Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa
File:                     323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa (raw, json)
Hash identifier:          /fmhvR/7ngwv0+jDPMBXSoycu0rma9qQ9iHkTCZPtto=
Subject key identifier:   14:25:BA:3D:24:13:4F:BE:D3:84:7E:D2:51:73:46:D7:1F:DC:F3:F1
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       75D62FF6F53DCD85E9329A1351C85580D3F28F1C
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa
Signing time:             Fri 13 Feb 2026 17:30:27 +0000
ROA not before:           Fri 13 Feb 2026 17:25:27 +0000
ROA not after:            Fri 12 Feb 2027 17:30:27 +0000
asID:                     266860
IP address blocks:        2803:b2a0:8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d6:2f:f6:f5:3d:cd:85:e9:32:9a:13:51:c8:55:80:d3:f2:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Feb 13 17:25:27 2026 GMT
            Not After : Feb 12 17:30:27 2027 GMT
        Subject: CN=1425BA3D24134FBED3847ED2517346D71FDCF3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:70:77:e6:ab:f9:3f:5c:97:14:17:bf:98:
                    1d:78:af:b3:77:35:2d:39:35:f3:31:ac:e9:3d:80:
                    0e:99:17:3f:6c:f6:b2:9d:7e:52:a5:50:d2:89:cf:
                    ac:9b:d1:d8:0b:29:1b:2b:07:99:16:fe:f5:0c:98:
                    0f:5a:08:69:7a:3d:37:79:2d:94:25:51:96:7a:7f:
                    48:86:bb:88:03:c1:32:7e:9c:04:a1:fb:94:85:93:
                    7b:ec:be:dc:98:a5:cc:9a:2b:08:a6:3c:2a:bc:1d:
                    88:45:d7:9e:c3:cd:ba:dd:ce:11:d6:6b:06:60:f9:
                    4e:b6:47:3b:c3:aa:53:35:66:53:04:26:f8:40:70:
                    7e:e1:0b:18:ff:08:5a:59:4f:af:8e:59:9e:31:3b:
                    23:f9:ae:2b:1e:08:fe:e8:98:83:cc:7b:1f:0f:8f:
                    32:b9:c1:26:de:b2:4e:63:b3:48:20:24:92:96:92:
                    73:e8:92:6f:c1:15:dd:b7:dc:94:d2:16:2f:c5:b8:
                    2b:62:1e:a0:11:3a:b6:62:60:36:de:63:fd:7f:4f:
                    91:98:34:4a:b4:68:f7:b6:52:d1:a0:35:d6:5d:ff:
                    e2:02:1d:e4:18:e6:18:2d:d7:44:a8:0a:a3:5c:99:
                    b7:f8:c1:0d:59:b0:3a:24:45:08:af:1b:3f:9f:77:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:25:BA:3D:24:13:4F:BE:D3:84:7E:D2:51:73:46:D7:1F:DC:F3:F1
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:66:1e:02:2c:a3:16:a7:88:35:bb:5c:03:a7:2d:c5:5f:
         99:39:50:ac:f1:ef:66:df:74:e6:fd:40:af:2c:03:c5:27:19:
         3e:cc:e5:0d:e0:a2:f0:19:97:b2:e1:2c:49:61:76:37:ab:2f:
         89:60:b8:f4:a8:ae:73:f6:36:39:9c:6b:ff:1b:c3:37:69:c5:
         25:64:1b:c5:ef:e3:f4:19:32:80:5c:fe:df:e8:dc:16:50:ca:
         af:33:07:29:b6:58:93:00:91:0a:0d:d2:95:03:e0:c0:24:7b:
         2b:91:80:94:ef:b3:12:df:07:bc:3e:4a:93:ae:dd:cb:6f:56:
         10:ac:08:d8:61:ae:b7:a4:0c:a1:43:05:09:1f:62:01:fa:af:
         35:14:6f:cf:4b:8f:c5:d1:b0:d7:60:d9:b4:01:ca:1a:d9:42:
         9b:f5:9b:f7:67:98:67:da:b6:11:7c:63:3d:7b:48:60:c1:9f:
         c5:6c:7e:9b:d7:f9:5a:87:86:e6:24:2b:01:37:8c:6f:93:87:
         cd:92:a1:8e:b7:a7:41:28:21:bb:c1:07:ab:55:6b:39:aa:c2:
         c1:56:7e:54:39:6b:8d:80:a6:23:41:c2:db:29:f5:75:33:69:
         f2:06:34:d2:cc:f3:74:03:6b:c1:1c:1c:ed:76:f7:90:d7:e9:
         8c:15:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:39 2026 by rpki-client