Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa
File:                     323830333a333439303a3a2f33322d3438203d3e20323733313637.roa (raw, json)
Hash identifier:          /NPxPT3W4FTLKB0AMvFXys4YW+TlH33T/NJWUt/D9VM=
Subject key identifier:   B5:C1:AC:5A:CD:4E:1E:6D:F4:BA:A7:93:41:94:60:37:50:B3:F5:74
Certificate issuer:       /CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
Certificate serial:       46D84617731447048DEB13F01E2988E2CAECED00
Authority key identifier: 18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa
Signing time:             Tue 10 Feb 2026 05:29:53 +0000
ROA not before:           Tue 10 Feb 2026 05:24:53 +0000
ROA not after:            Tue 09 Feb 2027 05:29:53 +0000
asID:                     273167
IP address blocks:        2803:3490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d8:46:17:73:14:47:04:8d:eb:13:f0:1e:29:88:e2:ca:ec:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
        Validity
            Not Before: Feb 10 05:24:53 2026 GMT
            Not After : Feb  9 05:29:53 2027 GMT
        Subject: CN=B5C1AC5ACD4E1E6DF4BAA7934194603750B3F574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:23:86:f4:c4:51:ea:a4:c6:47:8c:99:13:11:
                    e8:de:1f:3a:85:79:8d:a9:8d:52:3e:16:3d:ce:72:
                    61:91:56:27:f3:e9:a3:ae:cb:ed:dc:c0:36:98:3f:
                    fd:11:95:36:46:7c:06:8e:a3:e2:52:16:ed:92:8a:
                    14:33:01:50:5c:57:d3:f2:13:4f:88:8a:90:ce:19:
                    3a:14:04:dc:3f:07:25:0a:50:d8:7c:58:33:93:c1:
                    98:bd:fc:0e:5c:e2:8d:4d:ae:07:35:18:4a:e6:b1:
                    21:08:46:f1:7f:dc:d1:f2:33:e5:d1:f9:56:15:4a:
                    ec:e3:51:09:10:1b:eb:01:3e:02:30:e3:8c:5c:7f:
                    e6:c4:29:7a:a9:6d:0c:6a:7e:e8:a8:0e:70:a5:af:
                    72:b2:18:ab:c9:97:d1:da:f4:f2:12:98:a3:c0:e2:
                    4d:ba:56:99:6b:cb:69:71:65:ab:2e:90:31:c3:2f:
                    3f:58:ff:56:65:6d:ec:40:e2:5d:6e:38:d3:e1:40:
                    47:c5:ed:1b:9f:42:84:7a:71:91:bf:51:3f:e1:3f:
                    70:ef:5f:a3:63:7c:22:36:a9:ac:86:11:f5:c4:a9:
                    1c:13:0a:d3:e4:26:7c:3e:59:74:86:f2:33:2e:8e:
                    8c:2f:62:72:a6:f7:06:aa:7b:da:88:af:6d:d3:5e:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:AC:5A:CD:4E:1E:6D:F4:BA:A7:93:41:94:60:37:50:B3:F5:74
            X509v3 Authority Key Identifier:
                keyid:18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3490::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:cc:d1:26:b0:c9:29:fa:63:6a:d0:41:5c:5e:b3:d6:27:
         22:20:b2:f8:59:00:b8:9d:b3:24:7a:04:7c:16:50:cb:2c:4f:
         73:03:cf:92:97:51:e5:3e:42:6e:0c:05:b8:31:1f:df:15:36:
         c5:d4:5e:60:dd:0f:e3:c1:02:58:2c:30:af:56:72:78:fe:68:
         31:fd:60:f7:e1:bd:9b:53:9e:68:dd:c0:c7:0c:e4:d8:c0:3f:
         a7:9d:78:91:2f:c3:b4:a0:d0:cd:57:0f:63:37:50:af:02:1e:
         58:87:1e:73:67:ef:bf:56:d0:46:76:cb:19:26:57:3a:f1:eb:
         7d:24:77:ac:4c:c5:f1:e0:77:97:ac:fa:a1:03:d4:6c:b6:dc:
         fe:3b:b9:20:02:64:8c:b2:73:0e:23:0d:b0:d5:96:a5:30:e6:
         ee:22:1e:44:6b:96:ae:c3:9d:56:42:00:a6:82:52:f3:25:e7:
         ed:97:f2:83:19:1e:22:5f:c3:73:2c:ea:80:54:5a:bd:7b:e0:
         e9:41:28:c3:a9:80:27:4e:a8:84:51:82:63:32:7f:9a:bd:5c:
         5a:0a:f7:76:66:f9:9d:1e:dd:d2:0f:6d:6b:f2:32:5a:8c:6c:
         55:d4:6e:2a:bf:49:a7:ca:7c:1a:dd:c2:d5:7e:b7:4d:d0:f6:
         64:1e:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:47 2026 by rpki-client