Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/323830333a653833303a3a2f33322d3438203d3e20323734323931.roa
File:                     323830333a653833303a3a2f33322d3438203d3e20323734323931.roa (raw, json)
Hash identifier:          sL16ZAtZiGeab5ijzHHoqkbljWyzsesOTbIFdrdgL0E=
Subject key identifier:   19:76:64:FF:DF:C4:50:41:F7:E6:0D:BD:D3:3F:93:14:62:7F:E2:73
Certificate issuer:       /CN=9ECE6C39978523EA52209306DB86F504C3D56527
Certificate serial:       48CAAA60EBB884FA6D04BEA222AE727BEA5DE186
Authority key identifier: 9E:CE:6C:39:97:85:23:EA:52:20:93:06:DB:86:F5:04:C3:D5:65:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ECE6C39978523EA52209306DB86F504C3D56527.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/323830333a653833303a3a2f33322d3438203d3e20323734323931.roa
Signing time:             Fri 13 Feb 2026 18:50:00 +0000
ROA not before:           Fri 13 Feb 2026 18:45:00 +0000
ROA not after:            Fri 12 Feb 2027 18:50:00 +0000
asID:                     274291
IP address blocks:        2803:e830::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/9ECE6C39978523EA52209306DB86F504C3D56527.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/9ECE6C39978523EA52209306DB86F504C3D56527.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ECE6C39978523EA52209306DB86F504C3D56527.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:aa:60:eb:b8:84:fa:6d:04:be:a2:22:ae:72:7b:ea:5d:e1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE6C39978523EA52209306DB86F504C3D56527
        Validity
            Not Before: Feb 13 18:45:00 2026 GMT
            Not After : Feb 12 18:50:00 2027 GMT
        Subject: CN=197664FFDFC45041F7E60DBDD33F9314627FE273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:87:c0:6b:b8:04:22:73:95:91:5f:0c:e9:
                    48:40:f7:5f:ef:da:9f:fd:da:4d:b2:2b:06:4c:3f:
                    57:83:66:a2:89:02:97:6f:c0:1e:e0:9d:fe:e1:87:
                    b4:c3:e5:d4:a2:11:2a:1c:d2:ee:57:ae:38:68:c0:
                    0b:83:1a:5f:f5:7f:33:35:47:4e:9a:79:f5:f0:6d:
                    dc:70:ac:b7:d4:7f:8e:ef:84:a9:6f:b9:47:94:4e:
                    9c:c0:14:0a:c7:85:d1:30:43:d2:77:33:48:94:86:
                    d5:6d:fb:07:41:20:20:70:b8:25:6b:bf:10:e7:99:
                    3f:1f:e8:c4:62:2c:f5:18:ff:ba:d9:a0:7b:47:29:
                    5a:c0:c8:9b:26:b3:d8:99:70:ed:8b:74:33:31:72:
                    c5:30:ac:e7:63:e9:22:c8:bf:d1:02:69:3a:9c:cd:
                    f8:8b:5a:ad:3e:a7:2e:02:5c:6e:f1:32:59:ae:3a:
                    d2:ed:2f:1f:88:9a:62:2b:0d:04:71:9c:0c:6a:15:
                    1c:01:33:87:b3:d0:21:49:0c:68:5b:73:a0:a0:83:
                    8f:35:e4:de:6e:3b:88:1f:d6:ce:35:68:15:85:03:
                    be:f2:6d:cc:3e:2e:95:b8:eb:12:d5:f5:1c:cf:b9:
                    0a:da:1f:ec:5a:e3:cf:f7:e3:c0:df:7c:07:1f:f1:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:64:FF:DF:C4:50:41:F7:E6:0D:BD:D3:3F:93:14:62:7F:E2:73
            X509v3 Authority Key Identifier:
                keyid:9E:CE:6C:39:97:85:23:EA:52:20:93:06:DB:86:F5:04:C3:D5:65:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/9ECE6C39978523EA52209306DB86F504C3D56527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ECE6C39978523EA52209306DB86F504C3D56527.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/323830333a653833303a3a2f33322d3438203d3e20323734323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e830::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:6d:0c:6e:31:52:f5:8d:1b:cb:74:09:25:ff:bb:90:81:
         b6:a3:9a:ac:27:28:e0:b9:80:ba:5d:48:22:06:8e:1c:ce:f6:
         bf:c1:fe:78:50:08:e5:31:2a:c6:a6:be:a0:dd:24:67:36:e0:
         9b:cb:f5:d6:b1:31:74:af:e3:4c:95:e2:cf:a7:38:a7:3d:45:
         05:60:27:e2:ec:f1:60:45:19:74:9d:ca:d2:02:14:49:eb:4e:
         e3:1a:dd:4c:17:44:5c:b3:c5:f5:9e:cb:e1:a2:c1:0e:de:a6:
         e8:d1:b9:22:d7:2a:23:31:96:73:4c:2d:70:52:dd:9e:7d:3d:
         26:12:e9:1c:56:db:35:9c:3f:eb:c5:88:c7:94:29:ce:ef:c6:
         48:2f:dc:c5:5f:90:36:4b:81:26:2d:c3:77:d4:4b:06:85:e5:
         9b:e5:8e:2f:17:e1:ef:dd:29:62:b7:63:0c:ef:23:30:01:2e:
         d2:ef:cb:5c:b1:fd:de:e2:8d:35:54:61:41:9a:4c:e8:d7:f7:
         10:a4:c5:49:9f:dd:28:5e:f7:6b:37:47:4f:88:3d:04:11:eb:
         e5:70:13:0a:23:38:00:f3:16:c4:44:c5:01:94:00:38:b7:1e:
         66:cf:2e:3e:2e:c6:7a:37:a3:e6:da:f7:a2:f7:b7:37:28:30:
         12:c2:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:33:31 2026 by rpki-client