Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa
File:                     323830333a643539303a3a2f33322d3438203d3e20323732393737.roa (raw, json)
Hash identifier:          3pljWCmamocchvsjnhRzpTHDdW8rruMexjh0d+6peJY=
Subject key identifier:   5A:B0:A4:C6:67:9C:FA:6F:B4:A9:02:07:D2:21:ED:8F:9D:67:BE:21
Certificate issuer:       /CN=222EFDDF13923986E70CA86A1D360A28BB13F7FC
Certificate serial:       4F20ACCE3197D1FA75418B8BC78883CC1253CF21
Authority key identifier: 22:2E:FD:DF:13:92:39:86:E7:0C:A8:6A:1D:36:0A:28:BB:13:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa
Signing time:             Sat 14 Feb 2026 19:30:37 +0000
ROA not before:           Sat 14 Feb 2026 19:25:37 +0000
ROA not after:            Sat 13 Feb 2027 19:30:37 +0000
asID:                     272977
IP address blocks:        2803:d590::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:20:ac:ce:31:97:d1:fa:75:41:8b:8b:c7:88:83:cc:12:53:cf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222EFDDF13923986E70CA86A1D360A28BB13F7FC
        Validity
            Not Before: Feb 14 19:25:37 2026 GMT
            Not After : Feb 13 19:30:37 2027 GMT
        Subject: CN=5AB0A4C6679CFA6FB4A90207D221ED8F9D67BE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:10:57:f0:b2:4e:96:7d:07:3f:54:01:22:
                    88:22:9a:d8:e8:8f:1d:a6:05:0d:84:22:1e:db:d3:
                    a3:d9:e6:a1:a0:57:72:0a:aa:31:d5:9f:9b:d0:52:
                    ff:da:c7:3f:94:f0:d6:ea:7e:9f:94:40:c1:42:63:
                    c0:ff:30:3f:51:e5:5c:73:0f:49:86:8d:77:a5:7d:
                    3b:87:6f:b9:5f:d5:0e:95:91:14:78:96:e0:0f:28:
                    d4:e1:5d:4b:87:7d:4a:4a:94:e6:72:95:bc:22:25:
                    52:db:37:7d:da:0b:70:85:c8:a2:7c:e1:bb:74:c6:
                    8f:41:a5:93:47:7b:97:e6:4e:e4:96:dd:c5:94:fa:
                    7f:34:38:58:e4:d2:0c:d8:dd:61:92:42:3c:7d:2d:
                    0b:ea:b3:74:68:2b:02:95:fb:66:b8:b3:15:9d:7e:
                    52:c8:4a:71:24:70:25:8c:d9:d7:f8:a2:db:b5:e2:
                    e0:08:16:86:60:2a:dd:f7:72:2e:9d:7c:67:78:38:
                    a1:27:eb:b8:19:7e:f2:8e:07:be:e9:7e:e8:a4:86:
                    53:73:38:eb:24:32:eb:b6:39:e6:e3:55:7b:13:90:
                    7e:78:93:b2:88:8f:c5:c7:8d:87:3e:0d:2e:2b:2d:
                    67:54:ab:74:a8:45:5c:1c:08:e3:9a:06:2b:50:03:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:A4:C6:67:9C:FA:6F:B4:A9:02:07:D2:21:ED:8F:9D:67:BE:21
            X509v3 Authority Key Identifier:
                keyid:22:2E:FD:DF:13:92:39:86:E7:0C:A8:6A:1D:36:0A:28:BB:13:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d590::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:af:a6:f4:c6:5f:24:3a:3c:0c:33:2e:83:c7:53:8b:7d:e5:
         7f:bd:1c:4f:7c:b6:0f:28:d4:1e:fe:72:9f:96:e7:7b:db:cf:
         b6:a7:74:18:59:d7:49:42:54:a6:d2:b0:1b:0f:f6:84:2c:fb:
         e1:cb:1a:94:8b:7d:8b:a4:13:04:87:57:68:21:78:e7:36:19:
         34:a7:0b:26:75:90:a3:a1:b0:e8:7c:1b:e7:ed:09:e7:31:83:
         db:3b:29:14:df:9e:bc:5e:59:6a:57:5c:8b:45:c2:54:36:ee:
         77:b8:97:1d:ed:4d:8b:e4:e9:76:5c:66:48:fb:95:12:83:dd:
         bd:60:32:d0:a5:b6:bf:30:fd:f9:4a:bc:52:1f:08:e6:8d:98:
         c1:f7:57:bd:63:b2:69:10:85:2c:e9:f1:95:39:e9:21:55:62:
         a2:a4:e3:8e:ce:01:5c:af:51:5d:1b:2d:95:64:58:b6:65:c3:
         8d:26:a4:1f:cc:39:28:ce:be:14:13:50:d8:6d:d1:ed:c5:c5:
         28:3c:ad:c7:67:9f:9e:97:5b:a7:e8:59:9a:78:d9:b7:37:cc:
         98:eb:1d:6a:e9:fa:20:38:87:2b:8e:6b:7f:90:c2:f1:72:25:
         7b:47:9f:1b:3c:7d:c7:b2:48:d4:f5:5f:ad:0c:c5:e0:28:38:
         20:72:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:30:56 2026 by rpki-client