Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa
File:                     323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa (raw, json)
Hash identifier:          /qH2AbuabNYtK5P+152GYmQSGkS0GzLgbKTRYpiNOfM=
Subject key identifier:   70:42:41:C5:59:06:98:94:14:C7:96:73:9B:AB:34:6E:ED:CB:60:B7
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       34445AA89A0ECA74960430B5A6E342AEAF20687E
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa
Signing time:             Fri 13 Feb 2026 14:30:20 +0000
ROA not before:           Fri 13 Feb 2026 14:25:20 +0000
ROA not after:            Fri 12 Feb 2027 14:30:20 +0000
asID:                     14232
IP address blocks:        2800:2b0:4000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:44:5a:a8:9a:0e:ca:74:96:04:30:b5:a6:e3:42:ae:af:20:68:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb 13 14:25:20 2026 GMT
            Not After : Feb 12 14:30:20 2027 GMT
        Subject: CN=704241C55906989414C796739BAB346EEDCB60B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:46:e4:bd:30:55:44:a6:90:b7:2c:81:4d:
                    89:b6:8c:bd:42:c3:92:35:93:fb:97:c3:a5:c5:73:
                    f5:51:d5:40:6f:be:ac:92:c0:0a:7d:dd:d4:31:ee:
                    73:76:9e:d0:a6:c7:d7:ae:ae:b0:18:1d:ea:aa:0e:
                    de:e3:40:8a:f2:64:ab:8a:e7:5d:f5:f6:27:28:eb:
                    05:ef:11:2a:d7:e1:34:22:0b:89:cf:e2:3d:1c:50:
                    e5:b2:cf:0e:92:f7:1c:6a:63:79:27:33:f2:df:7e:
                    b2:37:c1:01:a7:30:19:6c:5e:77:5d:a1:de:e6:1e:
                    05:68:47:1b:3a:60:d3:63:52:a8:2e:28:94:5f:6d:
                    08:34:b1:c9:32:38:4a:d1:aa:ef:2a:04:91:a4:1f:
                    52:5f:ec:c8:e1:51:3f:70:27:06:1c:47:18:86:1c:
                    cb:32:bd:cb:96:11:18:42:63:e4:68:3b:65:8f:4f:
                    00:3a:09:a1:da:6a:e6:00:7f:7d:49:aa:5c:aa:0b:
                    dd:e3:05:87:0e:75:28:3a:8a:06:40:fc:42:86:54:
                    79:eb:6c:e4:9e:e3:8f:8c:49:20:35:e1:d6:f4:9d:
                    78:6d:fa:83:6b:01:19:31:3b:49:13:a5:28:b7:f7:
                    15:b3:67:86:3a:ce:f5:bf:9c:59:e0:00:3a:34:15:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:41:C5:59:06:98:94:14:C7:96:73:9B:AB:34:6E:ED:CB:60:B7
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:e8:d5:49:19:8f:93:ca:cc:80:c6:bb:93:9b:bb:5a:1b:
         aa:42:30:96:b8:59:b8:e8:c1:76:bf:36:17:c7:aa:25:15:9c:
         fa:54:7a:7f:8c:80:5f:2d:28:b2:9a:2a:54:e7:ff:22:fc:fe:
         40:23:33:3d:c5:9b:8f:b4:40:6a:ec:07:b4:b8:a4:f0:79:1b:
         a1:71:ab:a3:65:bc:a0:3b:b6:9e:ae:8a:93:5d:93:b9:a1:2a:
         2b:0b:d1:cd:ad:f8:dc:e8:ef:c1:00:dd:3a:72:51:1d:5c:43:
         db:be:3a:03:ca:fd:a5:79:fc:a6:35:ca:51:03:a0:00:d6:89:
         3c:08:e5:92:a5:dd:3a:34:62:e6:e8:ee:78:f8:65:0b:ba:4c:
         07:9b:57:e7:14:80:57:9b:1a:1a:e6:22:8b:a8:1c:d6:ec:4b:
         85:99:70:7e:c6:6c:6c:e2:5b:41:a0:a6:6a:0c:b8:b9:6f:87:
         89:6b:22:da:d1:82:31:89:a9:7b:3e:9e:16:22:33:d2:ef:2b:
         5f:27:94:cd:87:81:a0:72:f7:da:87:1a:96:93:c7:85:64:1d:
         3a:46:01:d2:c1:f6:aa:c8:75:61:26:86:b5:ab:3d:a5:d1:a6:
         81:3a:2c:6a:96:d2:bb:9a:c7:24:55:c4:47:b6:3c:3e:4a:b4:
         1d:2b:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:21 2026 by rpki-client