Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa
File:                     323830333a343161303a3a2f33332d3335203d3e20323637363931.roa (raw, json)
Hash identifier:          SSH8Rc6cRgTbbTCnqjfeKlrt915ijU5WcAj42zJyixI=
Subject key identifier:   9B:8A:96:9D:C9:CC:E7:E0:2D:C8:0A:CA:70:BB:23:B0:45:32:0A:D8
Certificate issuer:       /CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
Certificate serial:       651FF9A154BF6D3805EBE6C5FEA72DE1FDF89488
Authority key identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa
Signing time:             Tue 06 Jan 2026 18:58:20 +0000
ROA not before:           Tue 06 Jan 2026 18:53:20 +0000
ROA not after:            Tue 05 Jan 2027 18:58:20 +0000
asID:                     267691
IP address blocks:        2803:41a0::/33 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1f:f9:a1:54:bf:6d:38:05:eb:e6:c5:fe:a7:2d:e1:fd:f8:94:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
        Validity
            Not Before: Jan  6 18:53:20 2026 GMT
            Not After : Jan  5 18:58:20 2027 GMT
        Subject: CN=9B8A969DC9CCE7E02DC80ACA70BB23B045320AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:df:98:c6:b9:cb:64:f7:c9:f3:bd:1f:79:
                    61:d0:77:b8:9b:f1:ed:61:4e:2b:d9:4c:3a:27:22:
                    51:52:98:a0:22:aa:3e:a8:d8:87:08:4a:7d:c7:07:
                    3b:ec:5b:ab:27:69:dd:cd:5f:e1:19:2a:7f:6d:12:
                    89:05:ac:9a:10:a9:f8:ea:e0:91:bb:4e:99:ca:dc:
                    4e:07:49:75:24:73:c5:70:b1:83:03:47:cd:be:a3:
                    76:39:a6:34:c2:7e:71:84:1e:3f:01:ae:dc:8f:47:
                    cf:9e:6b:c1:b6:e2:a8:68:73:4b:b9:86:ea:4b:3c:
                    5f:39:cd:c7:92:29:be:21:2c:71:39:9f:58:7b:6d:
                    66:62:cc:98:3c:2d:97:96:41:c4:81:0b:bc:e3:0d:
                    c5:e6:53:3f:8a:9c:26:70:9f:bd:25:c0:8a:9f:33:
                    70:c6:9e:fe:65:58:fe:b8:a2:af:63:80:7f:57:10:
                    07:8a:49:07:47:4d:05:60:d8:95:84:4d:67:59:39:
                    97:d5:f6:73:25:0e:d3:15:3d:17:24:ef:46:f5:cc:
                    a8:3c:46:07:5f:df:22:17:6f:2f:e0:7e:40:18:41:
                    90:5c:32:71:f2:a9:9e:bc:88:aa:09:1d:19:a9:34:
                    37:c7:6f:c7:6c:18:7c:6d:c2:79:76:92:80:10:c9:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8A:96:9D:C9:CC:E7:E0:2D:C8:0A:CA:70:BB:23:B0:45:32:0A:D8
            X509v3 Authority Key Identifier:
                keyid:64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:41a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:48:d3:a2:a6:11:dc:5b:7a:67:2d:1d:7f:f4:31:30:ba:0c:
         56:ce:0f:af:94:b1:45:b1:72:9b:18:a2:9c:e2:0d:ed:68:3c:
         81:29:71:5b:36:ca:e9:e8:fc:a3:3d:1d:5f:e8:1a:c2:04:35:
         d3:00:18:36:48:e5:7e:a8:19:ba:52:b6:55:13:79:df:60:de:
         5a:78:f9:c2:03:d3:32:b2:80:c6:a2:8f:73:3c:e3:19:6b:18:
         36:34:57:22:d1:ab:50:a2:a1:b8:ae:ca:74:30:06:82:30:47:
         16:21:93:41:78:60:f8:9f:35:d7:64:42:aa:75:70:fd:c5:2b:
         36:67:29:d6:99:a7:ad:6b:a8:58:c9:ef:05:50:69:ac:4e:cb:
         a5:37:81:28:80:76:a4:96:ae:ab:23:cc:14:f0:66:57:e8:70:
         10:f1:0a:b9:83:4c:b4:4f:45:39:1e:5e:4f:22:8e:a0:02:c0:
         81:cb:6a:2d:1f:23:02:cf:10:10:70:42:99:1d:b8:df:19:56:
         6d:ec:99:77:8d:07:2f:a2:a1:42:30:45:58:d8:55:e0:56:22:
         78:ca:ad:ab:2a:12:3d:b9:52:78:e5:84:40:28:ca:70:54:3f:
         ab:12:7c:73:80:9f:f4:7c:d6:3c:6f:6b:62:75:ef:8c:03:bf:
         31:19:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:06:52 2026 by rpki-client