Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/323830333a353730303a3a2f33342d3334203d3e203238303234.roa
File:                     323830333a353730303a3a2f33342d3334203d3e203238303234.roa (raw, json)
Hash identifier:          D8Qr6hNB+tr537keZftG6V48354NaXlvH/yfHtqFIac=
Subject key identifier:   9E:FE:B9:CC:5A:09:6A:BD:67:CD:30:D9:AB:EB:5A:47:C0:1F:BE:22
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       651B213D163AA10A2338F1DA20953028CA6BCAA6
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/323830333a353730303a3a2f33342d3334203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:00 +0000
ROA not before:           Tue 06 Jan 2026 18:56:00 +0000
ROA not after:            Tue 05 Jan 2027 19:01:00 +0000
asID:                     28024
IP address blocks:        2803:5700::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1b:21:3d:16:3a:a1:0a:23:38:f1:da:20:95:30:28:ca:6b:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:00 2026 GMT
            Not After : Jan  5 19:01:00 2027 GMT
        Subject: CN=9EFEB9CC5A096ABD67CD30D9ABEB5A47C01FBE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:29:92:c5:ee:18:c6:d3:ce:f9:91:1a:c9:
                    10:77:05:09:92:5c:23:68:bb:dc:29:ab:7e:3b:d6:
                    13:13:63:04:c3:cc:21:d5:86:a2:d9:f9:8f:03:ca:
                    4c:00:b7:e8:89:4b:a9:a9:f4:17:77:b7:4e:45:85:
                    72:0e:e4:56:c3:04:99:67:03:f8:d1:f4:5e:a4:79:
                    16:04:5e:d2:c8:98:2c:53:5e:60:e7:38:12:7e:55:
                    f1:23:85:0a:4c:3a:07:3c:bc:b0:b8:af:81:fe:04:
                    f2:3a:c1:84:91:40:ce:25:89:e4:44:ec:81:50:be:
                    2b:fc:e2:dd:85:98:5a:6a:61:3e:50:8b:ca:fd:a0:
                    3b:4b:ba:5d:a5:e6:8c:90:1c:55:2d:04:72:5a:55:
                    76:74:f2:c2:60:2a:6b:e4:b8:49:d3:89:6a:94:d2:
                    6c:8e:34:cf:56:8b:f4:ea:28:bc:80:37:36:30:8c:
                    b2:c8:b2:35:07:af:55:e5:42:30:7b:34:2c:be:aa:
                    fe:88:ad:27:7a:7e:fe:75:f6:77:43:4b:24:91:77:
                    b8:81:96:9f:06:c9:84:81:9b:8d:4e:1f:c1:b3:b0:
                    5b:c2:63:10:fd:5e:2e:02:48:87:8c:1e:65:b9:69:
                    cb:f9:2b:5f:2e:02:10:23:d5:1e:fe:5b:95:60:71:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:B9:CC:5A:09:6A:BD:67:CD:30:D9:AB:EB:5A:47:C0:1F:BE:22
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/323830333a353730303a3a2f33342d3334203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5700::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:69:d6:0a:aa:b2:b5:d9:e6:34:a6:50:d8:05:b0:76:2d:
         6b:0f:bb:88:4d:b3:e8:86:7e:a2:57:cf:0c:b4:45:f3:e0:5a:
         ba:a3:4f:29:f6:72:e7:c2:50:3e:b3:bb:eb:31:c5:e6:13:06:
         3b:17:01:e1:f6:fa:b8:64:1d:1d:1b:b4:e1:7e:2a:56:ca:0c:
         8b:20:36:49:20:ff:59:3e:10:5b:9f:17:a2:ed:91:a3:80:66:
         34:05:b6:db:6e:87:e9:12:04:83:2b:cf:1f:0b:b6:c6:e2:7a:
         4e:bc:c0:58:f8:17:b2:d1:eb:ca:41:2a:73:a6:0f:fd:44:3a:
         8d:75:ac:c2:74:56:cc:90:8b:90:38:fa:b2:25:0c:5f:a3:ad:
         28:0d:a2:ce:ea:c2:b3:53:2a:cc:16:f3:fe:22:da:77:d5:57:
         38:ba:0a:db:a0:46:f8:25:42:33:af:a8:5d:ed:47:3b:6a:bf:
         a3:97:ea:1f:9c:25:a5:1c:cc:d1:20:6b:a7:f0:11:42:fd:9e:
         b6:f4:65:e3:27:f3:55:e0:e9:53:bd:96:14:e1:20:c1:b2:77:
         17:31:fb:18:9c:2d:14:43:65:ac:54:12:b9:26:53:de:ee:6b:
         5b:77:a3:f7:26:b4:ec:28:4f:fc:43:2e:33:38:e1:bf:66:e5:
         d6:94:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:20 2026 by rpki-client