Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa
File:                     323830333a383132303a3a2f33322d3332203d3e20323636363533.roa (raw, json)
Hash identifier:          8lG813wIqojrdBKQe2O8wR9dD1tJHSzGoajktwhx118=
Subject key identifier:   3C:26:D9:1E:E6:01:6F:82:2A:1A:AA:83:46:5F:C0:1C:E7:53:C4:9B
Certificate issuer:       /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial:       0CC783A550C099532FB79F688FFF1C397AC8438E
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa
Signing time:             Tue 06 Jan 2026 19:33:09 +0000
ROA not before:           Tue 06 Jan 2026 19:28:09 +0000
ROA not after:            Tue 05 Jan 2027 19:33:09 +0000
asID:                     266653
IP address blocks:        2803:8120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c7:83:a5:50:c0:99:53:2f:b7:9f:68:8f:ff:1c:39:7a:c8:43:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
        Validity
            Not Before: Jan  6 19:28:09 2026 GMT
            Not After : Jan  5 19:33:09 2027 GMT
        Subject: CN=3C26D91EE6016F822A1AAA83465FC01CE753C49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:f9:f8:8d:c1:dd:9f:22:b7:17:9d:41:4c:
                    c2:6f:fa:2d:78:9c:f3:97:02:56:90:27:eb:55:5e:
                    20:34:2b:5d:0c:f7:51:36:1e:a7:c8:32:ea:a9:6e:
                    99:3f:28:4f:8c:7b:40:4b:74:db:7b:78:82:ed:c5:
                    5c:fe:6b:d3:5f:5e:e6:1c:43:6e:ae:a2:19:9b:ed:
                    bc:24:d2:1d:c2:05:32:9a:fc:4c:93:8b:2b:3d:b5:
                    50:b3:da:3b:e7:b5:b7:f2:97:0d:4c:65:8b:7b:4b:
                    04:9a:98:af:c8:90:61:85:b5:45:63:43:b1:51:8e:
                    4d:ff:7e:c4:21:bf:32:3b:64:eb:a1:66:9d:da:e9:
                    ba:53:c4:49:4b:94:5a:d0:15:42:41:e4:c9:85:58:
                    57:0e:ba:3f:bc:08:6c:d6:44:a2:4f:60:68:b8:ef:
                    29:2c:a0:90:d3:7c:61:f1:cb:7e:db:7d:0b:a6:88:
                    db:b6:a1:01:9f:2e:bb:14:f2:68:94:2c:74:e1:e1:
                    cd:00:69:1e:54:b9:f2:58:29:e1:24:6f:71:e8:d8:
                    03:60:1a:64:1d:17:9d:63:6c:0e:a9:22:f0:a8:58:
                    94:3d:79:b1:39:3e:e5:05:88:17:3a:1a:d9:53:a3:
                    1a:cb:0c:a2:d8:68:1a:c3:da:de:56:82:1e:61:f5:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:D9:1E:E6:01:6F:82:2A:1A:AA:83:46:5F:C0:1C:E7:53:C4:9B
            X509v3 Authority Key Identifier:
                keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:0a:52:fe:de:8a:99:91:0b:6c:72:f2:e1:55:65:28:7e:
         76:19:79:27:8b:ec:e9:a0:1f:67:84:cd:fb:2e:c8:91:63:be:
         5c:9a:2e:de:8c:2b:48:1d:f1:df:bf:14:bb:8b:3d:e8:5d:f3:
         39:62:5a:be:7e:6d:1d:92:83:c2:b3:63:09:4f:a7:ab:b5:34:
         73:83:89:83:50:b6:6c:a7:96:a1:e6:a7:32:59:80:4f:17:82:
         bc:71:3a:40:10:59:e4:12:c4:49:fb:cf:a9:ba:f8:ef:6c:bc:
         f3:fa:99:d0:6c:0b:a1:fd:41:69:92:84:a8:f1:a9:05:43:b3:
         91:2a:1d:f9:eb:7d:e8:37:2f:82:ae:8f:e6:58:0b:8a:de:cf:
         8d:a4:fd:2a:0f:95:b2:1f:9e:80:be:27:a1:10:83:af:04:83:
         39:f9:3c:18:14:f2:00:be:1a:4a:d4:42:8e:b4:05:8d:9e:cf:
         9b:37:8c:c2:43:7d:b7:26:36:1b:6d:21:c6:80:d6:11:4c:74:
         a0:95:7e:43:e9:59:26:ad:c7:8d:ba:bd:a4:c1:81:e9:ba:a9:
         c3:bb:4f:31:b7:bb:79:23:9c:57:dd:d5:39:fa:ba:d7:20:19:
         5e:c2:97:79:7c:67:be:07:57:d9:d2:03:32:56:d7:f5:09:b1:
         0a:94:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:35 2026 by rpki-client