Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa
File:                     323830333a666135303a3a2f33322d3438203d3e20323733313931.roa (raw, json)
Hash identifier:          to97vKjaXGGyWmbDezBjSwf0g9SoomoX9hDM/NEdox4=
Subject key identifier:   E1:31:27:4D:D5:CB:B8:E5:F1:42:41:7F:37:F1:50:2F:96:43:78:53
Certificate issuer:       /CN=A6F541BCC9A324941892CFCEF5F26D014398ABCF
Certificate serial:       14BC5F46F9465D5006494279F2B56EE4E64025F3
Authority key identifier: A6:F5:41:BC:C9:A3:24:94:18:92:CF:CE:F5:F2:6D:01:43:98:AB:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa
Signing time:             Tue 20 Jan 2026 21:26:24 +0000
ROA not before:           Tue 20 Jan 2026 21:21:24 +0000
ROA not after:            Tue 19 Jan 2027 21:26:24 +0000
asID:                     273191
IP address blocks:        2803:fa50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:5f:46:f9:46:5d:50:06:49:42:79:f2:b5:6e:e4:e6:40:25:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F541BCC9A324941892CFCEF5F26D014398ABCF
        Validity
            Not Before: Jan 20 21:21:24 2026 GMT
            Not After : Jan 19 21:26:24 2027 GMT
        Subject: CN=E131274DD5CBB8E5F142417F37F1502F96437853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:34:8c:d8:c3:05:fb:6d:0f:83:0c:8e:02:
                    8c:09:7c:df:4b:9c:e8:dc:05:87:3c:c5:2c:bb:99:
                    cb:2c:38:a4:44:de:08:61:90:77:ec:37:6c:6f:bb:
                    28:77:2a:84:e5:90:ec:20:06:71:11:d9:10:40:15:
                    5e:5f:74:78:31:3e:1a:4a:3e:b4:48:27:3e:13:98:
                    dc:fc:3f:27:a6:64:3a:cd:fa:c7:a6:7d:17:40:33:
                    c9:0a:c1:9e:bf:c1:28:59:ee:9e:13:5c:67:f0:10:
                    c9:d0:78:bd:6e:56:58:88:c9:d8:ba:1e:c1:83:f2:
                    fe:97:d6:4b:c8:e4:6d:51:45:48:65:b6:82:34:1b:
                    3d:0c:59:1a:a9:a5:12:5d:0c:74:e1:6e:2d:5a:80:
                    92:bd:9d:b7:0e:cc:fb:86:f6:9b:29:2c:8c:8a:89:
                    ae:61:31:cd:04:1e:3c:69:dd:91:75:21:d7:a7:91:
                    9d:cd:4e:76:69:fc:11:18:ca:95:84:b8:06:d3:12:
                    42:94:63:86:24:4b:21:9d:46:d2:e0:43:74:04:a1:
                    e4:0c:60:25:7f:c1:0a:a7:54:5f:b3:b4:f7:b0:19:
                    aa:57:1b:16:b6:12:49:97:a9:72:2c:88:53:9d:27:
                    83:60:c5:4e:e3:f3:ba:c2:f2:f5:74:35:f5:d5:d9:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:27:4D:D5:CB:B8:E5:F1:42:41:7F:37:F1:50:2F:96:43:78:53
            X509v3 Authority Key Identifier:
                keyid:A6:F5:41:BC:C9:A3:24:94:18:92:CF:CE:F5:F2:6D:01:43:98:AB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:7b:54:33:e4:be:e7:1d:77:97:4b:c1:9d:00:a9:12:3f:
         ed:cb:7e:9d:27:b1:d7:c3:6b:df:b7:18:e4:f4:04:fe:a5:57:
         d7:be:7f:d4:4d:e7:e0:fb:f6:73:5c:68:02:59:be:60:1c:e3:
         4c:4c:f8:82:04:ed:b3:69:66:d7:f3:46:32:41:e4:ad:e6:2a:
         b4:2d:c7:53:5e:6d:0b:06:de:15:6e:70:06:8d:16:a0:07:d3:
         a7:a5:68:3b:87:74:49:ce:0e:27:8f:4d:71:8d:01:c5:19:59:
         7e:3b:fa:9a:72:90:d1:49:aa:3e:ad:03:d8:f1:71:af:25:81:
         7a:20:0a:bd:b3:3c:05:9d:67:9b:96:7c:ff:f6:f4:83:16:a0:
         94:41:0d:c0:d6:f4:c9:51:49:61:25:80:9d:13:59:e5:fc:bb:
         b7:bf:c1:6b:1b:c1:6b:0f:dc:81:c3:cb:63:27:26:c5:90:e3:
         ca:d0:6d:f5:10:b0:b8:18:03:42:bf:cf:9b:4c:ff:2e:13:d4:
         13:ec:73:6a:c1:fb:f1:07:72:a9:93:81:a7:3e:94:e2:78:e4:
         2e:2a:91:03:2d:1a:4b:62:68:d4:d4:9b:c4:9c:70:7e:3d:40:
         57:5f:8d:98:5c:e5:39:e4:54:2b:97:a1:30:b2:bf:0d:e2:81:
         be:63:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:16 2026 by rpki-client