Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa
File:                     323830333a346164303a3a2f33322d3438203d3e20323734303738.roa (raw, json)
Hash identifier:          yU6SH0y8DLgoglBKgjCWVsA2NZz9keqgpbr+/n/KcNs=
Subject key identifier:   66:40:69:A1:BF:6B:93:0E:63:00:2C:EC:5B:90:72:5B:38:D8:5F:94
Certificate issuer:       /CN=1E9130D019A915F19ADB27283B971267AFC5BC20
Certificate serial:       1ED4F5AD7B79939490FFD9ED0848F0AF4F35CCBB
Authority key identifier: 1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa
Signing time:             Fri 27 Feb 2026 11:32:06 +0000
ROA not before:           Fri 27 Feb 2026 11:27:06 +0000
ROA not after:            Fri 26 Feb 2027 11:32:06 +0000
asID:                     274078
IP address blocks:        2803:4ad0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d4:f5:ad:7b:79:93:94:90:ff:d9:ed:08:48:f0:af:4f:35:cc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9130D019A915F19ADB27283B971267AFC5BC20
        Validity
            Not Before: Feb 27 11:27:06 2026 GMT
            Not After : Feb 26 11:32:06 2027 GMT
        Subject: CN=664069A1BF6B930E63002CEC5B90725B38D85F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:0b:e5:a9:26:f3:1f:20:8d:f3:47:db:7c:
                    30:a7:66:b6:a2:1f:28:bd:cd:ec:12:b7:02:51:37:
                    85:c8:3f:84:ae:6d:32:f4:4d:0f:8f:9f:cf:6e:d8:
                    61:10:a4:84:3d:51:75:5b:51:93:5c:a1:b5:25:86:
                    0e:eb:95:b6:f1:10:06:f8:b3:84:07:b5:80:ba:73:
                    01:7f:b7:9c:20:61:8a:2f:b4:f4:f6:08:81:42:8a:
                    12:2f:ed:62:b8:bf:a5:18:e9:c0:62:c8:bf:2d:4b:
                    6c:1e:16:a0:6b:63:14:4f:ca:03:bd:23:d0:d6:82:
                    64:86:4f:ff:fd:f1:b7:2d:7f:bf:fe:8e:c0:5c:fd:
                    95:43:d4:18:e6:25:5a:59:12:18:b3:64:54:c5:02:
                    a9:f2:51:45:b5:4e:99:93:16:9f:16:e1:bc:6f:04:
                    83:cc:6c:54:94:8a:df:dc:97:22:81:83:32:5c:98:
                    af:41:77:33:89:72:06:5f:67:bf:90:d2:77:15:4f:
                    9c:43:b3:50:23:52:fa:0d:a6:de:69:8c:fc:e9:db:
                    59:ba:20:54:f1:02:cd:97:e2:d0:5b:f0:6c:5e:fd:
                    04:3e:45:99:c4:b6:2f:fc:bb:e5:66:e8:88:f2:ca:
                    6c:1a:34:b9:85:a3:f7:c9:7d:37:e5:96:9e:d5:e9:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:40:69:A1:BF:6B:93:0E:63:00:2C:EC:5B:90:72:5B:38:D8:5F:94
            X509v3 Authority Key Identifier:
                keyid:1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/323830333a346164303a3a2f33322d3438203d3e20323734303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:2f:da:6e:5d:88:57:7a:df:01:3f:45:f8:d1:86:f3:84:
         bd:36:33:d3:74:fa:48:73:3f:5b:9e:85:81:64:2c:da:5c:4f:
         3d:0b:04:d7:3a:1e:42:93:0d:21:6d:09:0d:0d:19:77:c1:92:
         7a:ec:5b:c7:6a:e9:bc:b9:96:4c:12:b8:97:f5:78:c4:95:19:
         4c:9c:99:ce:96:a2:09:38:e1:ae:1e:fc:f2:a2:9a:d2:79:99:
         12:7c:f7:74:65:0d:83:61:b0:52:92:78:5c:e5:8b:91:57:2e:
         ba:80:b6:61:66:18:8a:aa:41:a6:e2:5d:22:63:af:2e:be:6d:
         78:bc:4e:0f:f2:d2:99:5f:f5:c1:6d:70:22:ce:b3:33:9e:a6:
         42:ac:18:5b:5e:05:cd:15:07:94:2b:a1:20:c6:bb:ad:ae:b7:
         03:e0:63:75:ac:90:53:68:20:00:25:e0:af:0e:0d:f6:89:f3:
         2e:a2:fb:c6:98:de:e7:01:ab:71:c3:26:00:97:28:9a:fa:bf:
         ef:f3:3b:6f:7a:0d:32:de:dd:ce:a3:ec:f0:80:93:2c:c3:88:
         e7:af:c9:2a:a7:4f:e2:b2:76:51:11:51:2c:96:39:0a:90:35:
         75:df:9b:5f:cb:49:8c:71:e9:c5:93:6c:3e:df:6d:79:c8:7b:
         7b:32:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:16:54 2026 by rpki-client