Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa
File:                     323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (raw, json)
Hash identifier:          6W30v71+Q/cDoOQkzZgwqg4WKTw1SznmyVBjWAwbXiQ=
Subject key identifier:   D0:30:97:78:62:26:25:32:F4:E3:A9:9A:0E:DB:52:4C:22:E3:F0:33
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       54D1D6E1C4EC1E10689C1E0DE1CA3BC3F7F2C619
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa
Signing time:             Tue 06 Jan 2026 19:38:47 +0000
ROA not before:           Tue 06 Jan 2026 19:33:47 +0000
ROA not after:            Tue 05 Jan 2027 19:38:47 +0000
asID:                     270173
IP address blocks:        2806:30c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d1:d6:e1:c4:ec:1e:10:68:9c:1e:0d:e1:ca:3b:c3:f7:f2:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Jan  6 19:33:47 2026 GMT
            Not After : Jan  5 19:38:47 2027 GMT
        Subject: CN=D030977862262532F4E3A99A0EDB524C22E3F033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:ea:a8:d9:2c:8b:37:2e:08:32:95:52:1f:
                    94:b8:51:65:bc:e4:42:3d:14:a8:a6:86:a0:bd:30:
                    e9:8e:76:f5:99:cb:8c:ce:3a:2f:6f:df:5d:50:7a:
                    6e:07:f0:82:e9:80:5e:9e:1f:e9:ec:46:67:ff:0f:
                    9c:4a:4c:0f:05:97:19:75:0e:1a:77:9e:e4:4a:12:
                    c1:e7:0e:8d:ff:c6:b1:1c:c2:e7:f5:5f:b2:1b:a6:
                    79:f1:98:bb:d4:91:44:2c:ea:99:14:73:b9:22:0c:
                    60:78:b4:10:17:b8:9e:83:ea:56:b1:88:a1:0e:d2:
                    31:47:09:f2:97:13:b0:6c:c4:19:15:d9:8d:eb:a2:
                    7a:87:b1:b1:4e:58:1f:03:a9:7a:5e:42:f3:b3:80:
                    1e:8f:91:cd:72:ef:de:c9:71:c2:17:04:6f:c0:bc:
                    ea:ca:fe:71:4e:bb:55:ce:6d:95:0e:44:ca:0f:f1:
                    b6:ee:9d:aa:76:ea:71:08:83:66:6d:37:fd:48:93:
                    d2:bb:67:2a:9f:c7:62:fd:d9:eb:00:8a:1b:d0:fc:
                    b7:ec:05:04:d1:d8:dc:24:4f:ac:2a:37:18:66:31:
                    5b:da:02:95:66:c9:57:bd:fb:97:ad:79:9d:e0:c8:
                    ea:8b:ef:b8:4b:df:82:ce:9d:f8:6b:cd:52:f9:e9:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:97:78:62:26:25:32:F4:E3:A9:9A:0E:DB:52:4C:22:E3:F0:33
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:18:97:36:64:62:2f:b9:29:04:14:d4:c9:d5:dc:da:97:7b:
         b8:74:85:fa:86:95:76:e9:67:d9:52:40:4a:bf:92:30:15:d2:
         c1:4b:a1:75:1a:12:8e:20:41:39:e6:83:a8:47:f3:ef:0a:70:
         23:5e:5b:83:9e:4d:a0:6b:1f:fa:0f:6f:f5:4b:ee:e2:3d:2d:
         cf:7e:70:cb:9d:21:e3:74:a0:a4:50:66:95:a5:91:25:43:da:
         06:f6:fc:e1:cf:d7:33:64:55:97:ff:7b:3f:e0:79:20:f9:9e:
         19:5f:eb:20:82:26:42:fa:0d:8a:d7:03:3d:7a:51:bb:a8:29:
         a8:f8:d6:f6:f2:25:a5:45:ab:41:51:82:83:59:7b:f5:59:5a:
         57:6d:39:48:2e:f9:53:a7:32:e1:b3:9b:d9:86:14:96:9c:d0:
         59:9a:44:e7:7c:2a:44:e4:ea:76:b8:6c:29:e5:66:d9:36:0d:
         09:f3:01:ef:af:01:24:43:a4:26:8b:71:49:ea:65:55:e3:e5:
         ec:91:34:3f:c0:ac:66:32:15:eb:d0:91:0e:e4:30:7d:4f:2f:
         a5:55:4d:ca:f3:7e:57:82:de:01:cf:2a:48:00:38:10:b7:a0:
         3a:13:82:4f:9b:e2:1f:5d:b1:43:ca:48:67:e6:04:b3:97:a8:
         50:37:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:08:54 2026 by rpki-client