Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa
File:                     323830333a623261303a3a2f34382d3438203d3e20323636383630.roa (raw, json)
Hash identifier:          hKve+U/84xA8O+kVmboyBt+2TPK0qmiyVK0w1bdmEJA=
Subject key identifier:   DC:1B:02:78:3B:70:3C:80:0D:D6:F8:2E:22:7B:23:19:8A:95:7E:90
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       3EF6D28F9BB2C2BECDB33A4EA0738CCF684A5B35
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa
Signing time:             Fri 13 Feb 2026 17:30:28 +0000
ROA not before:           Fri 13 Feb 2026 17:25:28 +0000
ROA not after:            Fri 12 Feb 2027 17:30:28 +0000
asID:                     266860
IP address blocks:        2803:b2a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:d2:8f:9b:b2:c2:be:cd:b3:3a:4e:a0:73:8c:cf:68:4a:5b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Feb 13 17:25:28 2026 GMT
            Not After : Feb 12 17:30:28 2027 GMT
        Subject: CN=DC1B02783B703C800DD6F82E227B23198A957E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:19:43:52:57:0a:11:8d:94:76:32:2e:e8:
                    f2:77:bc:de:80:85:5c:da:5a:cc:71:eb:b7:56:f9:
                    55:9d:0f:55:52:c2:21:43:8f:8b:9d:31:23:37:1d:
                    c1:ca:5f:17:07:11:04:c3:82:2c:37:1c:75:aa:9f:
                    22:4d:d9:21:86:e7:7d:c0:19:fe:97:fd:e3:8d:b4:
                    8b:fc:8f:50:86:dd:e3:37:c8:a6:2f:e4:68:41:2c:
                    8f:7e:a5:80:ee:14:05:f7:8e:8e:28:98:9e:a2:29:
                    01:5b:32:49:f6:c6:e7:8b:e0:d4:e8:e1:61:48:99:
                    f1:20:0a:a8:ac:4b:8c:99:72:4e:7f:19:f5:0b:0f:
                    63:15:95:9b:17:ed:d9:0e:d6:c8:2a:a5:4f:f7:c7:
                    a0:29:d4:0d:a2:dd:41:c7:57:66:fc:ac:0e:f8:91:
                    68:38:4d:49:21:62:f6:3f:29:5d:a2:ae:3b:c1:f2:
                    64:fa:97:9f:53:c9:b7:ab:4e:15:19:1c:65:63:03:
                    6f:47:e1:65:b0:37:3b:59:d1:75:e9:28:df:0d:f6:
                    6b:23:4d:c2:30:02:cb:88:0d:4d:61:af:cf:e7:5d:
                    db:91:8c:49:04:79:cc:a0:54:7c:86:e9:a8:3a:d3:
                    7b:98:22:4e:b9:12:c8:48:29:62:4c:7e:30:82:8b:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1B:02:78:3B:70:3C:80:0D:D6:F8:2E:22:7B:23:19:8A:95:7E:90
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:ac:0d:ab:63:3c:e7:6f:97:3f:5e:7e:eb:7e:00:02:2c:
         e2:dc:57:d7:df:69:83:42:6d:70:8d:bf:39:17:c9:87:ec:dd:
         03:d3:a9:da:ab:58:fc:56:49:5d:95:b1:f1:a4:fa:26:4d:19:
         41:57:b8:cc:b4:33:6f:42:6a:02:f1:10:b5:94:a6:df:0a:fa:
         3f:41:aa:45:69:24:51:20:82:2b:1b:55:12:fd:93:40:ee:9a:
         70:69:2e:5d:fc:1c:f3:97:5d:9b:e9:1c:77:36:31:64:e7:01:
         27:bd:bf:9e:8f:d5:c6:44:0a:66:e2:4c:c0:38:94:51:9c:c6:
         e9:f3:68:0d:0b:78:93:f3:49:aa:52:e7:ac:72:39:d4:26:42:
         9c:1b:cc:3c:cd:54:f6:82:d0:9b:c0:4c:64:6a:bf:cc:c5:25:
         e0:8f:d1:79:6d:d7:5a:77:8e:b8:b4:12:74:87:c4:58:2f:6c:
         96:67:18:ef:2f:26:b8:52:9e:83:65:84:e5:00:f2:87:f4:42:
         8d:13:17:09:93:f7:ea:14:92:5e:d5:ce:63:cd:1d:dc:c9:3d:
         bb:e2:9c:a7:0f:28:34:cd:79:c6:f2:41:e3:de:60:67:be:51:
         05:88:10:ff:ad:eb:cc:19:6f:2e:d1:3e:ee:50:aa:e1:26:e7:
         0a:06:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:47 2026 by rpki-client