA:60:FD:57:1E:DC:BC:44:98:30:16:B3:A0:B4
            X509v3 Authority Key Identifier:
                keyid:0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/323830333a636438303a383030303a3a2f33332d3438203d3e203631343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:1c:99:83:17:b6:88:07:e9:2e:27:6b:ec:aa:8b:94:a7:
         29:e4:22:c7:26:4e:0e:18:b7:0a:c3:3e:dc:6b:fe:2c:8c:1c:
         72:9c:1b:91:fe:b1:68:18:25:bd:46:85:ac:90:b7:a8:77:dd:
         21:fa:e7:7b:17:1d:76:a9:09:9e:4a:ca:f7:42:8c:2b:38:41:
         b1:e3:78:65:8b:af:7e:38:db:c4:b8:da:78:0f:e6:dc:62:38:
         2b:73:10:7e:d9:aa:e6:63:0b:01:cf:bc:84:55:96:82:af:98:
         d5:35:23:6d:42:f3:ba:ec:95:28:20:ef:c4:dc:ce:6e:2e:52:
         2d:32:4e:4a:ea:e1:88:d7:7e:af:e2:5b:1e:5d:a8:f2:47:a7:
         89:c0:2f:d8:0b:b9:bc:20:b5:e7:5d:8b:70:fb:94:e8:9c:e6:
         13:2f:7d:08:40:10:1e:15:1b:70:5a:32:50:77:c2:8b:9e:66:
         67:c6:e2:74:11:fe:9d:1b:ea:36:e0:dc:e6:4b:6d:e2:89:4f:
         31:c8:db:cd:38:fc:2c:0d:58:63:13:4c:54:c2:83:49:cb:cf:
         9f:7a:fb:c1:36:6a:4b:ba:dd:5c:cb:be:6b:4b:6b:85:01:ae:
         e1:c4:32:fd:95:b3:f0:45:5b:1c:24:5f:7e:d7:13:97:53:de:
         2e:59:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:04:45 2026 by rpki-client