Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa
File:                     323830333a626632303a3a2f33322d3438203d3e20323636373833.roa (raw, json)
Hash identifier:          pwHkqmlVxDCKzkSLpQHZT8z5DShlN7+jZiIRMAtJkYQ=
Subject key identifier:   40:36:8E:34:4E:42:75:6A:3A:6E:EE:B2:43:09:9C:A8:72:70:0C:0D
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       2B27D149E9803FB12C96F421E34036B649FBA401
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa
Signing time:             Tue 06 Jan 2026 19:30:00 +0000
ROA not before:           Tue 06 Jan 2026 19:25:00 +0000
ROA not after:            Tue 05 Jan 2027 19:30:00 +0000
asID:                     266783
IP address blocks:        2803:bf20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:27:d1:49:e9:80:3f:b1:2c:96:f4:21:e3:40:36:b6:49:fb:a4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Jan  6 19:25:00 2026 GMT
            Not After : Jan  5 19:30:00 2027 GMT
        Subject: CN=40368E344E42756A3A6EEEB243099CA872700C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ac:1e:be:2a:84:30:c0:57:cc:bf:e0:b5:72:
                    6e:b5:5f:82:b0:57:0b:c7:d7:68:da:f9:13:b9:08:
                    b6:6a:b6:11:8b:04:1e:9d:50:cb:e1:5f:e6:4f:66:
                    af:f9:7e:d6:5d:8b:c2:54:f9:f0:61:37:03:2c:89:
                    d0:f0:83:f3:d6:bd:70:b6:9d:e4:e4:8c:11:40:83:
                    7d:68:b8:91:97:5b:4a:dd:24:4c:59:23:74:3f:5b:
                    90:46:3b:c0:58:4b:73:d8:d9:dd:8b:ed:26:be:e9:
                    51:7a:48:94:16:f6:27:98:25:7a:33:af:e9:64:c7:
                    c4:1d:db:27:e5:5d:7d:a9:32:8d:43:ee:a6:cf:01:
                    39:ed:3a:75:8d:08:33:40:90:76:95:17:01:9a:55:
                    2f:33:3f:97:84:21:5f:d8:d6:a1:59:20:2e:45:6b:
                    a7:e8:e1:b4:55:b4:5a:23:56:3a:a7:65:a0:cf:81:
                    1b:bb:e6:73:eb:90:97:ac:9f:5c:77:f0:bd:9d:c5:
                    7c:2d:3b:95:a3:0a:1b:50:8b:b1:90:6a:c5:24:2a:
                    f5:ba:24:a2:28:3f:24:a8:3f:a8:ad:a9:eb:79:58:
                    43:c9:e6:c1:b8:e4:66:78:61:05:e1:80:18:ad:c4:
                    72:15:2e:62:11:c3:83:04:eb:07:bd:db:75:e6:a1:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:36:8E:34:4E:42:75:6A:3A:6E:EE:B2:43:09:9C:A8:72:70:0C:0D
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf20::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:b9:56:d5:c6:46:6a:e4:01:ff:6d:1a:5c:99:97:8b:6b:
         1c:1b:d1:9c:24:67:9c:c1:96:85:58:c4:60:06:91:e0:d4:dc:
         2a:0f:3f:e6:98:c0:b5:ad:44:1d:9f:06:17:a6:56:12:50:d3:
         25:8c:a6:30:b1:10:b0:8b:fb:eb:92:ba:ef:49:1b:b8:06:b2:
         1e:d0:d5:bb:63:bb:d8:42:be:be:eb:c8:23:24:c7:d7:40:a9:
         f0:50:53:bf:85:f7:ee:06:ef:e8:e3:49:83:e0:d4:4f:cf:93:
         39:8b:e8:73:18:b3:fa:29:fc:94:a5:c3:02:7f:ad:2e:6d:95:
         e9:9b:7d:f7:d1:db:cc:f7:41:f6:ef:db:9b:9e:2d:be:be:bd:
         ab:af:ca:d5:4c:5f:31:7e:0d:86:bc:51:d6:1b:58:f3:02:f8:
         05:a0:a0:7d:6d:8b:50:77:55:fc:f7:39:f8:39:f5:2e:af:52:
         bb:21:8f:a9:53:5d:97:6c:45:85:6a:c7:7f:7b:65:c1:b0:b2:
         32:6c:40:9c:2b:68:b6:0c:55:44:6c:fc:23:92:7f:e6:09:c1:
         ce:6e:a9:7e:30:04:45:69:fc:1e:40:c6:3e:e3:27:97:6f:ae:
         5d:9a:8f:cc:ab:c0:00:67:87:01:29:f3:3f:3a:05:f8:14:ba:
         ac:de:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:19 2026 by rpki-client