Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa
File:                     323830333a623839303a3a2f33322d3332203d3e20323732383130.roa (raw, json)
Hash identifier:          KB63Gwzw+vIJ3S8UR991kpvCW1whvihbxIbH9j5oz8Y=
Subject key identifier:   E2:F9:D8:90:C7:97:47:63:93:85:0B:30:E0:F3:D2:8A:78:A3:22:D5
Certificate issuer:       /CN=5B867361525607203EC4E746C6F22CC6EB34BE67
Certificate serial:       6B424316FEDFD7A231E70590D65F39773B793C2B
Authority key identifier: 5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa
Signing time:             Tue 06 Jan 2026 19:29:55 +0000
ROA not before:           Tue 06 Jan 2026 19:24:55 +0000
ROA not after:            Tue 05 Jan 2027 19:29:55 +0000
asID:                     272810
IP address blocks:        2803:b890::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:42:43:16:fe:df:d7:a2:31:e7:05:90:d6:5f:39:77:3b:79:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B867361525607203EC4E746C6F22CC6EB34BE67
        Validity
            Not Before: Jan  6 19:24:55 2026 GMT
            Not After : Jan  5 19:29:55 2027 GMT
        Subject: CN=E2F9D890C797476393850B30E0F3D28A78A322D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:23:18:4a:34:3a:16:b4:4e:96:41:a4:d4:
                    b9:2d:52:ef:b1:6f:c9:61:48:37:c0:57:50:0b:25:
                    93:c4:1a:1d:36:f0:4b:c2:ce:f7:5e:29:58:98:7f:
                    f4:27:51:fe:6f:e5:48:7d:8e:14:0f:5a:48:9c:16:
                    8f:55:cd:b4:25:c7:ef:18:84:fb:60:83:95:8e:2a:
                    14:77:5b:1c:3a:08:b6:ff:f6:2b:3e:4f:fe:84:9b:
                    57:01:cd:57:d7:1e:5f:72:db:87:da:32:39:c3:50:
                    a4:9d:96:a1:82:60:d7:47:7d:e7:c1:f2:46:2a:8d:
                    7d:93:e0:4d:b6:e9:91:c3:26:53:8d:99:c3:c0:a8:
                    1c:c2:0b:cc:1f:9b:62:54:ab:87:f0:5b:db:38:6a:
                    b6:58:08:20:a1:f6:4c:07:a2:91:07:08:f6:c2:98:
                    7d:00:0f:16:ea:2c:d4:ea:82:a9:c8:64:37:21:15:
                    43:5a:5f:28:c1:dd:56:5c:3d:67:ec:a2:e9:8f:af:
                    bb:dd:34:82:8c:e3:5f:0b:3f:e1:95:33:1f:04:87:
                    bb:92:5e:43:87:fa:e4:d4:f5:47:09:22:f2:1f:5c:
                    86:b8:b8:9f:bf:09:72:98:b0:be:2d:77:97:7e:95:
                    f6:ec:d7:22:e4:1a:6b:5d:4f:c1:ff:0d:cc:57:42:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:D8:90:C7:97:47:63:93:85:0B:30:E0:F3:D2:8A:78:A3:22:D5
            X509v3 Authority Key Identifier:
                keyid:5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b890::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:dc:23:bc:83:99:dd:25:b0:fb:78:8d:15:46:d9:46:e6:dd:
         75:d5:e5:c7:08:a5:78:56:ca:48:e1:5a:8f:50:0f:2f:b4:2d:
         a8:1c:86:e8:a0:33:a9:6e:4d:b8:05:8a:af:12:8a:d9:ed:d3:
         17:30:ba:e0:74:be:7a:06:d7:82:ac:9f:b8:53:a3:92:1e:28:
         a2:c7:79:f0:2b:5e:9b:ff:a8:3f:9c:70:b3:71:c2:8e:6d:5a:
         a8:ba:61:9f:51:98:6b:c9:8b:44:0d:42:51:42:fb:9b:b0:7c:
         e7:22:b4:dc:32:6b:31:54:4c:3f:c1:67:65:f9:07:88:59:1f:
         95:c2:1c:a2:4a:e2:3e:2d:e5:c6:28:2f:55:f6:36:60:0f:31:
         9a:16:6a:e1:8d:03:a6:43:be:87:d0:63:32:f4:88:eb:1c:42:
         7c:dc:d1:e6:f2:02:0d:02:c0:ad:5a:e2:3a:a2:71:ce:c2:a7:
         7f:db:bf:b3:cf:09:18:38:1f:69:de:8c:17:21:ff:d8:69:41:
         d7:69:58:14:d2:5d:55:5b:da:1a:47:0f:05:ed:3b:8a:da:81:
         2b:97:82:fa:db:05:e3:21:30:7c:50:48:23:da:e3:18:26:d2:
         dd:54:fe:43:6e:90:03:6e:6b:dc:d5:33:2e:52:34:54:8c:f5:
         a2:d6:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:50 2026 by rpki-client