Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa
File:                     323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (raw, json)
Hash identifier:          Wgwp9ogykFpd6hQsS7v3UuGjJHq0hIyp1NTV78U9zkw=
Subject key identifier:   70:3A:41:75:EC:43:C6:2C:5D:BD:79:8E:82:1D:F8:B2:5A:9C:D2:66
Certificate issuer:       /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial:       604F4EA5A42EC4A0EA2F4DF745A6DAAAB3577C20
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa
Signing time:             Tue 10 Feb 2026 06:29:54 +0000
ROA not before:           Tue 10 Feb 2026 06:24:54 +0000
ROA not after:            Tue 09 Feb 2027 06:29:54 +0000
asID:                     273140
IP address blocks:        2803:d250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:4e:a5:a4:2e:c4:a0:ea:2f:4d:f7:45:a6:da:aa:b3:57:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
        Validity
            Not Before: Feb 10 06:24:54 2026 GMT
            Not After : Feb  9 06:29:54 2027 GMT
        Subject: CN=703A4175EC43C62C5DBD798E821DF8B25A9CD266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:54:9f:1e:a0:e8:6d:b9:8f:b0:3c:66:0c:
                    22:a9:a0:b9:e5:12:a5:27:4f:92:cf:7b:3c:11:89:
                    fa:32:32:5f:bc:76:76:24:d3:db:97:cc:aa:c7:8b:
                    41:90:00:ab:4c:35:8b:0f:2e:d6:77:ea:7b:ad:f4:
                    ec:af:0f:c7:d1:98:fb:7e:d3:21:31:31:3c:88:dd:
                    8d:ad:fa:97:f4:16:66:65:24:7c:eb:6a:f3:9e:e2:
                    be:51:3e:36:4e:8f:00:57:3c:6e:55:0e:50:36:bd:
                    01:32:bc:04:70:65:ed:33:de:55:de:bb:f7:ea:ab:
                    8a:79:34:3f:56:58:56:09:c9:66:30:c7:43:0b:a3:
                    22:15:3d:e3:40:58:57:26:08:4f:8d:ff:ab:de:54:
                    e1:7e:34:b8:32:18:60:36:79:c1:cc:fa:a8:19:2d:
                    cc:55:d1:64:df:10:08:40:a8:ee:fc:bd:b3:59:68:
                    95:8f:5a:56:93:f3:89:c1:e5:74:13:c1:a6:01:83:
                    29:5c:f3:6d:51:a4:7e:db:62:66:f3:b6:6f:2e:68:
                    54:7e:5a:b9:cd:d1:a3:0a:ee:2e:be:bc:97:0e:30:
                    c3:ca:f8:95:de:27:fb:54:eb:0d:8a:9e:88:18:a5:
                    c2:6e:30:f6:a7:a6:52:93:2b:74:d6:2d:4c:cd:07:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3A:41:75:EC:43:C6:2C:5D:BD:79:8E:82:1D:F8:B2:5A:9C:D2:66
            X509v3 Authority Key Identifier:
                keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d250::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:85:3e:15:a1:c9:ad:16:aa:31:e7:99:0b:53:ef:46:26:
         f6:36:a9:ce:52:45:4c:df:22:f9:0e:5e:21:87:a8:6c:07:14:
         d7:0b:bd:01:92:40:4c:5c:7f:e2:9c:b6:a1:7b:47:d4:30:d2:
         1f:3a:ed:30:ee:b5:75:12:18:44:84:62:c6:12:2a:83:ad:ef:
         00:2e:09:95:3d:3f:4d:72:9a:47:66:25:48:49:fa:04:76:0d:
         9b:70:b1:37:56:b9:bf:bd:9b:3c:13:c9:b6:ad:e7:62:8e:e6:
         20:95:1d:3e:90:20:5b:b1:3a:d7:72:a9:bf:1e:96:d5:f3:b8:
         92:27:ca:5f:76:5c:83:bb:a5:12:f4:f0:d4:8d:55:88:01:6b:
         f4:2f:8a:87:b7:e8:f3:f4:51:9f:83:22:9d:99:47:d6:9a:5c:
         85:e2:b7:3b:e0:53:f3:a0:f1:b7:98:6f:aa:c9:d4:d2:d3:c0:
         c6:e7:e3:a9:90:d6:f2:cc:65:b3:77:5d:2c:9e:c8:06:2b:2a:
         3d:12:ac:76:39:36:01:fe:39:27:f1:4b:a4:03:23:64:00:7f:
         bd:77:c4:46:d0:07:cc:7c:04:1f:92:bd:c6:1a:6b:0f:eb:e3:
         21:49:6d:13:77:e0:04:1b:f4:3c:85:d5:e0:c6:75:13:f2:5e:
         b6:1a:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:14:48 2026 by rpki-client