Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313430.roa
File:                     323830333a333439303a3a2f33322d3438203d3e20323733313430.roa (raw, json)
Hash identifier:          tB0+O/rGGnTYIoeSWD8md//zpjDZee9VR2Y5eMhnzt4=
Subject key identifier:   96:E8:C4:93:A7:33:A8:74:2A:2C:86:11:56:6B:80:5A:A4:71:D8:7F
Certificate issuer:       /CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
Certificate serial:       3F9CB54756099CDFA183BD943D58DCE8BCD0CA65
Authority key identifier: 18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313430.roa
Signing time:             Tue 10 Feb 2026 05:29:53 +0000
ROA not before:           Tue 10 Feb 2026 05:24:53 +0000
ROA not after:            Tue 09 Feb 2027 05:29:53 +0000
asID:                     273140
IP address blocks:        2803:3490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9c:b5:47:56:09:9c:df:a1:83:bd:94:3d:58:dc:e8:bc:d0:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
        Validity
            Not Before: Feb 10 05:24:53 2026 GMT
            Not After : Feb  9 05:29:53 2027 GMT
        Subject: CN=96E8C493A733A8742A2C8611566B805AA471D87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:2b:d4:e0:85:d9:ee:16:f4:1c:40:6a:41:
                    24:13:86:cb:e2:9a:28:94:40:8e:9a:f0:7b:49:97:
                    2d:98:85:cf:f1:df:cb:24:fa:3c:f4:b3:f9:42:ec:
                    0a:e6:a7:ca:17:c3:c6:d6:8b:c2:84:da:dc:ee:81:
                    9d:6c:40:c7:71:e2:aa:87:b9:f9:a9:3d:2a:69:c4:
                    de:e4:da:79:18:fd:b1:b6:62:5f:8d:94:4f:d9:37:
                    f7:49:ed:36:be:b2:fd:38:eb:c3:4c:c5:be:c3:36:
                    99:05:52:89:6f:cc:63:8a:d6:ac:ab:be:bf:22:38:
                    80:2c:4d:be:7a:6c:a0:39:90:ae:43:61:e9:0d:cf:
                    69:a3:87:fc:cb:d8:22:d2:42:58:df:b8:2d:ba:e1:
                    5e:77:15:3c:69:a8:a7:fa:46:f2:fd:59:cd:4e:05:
                    e9:e0:b1:d0:04:26:79:f8:60:0e:b0:f2:6d:4e:c7:
                    a2:c8:d3:b3:e2:fa:8e:92:0b:35:b5:bb:b2:fe:7c:
                    37:69:fd:d2:d6:0e:db:5d:1a:52:2a:7c:69:61:3e:
                    3d:5b:ce:5c:74:7d:5f:9b:1c:a1:5b:5a:b5:3d:25:
                    37:50:f6:2c:02:7f:ab:4a:0f:03:84:b5:4d:0f:14:
                    8e:c0:fb:dd:67:fe:dd:f2:6c:86:9e:76:01:18:d1:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E8:C4:93:A7:33:A8:74:2A:2C:86:11:56:6B:80:5A:A4:71:D8:7F
            X509v3 Authority Key Identifier:
                keyid:18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3490::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:38:7e:a0:d0:25:a9:6f:f3:61:9f:64:0f:19:0b:0e:83:
         32:f2:db:ff:02:66:5b:47:e6:fc:f6:7d:7c:7d:12:f1:8a:43:
         5c:8e:5a:98:c2:83:6b:d8:56:23:2e:ac:f4:1b:38:cd:70:c6:
         20:40:52:74:78:bc:2f:31:f4:e2:7c:aa:14:b9:bd:ae:e4:40:
         0d:ea:88:df:ca:47:42:c1:89:a8:60:b6:59:3f:e7:bc:ac:90:
         17:74:c2:de:d9:7b:24:bc:8f:af:b7:39:29:85:84:53:66:74:
         26:55:d4:4f:45:5e:db:94:8d:20:f2:13:db:da:43:5b:f0:38:
         c1:aa:9f:c8:a1:71:53:6c:b7:42:7f:e7:07:09:7b:16:24:65:
         8e:32:4a:f9:b4:0d:75:ee:67:ee:17:76:92:7e:47:87:44:bc:
         42:54:ad:c1:fc:cc:de:48:06:eb:7f:f5:98:b2:73:03:38:a9:
         35:df:eb:39:8c:a0:17:7e:b6:33:3f:ac:50:1f:4d:9e:ef:dd:
         42:e1:89:53:97:fd:dc:2b:c8:38:9f:5e:cb:6c:7d:21:3d:14:
         d0:a3:e6:d7:54:2e:a0:f8:a3:ad:85:a3:cb:c8:a3:75:94:0e:
         5a:3c:3e:5d:cf:c7:43:d3:09:b5:fb:8b:3e:81:cb:5f:16:aa:
         2c:93:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:52 2026 by rpki-client