Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa
File:                     323830333a316338303a3a2f33322d3438203d3e203136393231.roa (raw, json)
Hash identifier:          rQzmKzlaaFVJwRXu6V8Iopo6yPPZLSYs9mojHrirjSk=
Subject key identifier:   6C:68:62:67:7C:7E:13:3D:E7:41:8B:4B:A5:6F:4D:51:FB:B4:8A:05
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       70CC151BAB3012F57CB6DD61B5CC2DD7ADF0F425
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa
Signing time:             Tue 06 Jan 2026 19:00:47 +0000
ROA not before:           Tue 06 Jan 2026 18:55:47 +0000
ROA not after:            Tue 05 Jan 2027 19:00:47 +0000
asID:                     16921
IP address blocks:        2803:1c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 01:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cc:15:1b:ab:30:12:f5:7c:b6:dd:61:b5:cc:2d:d7:ad:f0:f4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Jan  6 18:55:47 2026 GMT
            Not After : Jan  5 19:00:47 2027 GMT
        Subject: CN=6C6862677C7E133DE7418B4BA56F4D51FBB48A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:fb:21:10:58:08:68:a1:69:92:79:f5:3f:
                    f9:4a:d5:20:7e:63:59:d4:d5:7b:d8:96:66:4d:cd:
                    9d:39:09:3e:61:bc:75:8c:ec:87:0c:e3:0d:5e:7a:
                    4b:9b:90:66:1f:60:31:d5:92:80:b4:63:1b:58:fe:
                    c0:17:1e:4a:e8:19:90:12:05:cc:a5:73:d9:27:56:
                    b3:09:41:d0:70:e7:ef:54:eb:3f:d2:b9:64:69:13:
                    37:c9:4b:23:ae:c6:03:da:ba:1f:58:dd:6e:a3:8e:
                    dc:1a:25:3f:13:0a:81:a7:6d:5c:84:4e:0a:b2:cd:
                    e5:ac:af:a0:1f:91:42:ce:a8:2c:85:a4:d2:ab:7f:
                    78:e9:99:ab:74:07:54:a9:d4:9b:88:60:b9:c1:b3:
                    5b:59:f4:0b:0f:3b:38:87:c8:34:dc:05:99:c7:f0:
                    aa:13:b5:6f:05:2d:2c:60:6c:5e:84:f9:71:9c:29:
                    3e:10:de:87:f0:4e:4d:bf:18:93:02:08:73:f8:61:
                    ad:16:23:58:b9:8c:d7:e6:78:16:e3:04:cb:6b:25:
                    9c:2e:58:9e:83:a9:44:e3:d0:e5:3e:f4:68:4b:27:
                    03:38:98:1b:62:c2:39:5e:d3:12:b3:66:57:7e:5b:
                    b3:4a:b2:54:15:be:a5:58:57:8f:20:85:ac:4a:a4:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:62:67:7C:7E:13:3D:E7:41:8B:4B:A5:6F:4D:51:FB:B4:8A:05
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:eb:14:1d:a2:50:13:c9:26:6a:c2:04:2d:8c:b4:82:f0:
         99:09:af:49:e5:4d:21:b2:e1:49:bc:0b:f7:4e:52:a3:99:d9:
         1a:6d:3f:d2:dc:aa:66:9c:b9:14:6f:d4:4c:7e:f1:8d:e7:92:
         cd:3f:6e:4a:3a:1d:08:db:7e:8f:f0:9f:67:5f:1d:97:2d:fd:
         a1:8e:3f:31:87:04:2e:69:ea:e4:d5:c6:30:3b:66:2f:74:d1:
         bc:5a:4c:a4:d8:20:f1:20:05:a4:9f:1e:67:33:94:95:ba:44:
         e1:ce:16:ae:31:77:7b:90:8e:d1:5d:e6:23:62:42:fd:b1:ef:
         25:5b:fa:f9:15:63:dc:42:8c:19:05:2a:ff:7a:b3:3a:b3:13:
         00:00:05:c5:86:b1:45:35:74:e3:78:71:44:ce:c4:58:60:bb:
         e7:70:a1:de:71:25:0d:8c:03:74:4c:a7:b1:ad:ee:22:87:3c:
         da:00:9f:2b:13:11:6d:58:08:f8:8b:77:cc:b6:ca:d1:33:e5:
         3f:06:dd:cb:80:58:64:f7:a8:b8:29:73:a6:fd:b5:3a:c6:e9:
         7b:47:57:0e:6a:a7:dc:a0:24:c7:0f:ec:6b:82:6d:a5:45:46:
         78:55:2e:10:2a:61:e1:59:71:6f:5d:64:f4:01:f9:a3:e5:66:
         70:3d:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:13:57 2026 by rpki-client