Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa
File:                     323830333a633132303a3a2f33322d3332203d3e20323636363535.roa (raw, json)
Hash identifier:          4UaK6AoljFlblDjApgPmigwmzaphokGkvcPXw7iQ9lU=
Subject key identifier:   D1:FF:B4:4B:C9:C6:78:E4:44:AD:97:D0:70:4E:43:07:1E:FE:EB:8B
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       22BD12A3CB871538B6C11094499E08861032E4D2
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa
Signing time:             Tue 06 Jan 2026 19:19:43 +0000
ROA not before:           Tue 06 Jan 2026 19:14:43 +0000
ROA not after:            Tue 05 Jan 2027 19:19:43 +0000
asID:                     266655
IP address blocks:        2803:c120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:12:a3:cb:87:15:38:b6:c1:10:94:49:9e:08:86:10:32:e4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Jan  6 19:14:43 2026 GMT
            Not After : Jan  5 19:19:43 2027 GMT
        Subject: CN=D1FFB44BC9C678E444AD97D0704E43071EFEEB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:9e:7a:ad:b4:0b:06:28:19:aa:35:e4:34:
                    48:93:cc:ec:56:e6:8a:18:4f:53:a5:c9:a4:06:e9:
                    de:80:36:73:9b:5f:8c:1e:76:3e:03:67:28:bb:28:
                    d3:e7:d9:50:69:da:4f:59:6c:b7:03:8f:06:51:57:
                    7d:48:50:9f:29:94:f1:6e:37:ec:21:bf:37:5e:b0:
                    fb:7e:b1:b5:fe:a9:4b:ec:92:23:0a:3d:2a:86:1c:
                    39:94:b8:fd:ae:7a:b8:f4:c2:2e:e8:4a:d9:18:05:
                    8d:db:b2:96:dc:5b:c4:90:26:09:81:5e:4b:4c:b5:
                    91:dd:b0:dc:75:6c:25:2d:a9:7a:5f:41:15:59:04:
                    ec:60:a9:22:5e:9a:d6:b2:01:c3:0a:77:02:7b:36:
                    23:b7:2d:16:34:fd:c8:af:b7:04:9d:49:f8:fd:03:
                    bc:60:69:6d:82:85:63:66:94:b8:3c:cb:82:85:ab:
                    f8:a8:2d:1a:8b:82:33:3e:e0:ee:98:68:ff:c1:2b:
                    b4:81:de:21:52:f0:60:0d:de:a2:28:31:59:fe:d6:
                    65:6d:39:51:6f:07:3d:63:92:6c:ea:1f:38:c7:78:
                    03:38:56:44:85:02:83:3b:06:48:b8:6e:4c:70:b2:
                    a3:2f:08:20:20:c7:4d:b7:b8:5a:08:b2:74:5e:25:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:B4:4B:C9:C6:78:E4:44:AD:97:D0:70:4E:43:07:1E:FE:EB:8B
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/323830333a633132303a3a2f33322d3332203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c120::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:05:bf:71:d2:5d:1f:f5:39:8d:7b:04:d6:e8:18:b8:60:
         db:bc:63:49:2c:b3:f7:7d:4c:1f:8b:69:04:a8:ef:f0:5c:d9:
         c5:a8:c7:5b:45:2c:86:a0:05:5d:de:4f:48:20:41:38:92:fe:
         33:d6:d6:de:97:ea:b7:35:51:0b:4b:f9:13:6a:51:27:06:96:
         23:0d:03:48:b1:ee:11:87:b1:b4:b3:4f:b1:89:e0:de:90:9f:
         d1:88:ab:3c:8d:da:c7:f7:79:e6:99:8a:bb:09:8c:ca:7f:33:
         68:ef:fc:32:eb:b3:d5:1d:cc:23:13:46:80:aa:8b:d1:38:7a:
         96:ad:44:73:1b:82:7e:8e:df:24:e5:b0:90:e1:a2:d1:4f:ae:
         4a:a2:f8:7d:bf:a7:11:66:c0:5f:a4:a2:69:a9:75:ee:b1:5f:
         08:c5:7d:c8:23:6c:db:91:08:06:27:e6:b2:83:6a:38:f6:92:
         ea:bf:3b:30:d5:56:ec:c7:72:ad:a1:88:16:bd:78:59:d3:09:
         b6:89:9e:77:9e:2a:7c:2d:f8:3d:fd:0e:6a:08:8e:48:f5:33:
         30:19:8b:31:9a:2a:b1:69:de:63:71:38:7c:c4:17:b6:64:e4:
         f8:6c:37:6a:ff:b4:0a:45:7e:0b:50:e4:be:bb:10:5e:13:38:
         56:ab:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:18 2026 by rpki-client