Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa
File:                     323830333a366365303a3a2f33322d3438203d3e20323639393039.roa (raw, json)
Hash identifier:          DdCw9ndbBwWnKB11QNuYElFC1yiUmtGvn/P49tnq/ks=
Subject key identifier:   DE:F0:B7:27:D8:7B:2A:8E:6D:F8:90:43:63:CF:E2:D2:73:8A:F8:00
Certificate issuer:       /CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
Certificate serial:       7E8A7D3E3ACDFD79D62C19534C295D5D43A00D45
Authority key identifier: 39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa
Signing time:             Tue 06 Jan 2026 19:39:43 +0000
ROA not before:           Tue 06 Jan 2026 19:34:43 +0000
ROA not after:            Tue 05 Jan 2027 19:39:43 +0000
asID:                     269909
IP address blocks:        2803:6ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 20:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8a:7d:3e:3a:cd:fd:79:d6:2c:19:53:4c:29:5d:5d:43:a0:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
        Validity
            Not Before: Jan  6 19:34:43 2026 GMT
            Not After : Jan  5 19:39:43 2027 GMT
        Subject: CN=DEF0B727D87B2A8E6DF8904363CFE2D2738AF800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:de:07:78:fd:59:74:33:8f:fc:e6:14:5e:
                    59:2d:c9:ca:3b:6e:f6:40:0e:ed:a7:0a:39:4e:4d:
                    b5:10:e5:8c:35:8e:0f:51:64:3a:1c:b1:bb:ab:e3:
                    11:9c:91:e3:89:d6:31:db:05:9d:3a:bd:96:3d:79:
                    93:5c:81:47:b2:d9:be:d4:df:7b:03:93:3a:51:81:
                    c1:c6:54:a2:4c:9e:21:fa:b5:a4:8d:da:9f:1b:76:
                    3b:fc:40:f1:33:d9:e0:95:bf:50:28:51:a0:00:f3:
                    a6:28:12:b1:a6:e8:c1:ec:cc:88:aa:7a:a7:3c:e7:
                    85:4a:fb:5c:93:f0:27:89:39:f8:9b:38:d4:f9:f3:
                    08:dd:0e:87:f5:4e:ee:4a:be:ab:d2:be:0e:bf:a7:
                    88:16:9d:e9:e7:e5:77:03:8f:dc:ee:01:47:19:1f:
                    d1:b6:b0:7e:24:04:75:29:51:bc:0d:bd:bb:48:8a:
                    47:ff:5c:10:6e:0f:95:c4:ee:55:30:0a:7f:e9:ae:
                    33:cb:d9:a9:e8:14:e5:ff:97:13:98:bc:0c:46:ad:
                    78:37:9b:28:db:1a:98:6e:3c:98:58:22:09:af:38:
                    61:39:8e:c1:a5:39:4a:fa:29:57:2f:b0:d8:09:84:
                    06:15:10:e2:4d:19:fd:f8:c9:8d:8a:a5:9b:d0:a5:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F0:B7:27:D8:7B:2A:8E:6D:F8:90:43:63:CF:E2:D2:73:8A:F8:00
            X509v3 Authority Key Identifier:
                keyid:39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:c5:f5:d0:20:61:19:2d:8a:15:35:08:8b:8e:4d:27:a9:
         4f:4e:5f:1d:b8:cc:d8:5a:f4:56:e4:94:9d:01:f5:2b:8c:0a:
         7e:05:1e:f6:c5:99:e1:c4:e9:a9:df:ba:f0:84:2c:0c:0c:c5:
         00:e3:34:32:5a:1c:1c:29:d8:37:34:48:d4:3f:65:91:b7:9b:
         81:00:0c:4c:f9:cb:f5:30:03:1c:72:78:bd:a3:82:95:ae:ce:
         b9:bd:12:70:47:cf:79:68:15:21:44:c6:3c:bc:77:06:44:3a:
         ef:be:00:32:96:8c:61:b9:a3:48:b6:e6:f4:6f:60:16:6b:82:
         d1:46:ba:af:54:6f:e3:ef:0c:6e:42:a5:fe:4a:d1:1f:ec:6f:
         76:ac:cc:52:27:a3:00:41:33:5d:80:c8:ac:c9:93:69:af:56:
         d7:4a:0a:ff:65:90:9b:3b:12:fb:17:b0:f9:a8:78:84:2e:68:
         10:e8:ac:a5:ba:67:15:9d:44:66:06:ab:86:3d:7c:6a:c2:73:
         d9:2a:ac:3b:d0:ff:e3:3c:5f:28:f2:83:1b:82:7f:00:93:b0:
         8f:dd:95:fa:68:94:9b:7e:4e:6f:69:87:66:96:0b:e2:9f:13:
         76:38:c0:9c:b0:64:c2:89:a8:38:59:03:30:93:d5:b7:90:c4:
         c7:9e:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:47 2026 by rpki-client