Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733303339.roa
File:                     323830333a393635303a3a2f33322d3438203d3e20323733303339.roa (raw, json)
Hash identifier:          BJzy2HMBDYe+UuV6FnPUlHSGAO97wpAlUcwqU1FOk5k=
Subject key identifier:   C6:9E:B2:64:6F:80:96:35:A3:46:CD:7C:83:54:7A:20:87:AE:56:87
Certificate issuer:       /CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86
Certificate serial:       705C483D34503835281BE3302BAFA809AECD43CF
Authority key identifier: B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733303339.roa
Signing time:             Wed 04 Feb 2026 02:15:00 +0000
ROA not before:           Wed 04 Feb 2026 02:10:00 +0000
ROA not after:            Wed 03 Feb 2027 02:15:00 +0000
asID:                     273039
IP address blocks:        2803:9650::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:48:3d:34:50:38:35:28:1b:e3:30:2b:af:a8:09:ae:cd:43:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86
        Validity
            Not Before: Feb  4 02:10:00 2026 GMT
            Not After : Feb  3 02:15:00 2027 GMT
        Subject: CN=C69EB2646F809635A346CD7C83547A2087AE5687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:5b:20:8a:67:16:ec:29:eb:60:61:f7:84:
                    82:bf:0b:71:db:5f:8d:36:96:cc:f7:3d:4e:0b:db:
                    5f:2d:2a:0c:76:c3:35:2e:df:24:95:33:56:5d:15:
                    4c:81:53:ec:49:9c:20:57:8e:13:7f:59:ad:46:72:
                    d1:ee:3d:1b:ae:b4:f1:13:09:15:7d:a4:60:a1:27:
                    42:5d:6d:00:98:87:ba:a8:2c:ae:ed:56:6b:a0:a7:
                    e1:e1:77:c9:62:72:8a:12:cb:8b:47:38:89:1e:f1:
                    82:b8:8a:9f:f2:b0:8e:1e:8a:85:69:dd:ba:f2:31:
                    4d:ee:16:40:b9:ca:9d:29:1a:6e:99:2c:4c:c3:c9:
                    11:f9:6e:62:8a:65:f2:cb:02:de:e2:3f:71:02:cf:
                    78:c4:58:69:31:50:bb:5b:68:9d:4f:6b:91:e7:18:
                    51:9f:e6:ca:06:ba:12:b5:0f:3b:08:72:fa:1d:cb:
                    00:8f:05:62:95:f2:ff:b8:61:b7:02:6d:c4:e7:79:
                    05:96:f5:7f:d4:28:ca:ec:a8:a4:01:eb:d9:74:89:
                    18:d0:99:1e:8b:c6:8b:b6:a8:f3:e0:89:24:c7:e2:
                    4b:59:cd:d4:ff:68:35:fc:a7:b2:32:e0:8e:55:79:
                    32:83:cc:b6:87:6d:51:4b:53:f6:35:e0:65:c2:15:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:B2:64:6F:80:96:35:A3:46:CD:7C:83:54:7A:20:87:AE:56:87
            X509v3 Authority Key Identifier:
                keyid:B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9650::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:95:ef:59:01:cf:5f:83:c0:f5:15:4b:0e:29:b1:8b:19:a0:
         04:48:df:52:76:3c:05:bd:ab:69:ec:c1:e7:8e:a1:33:10:18:
         7d:ea:b6:db:17:d1:b3:ec:3d:b9:c3:c5:56:3c:92:1a:14:a0:
         70:08:a5:20:fe:69:a6:30:4e:b1:c1:d3:70:ac:d1:b9:81:f5:
         de:61:1b:ce:c1:2e:36:9d:d1:ea:ba:aa:8e:80:96:91:ba:9d:
         95:7e:e6:45:14:88:9d:5b:d2:ce:21:fe:ed:af:be:18:00:dd:
         6b:f9:5a:29:92:b8:bf:79:43:0f:f0:0e:16:69:cd:94:a0:97:
         90:ed:50:ab:87:b6:c2:d2:05:cc:32:be:e0:e0:04:35:3d:85:
         a6:ff:d5:98:16:84:f8:63:59:7f:f1:27:af:a3:86:18:5f:b7:
         1a:eb:44:fb:b6:7d:88:0b:34:a8:b7:14:e6:74:94:4e:91:0e:
         3b:72:96:94:4b:c1:7e:48:06:8d:dd:9e:9f:ce:83:b0:59:ca:
         f7:6b:69:c0:81:e3:96:44:9e:0e:83:ac:6c:82:97:35:27:f8:
         03:e1:51:24:3d:6d:ee:d9:44:2d:78:7a:4f:61:14:93:24:4e:
         7d:8f:51:d7:ce:15:99:6d:7d:23:c5:55:75:23:18:9d:1a:a0:
         4c:f2:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:31 2026 by rpki-client