Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa
File:                     323830333a653865303a3a2f33322d3332203d3e20323639383735.roa (raw, json)
Hash identifier:          BqLc8CC8oazw0NgUSPYfukWEhQBWOiiIUONwio9kV+0=
Subject key identifier:   7B:41:51:AF:0A:1C:A0:4B:0A:F0:8D:36:EB:01:E4:33:BE:04:89:20
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       56A7F05F860649371EF165E5595EAC9DCFE23C88
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa
Signing time:             Tue 06 Jan 2026 20:51:00 +0000
ROA not before:           Tue 06 Jan 2026 20:46:00 +0000
ROA not after:            Tue 05 Jan 2027 20:51:00 +0000
asID:                     269875
IP address blocks:        2803:e8e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a7:f0:5f:86:06:49:37:1e:f1:65:e5:59:5e:ac:9d:cf:e2:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Jan  6 20:46:00 2026 GMT
            Not After : Jan  5 20:51:00 2027 GMT
        Subject: CN=7B4151AF0A1CA04B0AF08D36EB01E433BE048920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:5b:a8:f9:f6:44:1e:15:4f:80:d2:42:ac:
                    74:48:ff:be:37:ac:6a:42:f0:2e:f0:b2:8f:b9:30:
                    12:24:8d:9b:72:28:3a:79:0c:2a:4c:98:1a:f8:47:
                    1f:0d:fd:db:0f:0e:a7:6a:f3:b0:3f:2a:42:7c:99:
                    ca:58:62:dd:18:40:22:3e:34:7f:3f:63:9d:a9:34:
                    84:e9:3b:8c:6b:26:b3:41:07:d6:06:8b:1b:04:37:
                    8c:87:c2:56:6c:41:cc:e9:6e:a1:42:1b:9a:b3:88:
                    73:af:4c:26:eb:53:4c:be:96:33:ea:7c:96:17:b8:
                    32:3f:14:97:c3:44:bb:0d:1b:d7:73:46:88:9b:66:
                    51:aa:d5:c5:54:b4:f2:61:71:b3:41:d2:65:4f:27:
                    81:65:f1:11:39:e6:f3:b6:03:75:dc:b6:8c:59:b0:
                    13:5b:5f:d2:85:61:a3:04:ce:4a:b1:17:bd:98:e2:
                    5a:23:9e:1f:59:ea:00:7d:76:79:cb:6e:9d:86:56:
                    3e:18:71:2c:ef:32:23:5a:70:5b:51:16:e6:a6:a4:
                    22:e0:1a:fb:e1:22:f7:3c:d0:72:47:27:89:eb:22:
                    b7:4a:9f:a6:f7:4f:70:5e:c3:c7:b9:32:f5:2c:bb:
                    6b:92:9a:bc:b6:8d:17:2a:1d:12:aa:ec:f7:de:ce:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:51:AF:0A:1C:A0:4B:0A:F0:8D:36:EB:01:E4:33:BE:04:89:20
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:75:ce:13:22:42:1e:62:c8:51:9c:03:e9:45:58:dc:09:d8:
         8d:e1:b4:83:79:d2:86:8d:b1:5f:d3:33:ad:23:65:44:e1:b2:
         86:fd:0f:b8:9e:c6:ea:2f:e5:23:15:42:b7:5a:64:6b:c0:ac:
         ac:4e:eb:f0:2e:19:8a:30:45:4c:bc:14:82:82:67:71:5c:8c:
         de:cd:df:d3:cd:20:e1:04:73:14:06:64:de:f9:76:6c:d4:b6:
         e1:cb:20:59:cd:77:5e:21:5b:40:25:56:11:e1:95:08:56:e2:
         90:f5:52:f8:9a:3e:ae:28:b3:3b:b0:fb:b1:cb:f7:75:bf:26:
         a9:13:2f:0c:51:41:d9:99:ca:a0:54:d8:81:de:28:5f:6e:8e:
         d4:07:9b:75:01:a7:88:b2:71:49:f5:82:8a:79:80:fa:8e:9d:
         07:73:41:ff:84:87:3a:8a:c6:1b:81:4f:63:14:ec:a0:f3:f3:
         b0:73:f9:db:28:15:a5:b2:0a:d5:54:fd:4a:8c:ea:16:39:2e:
         59:ec:92:21:05:6d:56:52:36:94:f5:0d:bb:d8:04:2b:5e:30:
         cf:e6:b5:03:a4:cc:6b:e9:aa:b4:c2:e2:45:79:95:28:d5:a8:
         e1:a9:c3:d6:30:0b:68:3f:1f:2d:f3:28:56:df:50:ad:aa:79:
         d5:a9:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:49 2026 by rpki-client