Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          +AnAlXcMtpMKxOwZaNmUkuzAvhRlmLT4odrMTHfxqgE=
Subject key identifier:   01:E0:0C:54:B8:13:5C:A7:63:FE:9D:55:9C:ED:FC:F2:4B:1C:48:40
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       5EA92368F499FAFD9012C9ED67754B1DB8810A44
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 06 Jan 2026 19:23:48 +0000
ROA not before:           Tue 06 Jan 2026 19:18:48 +0000
ROA not after:            Tue 05 Jan 2027 19:23:48 +0000
asID:                     61508
IP address blocks:        2803:f240:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 10:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a9:23:68:f4:99:fa:fd:90:12:c9:ed:67:75:4b:1d:b8:81:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Jan  6 19:18:48 2026 GMT
            Not After : Jan  5 19:23:48 2027 GMT
        Subject: CN=01E00C54B8135CA763FE9D559CEDFCF24B1C4840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:82:01:a3:e9:f6:28:8b:ad:fe:f5:2c:e8:
                    3a:6c:26:89:a1:bd:18:8d:bc:48:26:b3:7d:75:56:
                    c2:03:27:c2:f8:3c:23:56:75:1d:6e:11:f4:85:ef:
                    b0:ed:d0:b8:a6:42:b3:f8:b2:4f:c2:60:ce:3d:d6:
                    98:b6:15:80:d2:af:52:89:c2:cf:74:e7:c9:47:0d:
                    f8:0f:51:85:e7:b3:16:5e:04:e7:0e:18:bb:6d:96:
                    33:8e:7a:1f:8e:c1:c6:6e:66:4a:9b:bf:ea:83:18:
                    8b:4b:91:f3:69:e6:d0:0b:2d:c2:2d:9a:77:1b:ff:
                    2c:63:48:8d:a1:a2:11:93:41:01:72:c2:2a:c2:c0:
                    62:e1:77:da:2e:8e:a5:be:e8:89:08:d8:74:d7:61:
                    3f:4d:14:de:c0:05:55:a1:e2:73:b6:31:96:8c:e7:
                    ce:d2:14:5c:d8:17:f9:09:d8:89:7b:e8:01:f6:fa:
                    b1:b8:d0:68:84:45:b1:9f:ed:52:d0:63:5b:f7:c3:
                    ba:96:34:89:7d:de:db:59:15:cc:c6:df:ac:bd:f9:
                    4c:df:8d:a2:3c:18:34:79:56:9a:9b:bc:1d:41:0f:
                    5f:1d:dd:80:2e:8a:74:23:6a:0e:7c:1b:f8:1e:ef:
                    6d:4f:de:8d:94:b2:0b:fe:d6:73:0d:58:98:d3:53:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:0C:54:B8:13:5C:A7:63:FE:9D:55:9C:ED:FC:F2:4B:1C:48:40
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:5f:c3:2b:b7:bb:61:ad:57:9f:9a:ce:5a:24:7b:1d:9f:
         7a:db:34:9e:ef:0c:d3:a3:cc:dd:07:18:b2:a1:f2:ec:3e:2c:
         fb:aa:ac:68:d9:a5:0a:ef:35:60:b5:fb:07:48:76:09:5a:fe:
         f1:93:46:85:7d:47:32:a5:6a:07:02:00:33:9b:94:d9:87:13:
         f5:d6:a1:6c:a0:6d:fb:d1:0d:94:f5:ad:68:90:32:8d:b4:6b:
         2c:2b:19:05:62:9b:1a:3c:15:46:11:02:59:33:98:78:89:ef:
         27:75:a7:cf:f4:d0:46:80:0c:5e:74:59:89:0c:1c:4c:4f:12:
         25:a9:4e:30:a3:7c:4f:ea:e2:20:e6:bc:b7:e4:a7:f3:1e:0b:
         91:08:e0:a7:12:cc:c6:20:a1:8e:84:89:6d:a8:27:72:5e:07:
         2e:da:58:5d:3d:14:71:eb:dc:07:9f:c0:ae:73:ca:0b:9a:41:
         af:5b:30:4d:7f:dc:97:ee:cb:71:af:5a:ad:15:3f:91:22:b2:
         a7:cf:4b:65:ce:1e:40:47:32:78:dc:cf:87:51:ae:44:1c:de:
         20:99:6b:36:eb:44:3b:ae:90:6a:05:bb:d0:ff:a5:4b:65:0b:
         c7:1b:da:7f:cd:c6:0e:64:1c:9d:e8:c6:f3:a1:ba:b5:0e:c1:
         a1:c7:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:27 2026 by rpki-client