Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa
File:                     323830333a313165303a3a2f33322d3438203d3e20323639393937.roa (raw, json)
Hash identifier:          dTxTTAektaoww4BFyjbohmHnidK4TLjo35kTQm5fZWg=
Subject key identifier:   7A:2D:E3:86:11:DF:B4:D8:4F:C8:2A:2F:DD:95:DB:39:7E:B9:CF:B3
Certificate issuer:       /CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
Certificate serial:       332C230AC2C645F19731323680EFBC6E5FB25465
Authority key identifier: 76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa
Signing time:             Tue 06 Jan 2026 19:23:30 +0000
ROA not before:           Tue 06 Jan 2026 19:18:30 +0000
ROA not after:            Tue 05 Jan 2027 19:23:30 +0000
asID:                     269997
IP address blocks:        2803:11e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 16:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2c:23:0a:c2:c6:45:f1:97:31:32:36:80:ef:bc:6e:5f:b2:54:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
        Validity
            Not Before: Jan  6 19:18:30 2026 GMT
            Not After : Jan  5 19:23:30 2027 GMT
        Subject: CN=7A2DE38611DFB4D84FC82A2FDD95DB397EB9CFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:65:ff:da:34:0a:a1:c1:17:f4:26:27:b3:
                    44:83:d6:be:a2:28:a5:10:ca:30:3e:36:f4:32:d9:
                    52:2a:d8:bd:14:75:d5:42:b2:82:74:88:d0:40:be:
                    25:38:61:40:2b:36:27:bf:61:a2:73:72:fa:39:4f:
                    48:8c:54:6e:d3:d9:62:e1:4b:f2:4d:71:1a:2d:82:
                    13:38:8a:62:53:2d:40:8e:83:19:0e:0b:dd:0e:6d:
                    86:95:d7:f7:76:be:81:2b:c4:5b:0c:9f:50:30:b6:
                    9f:9e:1c:20:97:3a:0e:6f:4d:ee:38:03:db:3b:cd:
                    81:8b:17:2c:d7:5e:e4:f1:71:da:0c:5c:7f:55:b9:
                    86:5c:e0:70:8c:84:60:ca:8e:b6:5c:18:39:da:56:
                    83:3a:fe:ee:98:1b:0b:e3:63:ca:f9:fd:94:88:d3:
                    e7:96:cc:04:54:51:b3:cd:a0:8b:37:a0:56:59:01:
                    7b:93:e8:ff:28:ac:e7:ab:94:d5:6e:d3:96:ac:dc:
                    f1:34:3a:83:c2:aa:ac:2f:18:9f:27:52:e3:ab:10:
                    1c:61:1b:b2:e6:dd:fd:d8:9c:d5:61:72:bf:c6:13:
                    4f:62:10:20:4f:01:4f:d2:90:bd:57:e7:a0:d7:36:
                    63:57:e4:b1:e8:7f:c0:cc:02:e3:8b:41:4c:bd:88:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2D:E3:86:11:DF:B4:D8:4F:C8:2A:2F:DD:95:DB:39:7E:B9:CF:B3
            X509v3 Authority Key Identifier:
                keyid:76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:95:a0:c0:f2:da:8e:aa:58:0e:86:06:8b:47:94:00:30:
         8a:88:71:f2:95:de:04:4c:bb:03:03:b7:c3:b6:db:73:9f:e3:
         ba:f3:39:01:d0:1d:07:87:b5:21:de:41:3b:ee:56:a6:40:c2:
         19:cb:38:a7:29:ae:3a:f9:68:c6:46:70:7b:d0:c7:ab:52:ad:
         e2:e8:b9:de:b9:eb:8b:a9:6b:93:76:4a:4d:5d:64:e7:1d:9c:
         da:51:d9:b5:0a:d4:77:08:cd:e6:1b:8b:36:3f:10:c7:2b:d6:
         bf:50:a6:de:9f:7f:50:2f:a0:4b:87:6e:64:69:ec:47:1d:d6:
         41:5b:1e:b7:95:e3:c8:af:69:f2:41:d9:72:41:a9:f6:7f:de:
         50:cc:b8:4c:11:17:dc:4d:21:de:84:d9:eb:91:67:3e:b7:7d:
         1f:2b:fa:e9:41:58:e3:32:bd:6a:09:67:3f:35:2a:ca:67:8e:
         67:e0:7b:d5:47:3d:83:20:56:1d:d5:4a:93:18:4c:92:8f:95:
         84:56:fc:81:2d:34:2b:87:96:b8:40:1a:dd:f4:c2:63:0c:ee:
         57:a0:43:bc:65:2c:a6:c7:b6:b1:27:3c:fe:23:07:21:ed:24:
         94:1c:f6:14:2b:1c:73:c2:49:4b:52:c1:87:5d:ea:9a:eb:bf:
         09:80:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:08 2026 by rpki-client