Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          9wnMZjSDG8PG7+MrdJTq20ibyMu1L9C4TqxoUjKQ5Qw=
Subject key identifier:   8D:7F:CB:F9:53:5A:E5:45:A7:B3:E1:D1:9A:98:46:AC:7D:97:DD:81
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       062C958B78C862A27BAE219767CCB7B99A745227
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 06 Jan 2026 19:23:52 +0000
ROA not before:           Tue 06 Jan 2026 19:18:52 +0000
ROA not after:            Tue 05 Jan 2027 19:23:52 +0000
asID:                     61508
IP address blocks:        2803:f240:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 10:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2c:95:8b:78:c8:62:a2:7b:ae:21:97:67:cc:b7:b9:9a:74:52:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Jan  6 19:18:52 2026 GMT
            Not After : Jan  5 19:23:52 2027 GMT
        Subject: CN=8D7FCBF9535AE545A7B3E1D19A9846AC7D97DD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:44:34:98:22:3b:88:3f:b6:a7:fa:df:9e:
                    b1:ec:9d:e3:f4:1f:e9:ae:3f:2e:a5:06:fa:0a:39:
                    e0:f5:9e:fd:fa:f8:c2:b8:49:b6:5c:9c:8d:cd:54:
                    0f:ae:2e:74:02:1d:4f:0f:5b:7a:5b:41:c5:62:13:
                    5c:f4:bf:fe:00:d9:bc:26:20:c1:c9:51:aa:9d:3b:
                    82:4b:28:dc:31:3b:35:8e:d3:cf:b5:55:97:bd:81:
                    7a:81:a9:f3:c4:42:0c:09:48:b4:ca:f4:4d:88:34:
                    e7:db:0a:a0:b8:f4:51:71:76:0a:de:f0:94:66:f0:
                    38:be:e0:dc:c7:e8:c1:00:6b:3c:67:f9:05:03:ed:
                    14:52:17:e0:40:a2:48:6c:49:1d:a2:88:99:f7:e9:
                    7f:68:1e:f2:aa:74:d5:e2:c1:a2:95:1a:bb:d8:82:
                    7b:8e:1d:22:d4:0f:dd:84:ed:a6:fe:d2:39:87:90:
                    d3:40:81:a5:f5:7a:1a:e4:98:80:1f:95:a0:c5:66:
                    f9:e6:08:22:f9:ee:df:2b:f7:17:b7:e2:c8:df:bc:
                    41:53:03:18:6d:06:29:13:6c:1a:d2:9c:aa:8d:6c:
                    27:38:72:2f:c3:ba:9a:d8:a6:e0:aa:41:06:3d:0a:
                    36:5a:fc:66:27:8b:ed:2b:28:b2:ce:e6:5c:9e:25:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:CB:F9:53:5A:E5:45:A7:B3:E1:D1:9A:98:46:AC:7D:97:DD:81
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:6d:75:13:27:57:06:be:f9:7f:a5:10:5e:66:4d:35:9a:
         60:47:e5:a5:d0:5f:d2:31:0d:d0:44:ae:7b:8e:ff:08:35:73:
         93:e8:06:91:27:4f:c8:05:99:d9:18:e4:c9:3d:f8:db:64:44:
         e2:0c:dd:f4:5b:20:c5:9d:1c:53:a4:6f:3e:f1:f9:26:20:08:
         b0:0d:24:ec:52:f2:58:71:dc:50:de:db:a4:d8:f3:58:03:b7:
         31:fc:e3:e5:c1:ce:cb:2b:3d:84:26:62:65:ec:a5:7c:2b:b8:
         94:f3:a8:56:86:a6:fb:95:80:2f:6f:da:a8:74:a9:9c:ea:39:
         7b:69:4f:39:13:a4:13:a3:e4:b2:5c:e6:d1:6d:a7:40:7b:01:
         ea:e0:07:01:87:5a:a2:e0:75:51:4e:a0:1b:19:6e:d5:f9:e7:
         1c:98:f3:a7:c7:dd:b3:4b:5b:9f:f0:59:6b:39:1a:13:5f:ae:
         35:ed:e9:c6:7b:2c:de:80:fd:10:05:b8:f5:53:a3:f5:b2:c4:
         e8:7b:5c:8e:0c:27:16:cf:15:f0:22:52:f4:2e:36:64:bb:16:
         f8:30:c7:49:a0:c1:60:52:2f:cb:76:e0:f9:63:f6:e0:51:96:
         09:0e:27:3b:fe:9d:18:7c:f1:b5:52:65:bf:7c:fb:bf:2f:1c:
         34:33:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:44 2026 by rpki-client