Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
File:                     323830363a3365653a3a2f33322d3438203d3e20323730313734.roa (raw, json)
Hash identifier:          hx2Rmq3PJIO2CvI2ItXEe9m14K/OKMKb6gGPrDRNyXM=
Subject key identifier:   93:30:71:DD:2C:EE:E8:F3:20:21:81:FB:CD:A5:0D:B3:57:8E:6F:72
Certificate issuer:       /CN=5562ACA50E5F7263782A622F5FA3929390EAC355
Certificate serial:       1F21E8E6CCF39BD6474723E9684B711524CEB0C8
Authority key identifier: 55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
Signing time:             Tue 06 Jan 2026 19:39:34 +0000
ROA not before:           Tue 06 Jan 2026 19:34:34 +0000
ROA not after:            Tue 05 Jan 2027 19:39:34 +0000
asID:                     270174
IP address blocks:        2806:3ee::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:21:e8:e6:cc:f3:9b:d6:47:47:23:e9:68:4b:71:15:24:ce:b0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5562ACA50E5F7263782A622F5FA3929390EAC355
        Validity
            Not Before: Jan  6 19:34:34 2026 GMT
            Not After : Jan  5 19:39:34 2027 GMT
        Subject: CN=933071DD2CEEE8F3202181FBCDA50DB3578E6F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:01:28:72:6a:5a:28:2e:41:4b:a5:e1:6f:
                    dd:ff:c6:ee:4f:6b:2d:7a:e9:b6:d6:7e:18:f8:7c:
                    13:27:2e:37:23:3d:e9:8e:93:99:5e:4a:11:73:45:
                    10:b3:cf:99:90:f7:ac:6e:e5:57:64:17:43:77:b5:
                    89:0e:99:ca:be:27:99:32:60:48:b2:49:2c:b2:75:
                    29:e7:cd:2c:37:d4:ac:0d:c9:57:11:c7:65:f3:e7:
                    c9:cf:41:69:77:72:ee:b4:8e:f9:48:33:d9:e5:2a:
                    67:4c:f9:c6:26:10:75:5e:72:3c:7f:f4:68:84:9a:
                    54:ed:47:0d:90:2d:ad:32:71:3d:86:b3:d2:0e:78:
                    b5:52:c9:f2:06:c0:f9:31:8f:05:51:98:06:de:7a:
                    af:cc:c9:61:b2:32:a1:6d:14:14:11:41:49:87:ff:
                    3c:c4:5f:f4:31:df:69:eb:0f:09:30:dc:eb:cf:4b:
                    5e:68:08:b8:ac:9f:7d:74:86:fb:10:5a:28:78:66:
                    e6:70:98:b5:f6:c9:3a:f3:86:b8:e7:df:3f:ff:22:
                    57:14:fe:e0:80:28:3e:2f:c6:40:5d:ce:8b:2b:96:
                    88:ea:70:e0:3e:f4:ef:84:2a:1e:e4:50:64:77:67:
                    d1:9c:fa:78:e4:ef:b4:9c:fa:28:8f:58:9d:6a:ed:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:71:DD:2C:EE:E8:F3:20:21:81:FB:CD:A5:0D:B3:57:8E:6F:72
            X509v3 Authority Key Identifier:
                keyid:55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:3b:53:98:1c:3f:a3:ca:03:19:ae:a0:7b:2f:6a:33:cb:
         05:ae:62:4b:07:1d:8b:0b:bb:71:ea:28:a5:7e:d9:ee:4e:d3:
         43:c2:b0:93:9a:5a:cf:8a:48:cf:76:2c:f3:ac:88:a3:b5:24:
         c7:ac:a9:28:61:6f:10:91:01:76:69:b7:38:10:0d:0b:af:7f:
         f3:39:de:74:f8:02:90:03:ad:98:14:ff:14:32:d2:cc:2b:8a:
         7b:eb:dd:d7:03:8f:42:68:d8:3f:01:df:32:98:42:45:59:d6:
         7a:79:a0:60:3b:d9:70:a1:7d:48:b5:71:d9:64:c8:6e:a9:c5:
         5d:38:63:cb:da:f4:d4:f9:1e:aa:0d:f2:87:3a:fc:1a:1c:2e:
         77:5c:aa:d1:46:6e:6a:e4:60:20:28:30:e6:af:df:e0:14:b8:
         57:39:37:54:a5:57:ee:6b:6a:09:1b:6b:d8:ab:cf:67:07:6b:
         11:76:7f:4c:8f:23:2d:b6:e2:b7:e8:10:3d:32:43:98:01:9e:
         e2:15:01:29:1b:57:8e:1a:c0:d4:e8:58:a5:e7:65:4a:a0:a6:
         e4:d8:fd:13:e8:20:86:72:4a:f2:5b:97:db:b0:f3:03:b0:96:
         25:89:b9:fe:ed:c8:b0:32:bb:e7:5a:2a:24:45:50:a9:0f:63:
         cd:1e:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:51 2026 by rpki-client