Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3332203d3e20323733303734.roa
File:                     323830333a326639303a3a2f33322d3332203d3e20323733303734.roa (raw, json)
Hash identifier:          OPlLE5gWb94tD2wU/lJJuh7Ysl/ow/9SDjshxOEJ0Gk=
Subject key identifier:   08:5D:78:48:9E:92:5E:C6:BC:C8:39:67:C3:F3:A1:99:87:D8:1E:92
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       379816C367C62B3B4ABD2F0F1AB36CB06F859F80
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3332203d3e20323733303734.roa
Signing time:             Sun 22 Feb 2026 02:00:00 +0000
ROA not before:           Sun 22 Feb 2026 01:55:00 +0000
ROA not after:            Sun 21 Feb 2027 02:00:00 +0000
asID:                     273074
IP address blocks:        2803:2f90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:16:c3:67:c6:2b:3b:4a:bd:2f:0f:1a:b3:6c:b0:6f:85:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Feb 22 01:55:00 2026 GMT
            Not After : Feb 21 02:00:00 2027 GMT
        Subject: CN=085D78489E925EC6BCC83967C3F3A19987D81E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:30:76:fa:06:ef:59:4c:48:9a:c1:4e:e1:
                    34:22:fe:e9:f0:ef:93:b7:e4:5a:88:87:e4:93:db:
                    75:21:e4:b4:43:9b:c5:40:42:a6:d2:7d:f0:48:05:
                    8c:9e:c2:83:81:04:ed:f8:38:98:ac:3d:13:ae:51:
                    62:8f:f9:14:47:d0:10:be:0f:10:16:7b:d2:fb:99:
                    0d:72:20:c8:58:f8:84:da:c4:9d:75:4c:91:67:ac:
                    bc:37:56:58:41:fc:ac:d5:e7:d1:44:2e:3f:80:18:
                    7c:0c:ff:8f:97:65:cd:0f:67:69:fe:14:b9:b7:69:
                    9c:4b:92:ff:84:4e:59:89:4c:c1:65:2e:9b:b8:ae:
                    52:6f:20:11:35:f6:19:2e:0e:c0:96:75:2c:ae:75:
                    cb:ee:32:b3:f2:79:e5:18:3d:a0:07:69:65:78:fc:
                    6b:74:ab:82:58:4f:fc:f1:45:ca:86:ca:20:58:88:
                    3d:42:ed:ce:8b:63:d7:70:b4:d0:87:74:33:0a:97:
                    bd:66:1c:67:8e:ee:6e:4c:f5:c9:d9:ad:f2:7c:94:
                    c5:83:2b:36:2d:bb:ae:64:f7:ff:93:2b:39:ef:90:
                    9b:ec:a0:b5:92:97:78:d6:15:a9:88:94:bc:7f:e1:
                    cc:39:22:28:f5:cd:cc:46:73:51:48:3f:57:31:a2:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5D:78:48:9E:92:5E:C6:BC:C8:39:67:C3:F3:A1:99:87:D8:1E:92
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3332203d3e20323733303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:cc:68:f6:e8:58:70:76:59:17:2b:7c:41:93:b1:63:b4:06:
         40:f1:04:71:74:3c:39:36:23:d4:2f:20:f4:95:32:61:30:06:
         03:e5:1d:a9:30:e4:b4:70:5f:9c:18:66:61:8c:cb:ad:20:d8:
         fe:ba:89:34:77:c8:4e:e2:36:84:fe:cf:80:a9:e6:1b:69:93:
         ce:5a:bf:2f:1c:73:63:45:80:67:14:e0:e8:a9:2f:1d:b1:3f:
         5a:56:e3:ee:ab:2e:f2:0a:a5:fc:57:a2:49:cd:4b:3f:71:73:
         38:1f:52:82:fb:a1:f5:39:e1:b7:fd:6b:88:c3:c8:2e:cd:99:
         3c:ee:95:02:b8:73:ee:63:4b:fd:26:6e:ac:0a:5d:8c:38:63:
         59:ea:78:57:2c:97:5f:6f:4c:f1:79:6f:d6:63:f6:ac:0b:8f:
         5f:4c:25:00:8f:6c:ef:a8:6f:68:8e:5b:3d:80:14:a9:b3:c2:
         84:8a:a8:fa:b6:a9:af:f2:52:c6:e3:75:f6:46:52:f6:8e:0c:
         95:ce:93:7e:cd:c8:f0:5c:71:ba:f0:cf:5c:df:de:d7:06:a4:
         e3:8f:36:37:54:6e:76:7d:df:64:a7:f8:b7:6f:21:3d:3c:c0:
         c6:cf:51:7f:b3:0b:45:a3:c4:83:a7:25:78:0a:5a:62:77:08:
         ca:65:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:53:04 2026 by rpki-client