Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa
File:                     323830333a333331303a3a2f33322d3332203d3e20323732303639.roa (raw, json)
Hash identifier:          HPeGIsTQlopqptK763YDaCjRx7yM5qC5aR7JLj0kRIM=
Subject key identifier:   4E:E9:84:F2:B2:7F:9E:2E:76:78:06:9D:7B:D3:38:86:57:9A:97:96
Certificate issuer:       /CN=D03703750EB04020548DBEDA6A85AD45C4E14E1A
Certificate serial:       0897720BC6C535CE8D0FB769039C96C714D5477E
Authority key identifier: D0:37:03:75:0E:B0:40:20:54:8D:BE:DA:6A:85:AD:45:C4:E1:4E:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa
Signing time:             Tue 06 Jan 2026 19:07:14 +0000
ROA not before:           Tue 06 Jan 2026 19:02:14 +0000
ROA not after:            Tue 05 Jan 2027 19:07:14 +0000
asID:                     272069
IP address blocks:        2803:3310::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:97:72:0b:c6:c5:35:ce:8d:0f:b7:69:03:9c:96:c7:14:d5:47:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D03703750EB04020548DBEDA6A85AD45C4E14E1A
        Validity
            Not Before: Jan  6 19:02:14 2026 GMT
            Not After : Jan  5 19:07:14 2027 GMT
        Subject: CN=4EE984F2B27F9E2E7678069D7BD33886579A9796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:6a:a4:a4:77:45:1b:de:11:1f:91:1c:bc:
                    ed:db:fc:e1:15:0e:67:ec:fa:1b:23:60:2d:1b:bb:
                    c5:2c:1b:ee:ed:6e:a9:3d:af:5d:90:63:60:ba:d4:
                    38:83:16:3e:4a:b8:47:01:52:ea:99:13:80:8a:4f:
                    99:d4:ea:67:70:74:d0:c5:d5:34:b2:63:db:96:e3:
                    49:89:a7:9d:5d:d9:1f:44:55:a9:99:31:b1:69:85:
                    6a:7e:01:89:7b:78:ad:7f:f3:fb:fe:6e:bc:95:31:
                    c7:fe:cc:1c:4f:f6:a4:65:f8:1d:44:dc:e3:1d:75:
                    89:f2:7a:bf:ed:a0:61:51:44:c3:c1:3a:7d:ff:c7:
                    5e:86:5c:53:01:b2:3a:d7:56:eb:45:45:1d:95:71:
                    87:e8:70:38:70:48:29:2d:82:47:e0:da:1f:73:02:
                    3a:57:be:b7:23:5f:e4:57:3b:a7:f1:a1:bb:be:32:
                    aa:c1:58:d2:fa:34:98:ca:a6:ca:16:0a:5a:15:13:
                    27:42:d9:a1:ab:c7:5a:13:9d:8f:e5:8b:7e:a5:96:
                    da:bf:3f:39:e9:4b:1a:67:a0:f4:1a:21:0b:f2:30:
                    20:29:d6:9c:91:cc:0f:1c:61:aa:2c:2b:00:1d:c3:
                    2a:1f:8e:88:44:cc:2d:28:b4:96:05:5b:b6:66:9c:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:84:F2:B2:7F:9E:2E:76:78:06:9D:7B:D3:38:86:57:9A:97:96
            X509v3 Authority Key Identifier:
                keyid:D0:37:03:75:0E:B0:40:20:54:8D:BE:DA:6A:85:AD:45:C4:E1:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3310::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:8e:04:c6:10:cb:f3:06:b1:f7:e6:a8:33:70:ce:d3:bd:
         29:9a:e6:9e:a4:ee:64:f6:00:1a:51:5e:b5:a9:fc:7d:72:1b:
         90:4e:a6:19:ab:be:0f:32:1b:dc:a4:8f:1d:d0:32:46:fd:65:
         96:dc:fe:f9:e4:7d:89:10:bb:06:30:ab:d3:42:ee:da:3b:dc:
         6a:cf:8c:2b:2d:4a:39:5e:2a:9d:3b:ea:0b:c7:d0:01:86:87:
         bb:b6:8e:b2:44:0e:da:f1:1f:5e:5f:93:a7:c6:e9:14:8b:65:
         22:5f:08:78:c4:ad:61:88:79:cf:1b:32:ce:b2:9a:2c:3b:a9:
         00:72:b3:ed:23:d8:a0:46:16:74:8d:56:93:87:f4:d2:d7:b8:
         ed:e3:b2:4d:13:a9:15:51:16:c8:e8:41:10:2e:4f:99:74:6d:
         c1:45:21:e1:44:c6:14:9f:36:cb:47:1d:41:e1:22:3a:2e:41:
         54:a9:f9:f9:83:61:18:04:1a:17:63:cd:a3:23:e1:7a:cb:1b:
         41:a1:a2:5c:a6:fc:f8:56:61:0e:1f:cd:77:0f:24:f9:13:ee:
         6f:5d:58:fe:84:01:b6:df:5d:92:72:1a:d8:93:a9:c5:da:bb:
         2f:dc:cf:3b:bf:7e:9e:76:b9:f2:55:b6:de:da:8f:a0:0d:f2:
         80:52:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:20 2026 by rpki-client