Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa
File:                     323830333a653038303a3a2f33322d3332203d3e203132313530.roa (raw, json)
Hash identifier:          wY3V/67VbcbzWTjCzNWok8qMBMKoucQ251PF77Te6iE=
Subject key identifier:   89:DE:F5:A1:CE:AE:80:0B:B9:33:72:CE:52:FA:51:D6:9C:08:E8:2E
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       4643439D327DA66FB3CC0C256FBB10803A196141
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa
Signing time:             Tue 06 Jan 2026 18:59:19 +0000
ROA not before:           Tue 06 Jan 2026 18:54:19 +0000
ROA not after:            Tue 05 Jan 2027 18:59:19 +0000
asID:                     12150
IP address blocks:        2803:e080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:43:9d:32:7d:a6:6f:b3:cc:0c:25:6f:bb:10:80:3a:19:61:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Jan  6 18:54:19 2026 GMT
            Not After : Jan  5 18:59:19 2027 GMT
        Subject: CN=89DEF5A1CEAE800BB93372CE52FA51D69C08E82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:06:d7:df:18:08:30:63:46:ff:62:1b:e2:
                    b5:f1:91:eb:75:7c:e5:02:71:40:30:75:1b:84:51:
                    88:ed:c7:82:62:c0:e4:f1:0e:f4:f7:98:0d:c4:81:
                    9f:52:cf:b3:fe:e4:aa:50:83:59:5e:c5:a8:f8:c4:
                    69:71:d5:e1:1b:f5:16:01:df:91:80:30:d3:4f:7e:
                    75:0b:7d:68:cc:76:9e:84:58:3f:90:7f:d4:be:bb:
                    bd:d1:b6:f3:af:a7:b9:83:a2:9b:f5:93:54:42:8b:
                    ad:02:e6:ed:a6:cd:c5:19:68:01:87:6f:d8:40:4b:
                    c0:db:37:12:3e:b2:d4:dc:9e:3c:9d:90:c8:46:9d:
                    5c:ea:9e:c6:66:b7:50:95:87:7b:de:5b:8f:b5:97:
                    89:b2:7e:b2:c5:54:1b:c4:15:e3:54:ef:b6:62:c1:
                    e0:ef:47:a2:f5:16:75:1d:da:73:cf:8a:af:f5:33:
                    07:f3:32:14:79:cf:4b:ab:83:2b:4d:81:f4:ca:4e:
                    15:90:e4:fe:0e:a8:54:7c:64:05:db:37:09:fe:e7:
                    6d:37:45:ea:06:9b:ad:fe:e6:ef:ba:0f:f2:c8:83:
                    dd:1b:18:c0:c7:0e:a3:fe:69:30:4f:f8:c2:27:b6:
                    cb:15:d3:f9:51:17:c3:4b:6b:da:76:b3:38:42:a6:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DE:F5:A1:CE:AE:80:0B:B9:33:72:CE:52:FA:51:D6:9C:08:E8:2E
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:29:d0:ff:0a:d2:c0:11:21:42:bc:9e:d0:ce:fd:51:12:73:
         92:32:3a:43:de:8b:63:d7:cc:1a:c5:fe:b8:b7:b2:3e:64:7f:
         84:f6:1c:63:fd:b7:d8:ba:e6:20:ef:90:58:b5:77:2f:a6:5e:
         be:16:1a:8c:ce:d0:1d:11:92:f0:76:5e:bd:f2:95:f0:9b:eb:
         a1:3f:67:2d:c5:a5:ea:20:6c:29:bb:99:4a:ac:99:5b:e2:a7:
         70:ce:90:8f:c7:8e:49:fb:bd:0d:6c:e7:76:9e:42:bc:7c:04:
         7f:0a:b9:41:ed:01:b9:57:7e:56:37:81:bc:5b:2e:65:31:2f:
         9e:54:45:b9:a1:7c:1b:e4:fa:51:88:9f:86:66:19:ae:8f:21:
         3e:ba:39:eb:ce:30:1d:0c:f6:45:a1:b1:7c:70:4e:d8:18:16:
         bd:28:80:0f:d3:21:51:1f:31:ee:90:f8:87:48:a4:e2:d2:44:
         ea:11:06:76:83:9e:49:dc:c9:b6:fb:20:57:97:34:26:d2:10:
         9d:22:aa:fa:ba:8d:51:67:c9:48:5d:99:82:e6:bc:1a:25:45:
         28:df:90:5f:be:63:3f:4e:18:41:94:90:45:c0:d3:2a:57:6f:
         f5:ce:3a:60:e9:59:61:60:5c:46:14:1d:50:95:a8:ee:56:f1:
         83:e3:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:18 2026 by rpki-client