Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa
File:                     323830333a646665303a3a2f33322d3332203d3e20323731373838.roa (raw, json)
Hash identifier:          51SB7VsMhruTzpZMViGJFD/EfPk52vM2cB12gE/U6RQ=
Subject key identifier:   B2:7D:7C:FD:08:58:F3:68:A7:D0:94:3D:FD:F7:70:15:C6:F2:49:58
Certificate issuer:       /CN=5F40B9CED062636E3A0E33A28926696C25163A04
Certificate serial:       1FDB2C9F46866508AB3D9CC550FA0EA5BEB717E6
Authority key identifier: 5F:40:B9:CE:D0:62:63:6E:3A:0E:33:A2:89:26:69:6C:25:16:3A:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F40B9CED062636E3A0E33A28926696C25163A04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa
Signing time:             Tue 06 Jan 2026 18:58:46 +0000
ROA not before:           Tue 06 Jan 2026 18:53:46 +0000
ROA not after:            Tue 05 Jan 2027 18:58:46 +0000
asID:                     271788
IP address blocks:        2803:dfe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/5F40B9CED062636E3A0E33A28926696C25163A04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/5F40B9CED062636E3A0E33A28926696C25163A04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F40B9CED062636E3A0E33A28926696C25163A04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:db:2c:9f:46:86:65:08:ab:3d:9c:c5:50:fa:0e:a5:be:b7:17:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F40B9CED062636E3A0E33A28926696C25163A04
        Validity
            Not Before: Jan  6 18:53:46 2026 GMT
            Not After : Jan  5 18:58:46 2027 GMT
        Subject: CN=B27D7CFD0858F368A7D0943DFDF77015C6F24958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:90:10:60:16:c4:24:e2:ec:d4:28:a1:49:22:
                    cc:d7:cc:10:70:24:79:46:e8:3f:c3:a5:fe:d8:e1:
                    a1:90:a1:00:2d:22:87:50:ba:10:2f:a8:e1:2c:d8:
                    2f:60:be:fb:ac:10:f5:f1:62:6f:6e:b5:b7:9b:8b:
                    ea:40:8e:65:25:f5:51:a2:0b:40:4c:d2:45:a6:94:
                    4d:ba:d2:a3:96:bf:6f:0b:cb:3f:b9:2e:6c:37:62:
                    1a:9f:b3:01:ab:70:f1:1d:85:94:29:79:d5:7b:d7:
                    5e:37:e4:c7:b6:66:90:78:88:22:7e:88:c8:e9:ae:
                    d2:bd:c2:e3:0b:60:0d:cd:59:7d:b5:3e:cb:b8:48:
                    63:bc:ce:6a:8d:8d:9b:ec:33:47:2d:e9:5a:32:f0:
                    59:55:69:a5:e1:b5:7e:40:ef:2d:fa:1c:f6:21:53:
                    56:a0:5f:da:dc:be:5e:0c:f8:8d:b2:b9:00:28:da:
                    80:45:66:b8:05:bc:50:9d:62:27:fb:a2:71:4c:c8:
                    f4:2a:db:aa:93:fe:2e:d1:a7:e7:4c:82:8c:a3:04:
                    4e:d2:c3:79:8a:d0:9f:4f:db:5f:22:a2:26:70:1b:
                    be:4b:4d:94:f4:9f:ad:94:bd:86:3a:e7:c8:67:71:
                    ac:15:0c:04:66:1f:f1:42:70:96:91:61:5f:e7:04:
                    16:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:7C:FD:08:58:F3:68:A7:D0:94:3D:FD:F7:70:15:C6:F2:49:58
            X509v3 Authority Key Identifier:
                keyid:5F:40:B9:CE:D0:62:63:6E:3A:0E:33:A2:89:26:69:6C:25:16:3A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/5F40B9CED062636E3A0E33A28926696C25163A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F40B9CED062636E3A0E33A28926696C25163A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:4a:6e:a3:a0:06:89:47:2a:e6:57:52:69:db:b7:ef:cf:
         3d:b2:6f:ff:8b:4d:3f:29:ce:49:6b:64:cf:f3:d7:48:84:96:
         53:e0:aa:99:d6:ce:cc:d8:de:3e:40:c0:c1:10:6f:7d:b8:37:
         b5:81:3c:1b:de:84:44:d0:84:b6:55:4d:83:64:9c:cc:3d:c6:
         ef:15:c5:fa:b6:d7:a3:cc:26:f1:b8:d4:b3:24:0b:54:ee:fa:
         ca:4c:25:9c:02:2e:46:95:aa:f2:07:e3:49:6c:4f:3d:1a:45:
         bf:78:da:84:fe:79:87:12:13:d0:56:83:af:da:f1:d9:06:d1:
         d7:06:86:e2:20:d5:f1:87:5d:f7:ab:36:e6:d9:d1:9e:06:f5:
         ca:55:4a:42:7f:1b:89:19:8c:3d:b4:8d:6d:e0:f5:92:05:9e:
         c4:ce:fc:92:5d:d0:be:64:a9:dc:3d:1e:86:c0:d9:28:68:02:
         98:89:7c:d9:e6:77:eb:1b:47:5d:40:76:81:18:0c:cf:57:40:
         ab:ea:e4:55:de:82:6b:78:c7:cc:08:29:b7:b7:9c:64:60:27:
         df:d2:e6:bb:d8:ff:6b:73:3c:2f:15:0c:e0:b9:49:87:81:a8:
         9f:61:1f:44:23:51:3a:5f:31:9c:b3:e8:2a:7c:11:c7:76:56:
         70:a4:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:58 2026 by rpki-client