Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa
File:                     323830333a353065303a3a2f33322d3438203d3e20323639383537.roa (raw, json)
Hash identifier:          42FoFeo+uVZXkC6Y/6zzqrQzlaQmu6YaB85oau9yKvI=
Subject key identifier:   89:1E:54:1C:28:87:4F:B0:C2:F9:D1:2B:27:7F:B8:D8:01:34:BB:3F
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       7E61A113F3CD597DEBB0DA29D741DB0FFE5C5F29
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa
Signing time:             Tue 06 Jan 2026 19:39:07 +0000
ROA not before:           Tue 06 Jan 2026 19:34:07 +0000
ROA not after:            Tue 05 Jan 2027 19:39:07 +0000
asID:                     269857
IP address blocks:        2803:50e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 07:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:61:a1:13:f3:cd:59:7d:eb:b0:da:29:d7:41:db:0f:fe:5c:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Jan  6 19:34:07 2026 GMT
            Not After : Jan  5 19:39:07 2027 GMT
        Subject: CN=891E541C28874FB0C2F9D12B277FB8D80134BB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:fb:e6:73:dc:06:9f:48:e3:88:3f:d2:c6:
                    d3:aa:63:9f:43:01:b0:3d:86:14:2e:e9:c7:eb:c1:
                    db:31:56:8d:41:25:66:1f:ee:a0:b7:cb:e8:56:12:
                    01:33:f2:35:33:c5:59:00:79:07:62:3a:18:d6:33:
                    a4:34:2f:9d:7e:d8:55:46:93:c7:c5:dd:fe:44:d3:
                    bd:95:32:c0:ec:1f:a0:ba:94:4b:a6:43:66:42:98:
                    1e:9a:6e:1f:a7:fd:a3:f0:57:6a:81:9e:ee:0d:db:
                    3f:c4:4e:d8:dd:b7:94:13:a5:35:61:c8:c5:7e:e9:
                    15:ac:85:45:62:85:1e:fe:e8:67:5f:4d:97:a3:04:
                    4b:6e:d3:f9:18:17:02:30:86:3a:46:74:20:1a:6a:
                    c0:80:2c:51:f4:52:fd:5a:f3:36:9b:cb:5f:cb:f9:
                    2a:e3:f3:fa:9d:10:d2:6c:94:94:b2:cd:12:a6:cc:
                    94:23:20:e8:99:f6:5e:75:cb:68:85:af:13:3c:e9:
                    24:2c:9a:7c:5c:4a:74:ac:cc:2d:9a:20:ff:03:3a:
                    d4:b3:c0:3f:1c:d7:76:b8:03:d3:9d:f0:3f:91:a6:
                    94:5c:53:65:f4:0a:08:0f:1e:f7:ab:bf:e4:47:0f:
                    c7:fa:97:9b:91:3c:83:a3:86:26:65:5e:c7:a4:3c:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:54:1C:28:87:4F:B0:C2:F9:D1:2B:27:7F:B8:D8:01:34:BB:3F
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:24:bf:b4:6a:7f:ee:df:da:98:38:6e:a7:00:86:4a:e2:21:
         70:56:38:c6:22:90:f6:41:a4:4a:ad:62:26:67:57:d8:34:5a:
         c5:87:00:9d:3f:8f:07:5b:ec:ee:20:87:e1:f9:f6:b6:f9:c5:
         b8:80:32:5a:ef:b9:aa:d4:e0:bd:1c:e8:db:6f:80:e2:6d:59:
         9d:7e:04:78:f0:21:3e:ba:eb:6a:a0:f1:04:53:88:57:52:7f:
         16:6f:1a:bf:cd:79:62:86:73:82:62:c2:84:56:cb:2f:9c:fb:
         14:de:28:89:75:a2:95:ca:d9:9e:e5:e6:33:6b:32:ad:28:65:
         09:1b:db:c6:cb:42:a1:54:4f:78:8e:5c:47:1d:a7:00:23:b6:
         50:aa:4e:6d:71:27:8b:91:af:a2:75:a7:11:10:1e:9a:34:3c:
         7f:37:7f:36:29:44:60:20:3f:39:bb:ac:00:48:50:d1:9f:49:
         3e:e4:52:4a:0b:be:e4:66:cc:1c:ad:27:e8:6a:d8:58:19:95:
         6e:22:78:f7:82:3e:6f:12:b6:e0:d1:89:06:2b:b2:07:b1:ad:
         26:90:69:fb:9c:49:20:48:8d:53:65:22:e4:36:fb:1e:f8:cd:
         c0:f4:45:64:eb:95:99:2d:d9:3f:36:50:4d:f0:7d:20:1d:33:
         08:85:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:10 2026 by rpki-client