Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          9c4U5M49Ft0Y7bvTm12ORu6Mh02VNVoEV9+oPuh++Sc=
Subject key identifier:   A2:00:C0:4D:9B:45:A9:F6:B8:33:BB:4B:A2:2B:A5:F9:F7:59:6C:A9
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       364B2C70A3E14EADAD556965D54D6FB15C172131
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa
Signing time:             Sun 08 Feb 2026 03:29:32 +0000
ROA not before:           Sun 08 Feb 2026 03:24:32 +0000
ROA not after:            Sun 07 Feb 2027 03:29:32 +0000
asID:                     52423
IP address blocks:        2803:6900:627::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4b:2c:70:a3:e1:4e:ad:ad:55:69:65:d5:4d:6f:b1:5c:17:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  8 03:24:32 2026 GMT
            Not After : Feb  7 03:29:32 2027 GMT
        Subject: CN=A200C04D9B45A9F6B833BB4BA22BA5F9F7596CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:74:84:8f:d1:df:10:7b:11:4b:9e:ab:ba:
                    ba:c1:7c:0a:c3:23:68:fe:b1:03:03:77:d8:56:7c:
                    47:3b:5b:91:10:09:9a:e7:1b:da:21:df:e8:b8:5b:
                    79:93:70:e6:01:d0:19:f0:f1:0a:8c:92:54:02:bd:
                    9c:1e:27:3b:78:91:c4:a7:66:e8:84:b8:b4:e2:66:
                    33:e0:f8:31:a0:09:b6:76:0f:20:0c:74:04:71:1b:
                    64:d8:64:77:e9:aa:3f:0a:73:be:e4:35:93:4b:3a:
                    d7:a2:39:47:8e:3f:9d:3e:d6:2b:56:44:33:6b:59:
                    de:b1:cf:a4:37:08:c6:b7:9a:be:f3:2b:a3:a9:00:
                    97:0f:4b:97:c5:8d:a4:59:af:3a:a3:d5:9d:63:2a:
                    2d:09:b2:15:28:d9:9b:d4:fc:9a:75:ec:52:fb:c2:
                    92:a4:a3:e7:bf:11:8a:90:12:6a:f9:24:8c:21:ec:
                    bd:52:54:18:99:f9:68:c7:18:80:90:6c:95:70:3c:
                    cd:0f:26:2a:ae:04:c9:00:26:02:10:ec:e8:5b:4b:
                    7d:29:24:1f:71:66:ec:53:a4:76:7a:48:83:79:ef:
                    14:55:e7:a3:bd:11:e2:83:10:4b:3d:6f:93:4b:ee:
                    b4:7c:5a:91:1c:16:92:13:a2:84:cd:cc:64:9b:8c:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:C0:4D:9B:45:A9:F6:B8:33:BB:4B:A2:2B:A5:F9:F7:59:6C:A9
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:627::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:06:5f:14:07:c0:0d:2b:88:0b:1e:ee:9a:e3:c5:b6:2c:2c:
         87:0e:24:f4:db:c3:cc:e2:4b:0c:c3:c3:d2:3d:a2:22:70:88:
         1b:7a:22:68:7d:71:fc:8a:f8:c3:df:46:a9:4e:f0:e4:47:53:
         45:02:4b:5e:82:8f:4d:62:0e:dd:e6:01:d2:da:82:15:31:e1:
         14:30:32:54:ce:8b:3d:fe:dd:e4:8a:ca:0f:9c:63:e8:98:8c:
         96:57:23:b9:22:c5:6e:bc:f8:01:2d:8c:4f:b5:7d:e3:27:96:
         26:b6:45:c6:e6:78:37:e6:85:7d:d0:77:c7:84:25:da:14:c7:
         05:d6:67:28:f9:9f:b7:38:47:02:14:9b:4f:29:a8:d0:7d:7a:
         ac:05:ce:41:58:bd:48:2b:5e:22:07:fb:1a:47:a4:79:95:b5:
         ec:55:68:50:21:bb:83:94:03:91:bc:d9:dc:d8:dd:53:a9:2d:
         ce:b4:a1:e4:f3:5e:3f:10:2c:f2:62:9c:92:3b:75:0b:63:25:
         82:69:fd:68:44:af:27:7d:eb:0a:81:b0:af:6e:0a:f6:33:18:
         3b:76:c2:01:2e:de:b0:31:4c:23:b8:d3:45:ed:c4:ce:d2:f3:
         fc:70:8b:2e:55:a5:bd:4e:80:b5:41:7f:84:9d:e9:bc:b1:81:
         70:0a:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:12:02 2026 by rpki-client