Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3230303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3230303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          aRsA/QQZNmIz2K9FSGcAxbH81yk0uj8XGSbaj3dIiWs=
Subject key identifier:   88:70:22:FD:9D:8D:71:C7:F5:11:A8:7B:9D:23:E9:36:D8:29:2B:8B
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       7694A73DC08A6A1EA229E7123B91766F7C8C8DD3
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3230303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 06 Jan 2026 19:11:06 +0000
ROA not before:           Tue 06 Jan 2026 19:06:06 +0000
ROA not after:            Tue 05 Jan 2027 19:11:06 +0000
asID:                     272939
IP address blocks:        2803:b190:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:94:a7:3d:c0:8a:6a:1e:a2:29:e7:12:3b:91:76:6f:7c:8c:8d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Jan  6 19:06:06 2026 GMT
            Not After : Jan  5 19:11:06 2027 GMT
        Subject: CN=887022FD9D8D71C7F511A87B9D23E936D8292B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:3c:a0:6e:f5:b8:92:86:5f:74:40:3a:ec:
                    7e:9f:d0:b5:d3:78:22:b6:75:78:59:71:43:75:17:
                    c1:44:7a:74:42:e6:7f:cc:ef:ec:c6:9c:87:12:4b:
                    90:c0:0a:15:34:fe:53:18:14:0d:3a:90:52:8b:15:
                    b4:85:89:0e:de:04:93:0e:05:5b:9a:58:58:07:3c:
                    ac:29:41:7e:3c:7c:c6:4b:fa:61:4d:1e:ab:9f:19:
                    2e:9d:f7:29:b2:c2:08:72:66:d7:6e:8c:41:d7:19:
                    eb:03:3d:20:2e:4f:98:7a:17:a7:55:9e:e0:95:33:
                    73:d5:e1:40:76:dc:27:bc:80:86:7c:14:a0:d5:e2:
                    68:ee:79:39:0c:8d:b1:e2:d0:f8:e7:c0:81:7a:31:
                    4d:6b:ac:0e:8e:e7:4d:22:7c:b2:c0:27:2a:51:a1:
                    98:fd:2c:b9:77:14:e6:76:4a:ba:dc:9f:dc:7f:6b:
                    18:45:87:1c:96:8b:e9:4c:0d:a2:a2:a0:ab:95:2e:
                    37:d5:d9:f4:f9:12:90:c9:94:09:6a:26:f3:49:11:
                    ea:be:59:e2:5e:9b:45:c9:9d:00:30:c3:36:c8:12:
                    32:47:a8:69:d5:a0:a6:39:b5:6b:f0:b3:72:97:f9:
                    61:23:70:1c:e4:f6:88:0c:77:1d:27:44:3c:56:1c:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:22:FD:9D:8D:71:C7:F5:11:A8:7B:9D:23:E9:36:D8:29:2B:8B
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3230303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:8b:f9:26:d5:b9:17:f9:b2:74:94:55:82:ac:76:1b:be:
         14:0a:57:72:37:92:d3:c6:ba:c1:aa:e5:0a:ed:c7:ee:f4:22:
         19:25:98:65:96:5a:2e:a0:ad:75:c4:6c:db:9f:fd:0e:68:d3:
         6c:c0:6f:88:ba:de:86:68:eb:90:4f:cc:1f:9c:26:ab:39:1c:
         0c:fc:bc:74:11:62:e7:9d:82:53:9a:8c:fe:ad:07:b5:76:8f:
         07:32:03:a9:63:a4:9e:1c:49:ca:1e:48:7b:68:b0:f5:6e:0a:
         20:1b:9f:87:40:8b:27:3d:5c:5e:7f:21:93:59:ce:75:8f:16:
         03:ba:e2:44:c2:43:68:d4:61:16:8a:7d:b8:6f:fc:c3:8f:ac:
         17:c4:66:9c:cc:e5:c0:9a:8a:6e:dd:07:63:6a:59:e4:76:1d:
         e2:62:bf:cf:06:e3:1a:95:e4:a8:4e:54:98:ed:74:98:0c:2b:
         8c:83:a0:b6:c5:a6:ef:90:1c:4c:1f:d5:a2:75:85:36:48:6b:
         11:fd:1b:0f:72:92:ee:1a:36:33:cf:8a:df:bb:e9:5b:04:0e:
         98:dd:25:b8:25:d3:a6:6b:d7:90:37:f4:3a:00:9c:91:7a:7d:
         37:b1:e2:ab:9b:75:d1:46:73:0b:a1:24:4d:4f:5f:1c:9a:1e:
         b9:0a:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:39:56 2026 by rpki-client