Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/323830363a3362633a3a2f33322d3332203d3e20323635353837.roa
File:                     323830363a3362633a3a2f33322d3332203d3e20323635353837.roa (raw, json)
Hash identifier:          ZvFZoF/kGVj7gX6/0WpGEkGT6JK0JF1p5bYaF6HmQ88=
Subject key identifier:   A9:83:B2:19:D5:A6:82:AF:4B:71:C6:83:1F:5A:05:59:9A:8F:B3:D2
Certificate issuer:       /CN=CF1072EDD71A22433D893E8025A69449AE90BB5C
Certificate serial:       45FDC7D5B6858D81856E3B6040EE94DADC665663
Authority key identifier: CF:10:72:ED:D7:1A:22:43:3D:89:3E:80:25:A6:94:49:AE:90:BB:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/323830363a3362633a3a2f33322d3332203d3e20323635353837.roa
Signing time:             Tue 06 Jan 2026 19:44:44 +0000
ROA not before:           Tue 06 Jan 2026 19:39:44 +0000
ROA not after:            Tue 05 Jan 2027 19:44:44 +0000
asID:                     265587
IP address blocks:        2806:3bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:c7:d5:b6:85:8d:81:85:6e:3b:60:40:ee:94:da:dc:66:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1072EDD71A22433D893E8025A69449AE90BB5C
        Validity
            Not Before: Jan  6 19:39:44 2026 GMT
            Not After : Jan  5 19:44:44 2027 GMT
        Subject: CN=A983B219D5A682AF4B71C6831F5A05599A8FB3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:ac:67:ad:76:99:24:43:f9:96:4c:5c:ed:
                    be:29:b9:07:bc:99:ef:6d:53:9d:ad:e2:c4:ce:75:
                    45:f8:fb:43:02:8d:73:95:55:90:fa:ea:ca:52:9c:
                    53:23:07:b8:9a:3f:33:bf:25:87:d0:ac:58:86:69:
                    67:51:ab:46:71:14:c9:12:23:01:be:bd:c8:7b:4a:
                    d1:a3:e1:a4:df:a0:f7:2b:69:e6:f7:fd:55:29:eb:
                    da:cc:3d:83:60:4b:10:f5:46:4b:42:52:7b:07:82:
                    65:e6:9d:69:29:7e:d9:23:1d:65:a6:d9:4d:aa:e6:
                    4d:a3:09:2f:cf:5c:49:f4:d4:de:be:9e:2f:fb:f6:
                    93:88:dd:f1:3e:f5:f6:50:06:ec:18:1d:9e:7f:7c:
                    a3:a6:06:f5:ed:b2:b1:00:03:7e:e8:93:f2:73:fb:
                    05:21:96:1f:bd:74:9f:46:a2:27:7f:d1:19:cc:01:
                    95:1c:c4:34:d9:d2:6b:02:b8:53:6b:46:d0:af:61:
                    fb:d6:37:f1:f2:45:de:e5:77:62:d9:34:b2:e7:1d:
                    c4:e5:ad:82:f6:69:e1:b7:72:29:ce:bc:58:92:78:
                    59:c4:5c:6f:ef:7d:df:eb:5c:ac:54:6d:ed:26:ea:
                    32:6b:9d:d2:4d:61:35:ce:94:1f:2b:57:4f:56:bf:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:B2:19:D5:A6:82:AF:4B:71:C6:83:1F:5A:05:59:9A:8F:B3:D2
            X509v3 Authority Key Identifier:
                keyid:CF:10:72:ED:D7:1A:22:43:3D:89:3E:80:25:A6:94:49:AE:90:BB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/323830363a3362633a3a2f33322d3332203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:57:81:e1:68:7f:c6:67:7e:c0:77:d1:d8:f5:83:f0:dd:fb:
         1a:bf:d4:7d:81:fd:10:0d:f0:b1:e3:bb:48:13:39:de:08:24:
         44:a5:f6:01:9e:ff:c7:9b:48:8b:23:a2:1f:d0:b1:e6:fb:fb:
         47:08:de:80:79:d7:cb:7c:c0:5a:fb:64:9b:96:5c:1e:ba:96:
         31:9e:6c:a2:91:7f:ad:28:87:af:96:ba:4b:c2:17:35:c0:c2:
         d9:59:6d:eb:fd:6d:7c:d0:74:ed:be:65:52:2d:fc:d7:19:7f:
         f6:8f:a0:27:75:9b:e3:e6:bf:74:4d:43:9d:ec:01:1e:39:3a:
         19:83:5c:ff:cd:66:b1:e5:6b:a1:a9:c8:3b:8d:d6:12:01:97:
         f8:b1:33:51:e0:1e:72:52:91:3d:fe:70:b4:d5:28:d7:ab:23:
         65:29:b0:d0:a1:bc:ce:a9:c1:12:b5:06:40:7d:ad:97:84:f1:
         c3:0e:83:aa:ff:2c:58:f1:4d:35:61:be:9c:1a:df:1a:b7:31:
         f3:f2:2f:09:27:96:6f:e5:ad:8d:e6:8b:66:71:71:84:9b:3f:
         13:d3:bb:ca:98:c1:e7:9c:79:b2:c9:1e:a7:26:8b:ea:19:d5:
         f3:14:32:56:39:57:e8:17:ee:cf:5a:11:e5:d7:35:d6:d7:f6:
         4a:76:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:22:16 2026 by rpki-client