Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa
File:                     323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (raw, json)
Hash identifier:          SSQtGaDasmH+9PrDaeplKCIn/1pQeZBcEkJ8bK9A05I=
Subject key identifier:   DB:D6:B9:05:87:EE:4D:E0:FF:05:83:DF:31:E4:26:24:48:BF:59:7F
Certificate issuer:       /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial:       112AF3708DC00861DF346037299635F6DA955F5E
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa
Signing time:             Tue 10 Feb 2026 06:29:54 +0000
ROA not before:           Tue 10 Feb 2026 06:24:54 +0000
ROA not after:            Tue 09 Feb 2027 06:29:54 +0000
asID:                     272827
IP address blocks:        2803:d250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:f3:70:8d:c0:08:61:df:34:60:37:29:96:35:f6:da:95:5f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
        Validity
            Not Before: Feb 10 06:24:54 2026 GMT
            Not After : Feb  9 06:29:54 2027 GMT
        Subject: CN=DBD6B90587EE4DE0FF0583DF31E4262448BF597F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:cd:77:90:cd:68:6c:f9:69:9c:65:e9:21:
                    67:5a:80:1b:28:a4:76:0a:0d:de:c1:8e:4f:67:c1:
                    d8:30:d1:31:23:2b:ae:4e:8b:04:12:ff:a8:50:09:
                    f7:06:f9:03:3d:bd:ce:72:2a:06:5d:ce:bf:59:a8:
                    ad:74:8a:13:12:c8:d0:75:54:8d:51:c4:bb:0f:f2:
                    08:bf:bb:4d:0f:f0:96:80:18:43:c8:c9:5f:42:02:
                    33:ad:11:db:a9:a6:ac:35:6a:32:de:73:0a:f2:c5:
                    3e:33:e7:ec:e3:3b:4d:22:9b:03:79:a8:11:cd:d9:
                    3c:88:a6:9f:b2:af:7a:23:ca:d2:f1:65:6c:89:15:
                    bf:13:ae:0e:dd:9d:e8:21:ab:1e:49:21:56:b1:13:
                    d6:0e:18:90:76:ab:72:89:20:8a:76:21:9a:57:4e:
                    a7:39:6b:31:67:6e:51:f3:31:6e:59:cb:a6:33:8e:
                    4f:61:a4:5a:ce:9e:17:d1:06:a1:70:40:9b:35:c5:
                    a2:13:a1:ab:ad:67:87:c1:39:02:07:bf:9d:8f:78:
                    fc:5f:50:74:33:b8:30:2e:32:57:c4:41:05:05:2a:
                    c8:2f:34:1f:fd:bd:35:e0:41:d3:60:1f:1d:b9:ae:
                    98:94:19:e3:6d:56:56:77:9c:9c:bf:82:4d:b1:d6:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D6:B9:05:87:EE:4D:E0:FF:05:83:DF:31:E4:26:24:48:BF:59:7F
            X509v3 Authority Key Identifier:
                keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d250::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:e8:8a:f4:0c:30:71:6f:7a:48:c2:37:48:c5:58:d7:5f:
         ac:4f:77:c8:97:e1:7f:0a:83:c5:cf:a3:60:35:10:77:e7:6a:
         61:8a:6f:cf:f6:09:65:ef:0a:f7:8b:da:b3:36:b0:eb:19:7c:
         f2:ec:bd:6f:63:3a:0a:fb:e6:08:44:8f:e0:7d:63:2b:06:e4:
         60:8c:b6:91:31:50:32:0f:c0:3a:72:ca:d2:88:d5:93:85:18:
         e1:35:82:6e:ce:a4:cc:2d:94:c6:81:e0:45:10:ce:e9:65:cc:
         41:e0:ae:38:97:ac:f0:fa:aa:f6:0c:94:b3:e0:36:1b:2e:c4:
         39:d1:0a:4c:1c:db:76:0b:79:48:51:b5:64:5c:30:65:bf:9c:
         b6:b2:49:cc:ba:e3:2a:78:38:e0:72:88:15:7a:46:ff:0e:78:
         f1:a0:60:76:c6:ea:ba:32:5f:25:f3:5a:e5:b8:5b:68:cf:d9:
         c3:d1:71:5a:62:a8:00:02:1c:ff:10:3f:62:87:6d:5f:f8:71:
         24:0b:25:c4:c4:a5:ad:a8:c0:8c:73:3e:6b:8e:9f:9d:19:88:
         32:75:ce:87:d3:38:79:71:43:23:44:52:ad:ee:a2:0f:2a:6f:
         c0:b6:0f:54:de:54:aa:77:83:a3:62:3a:b8:0d:89:66:56:2b:
         40:e3:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:33:56 2026 by rpki-client