Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa
File:                     323830333a383638303a3a2f33322d3438203d3e203532343635.roa (raw, json)
Hash identifier:          9vcLMFphkAmaFunVWl1bSi3++ctgNi3RDC/Ok5BcKGU=
Subject key identifier:   24:0C:6E:0C:CA:8E:11:EB:2D:6B:82:85:F1:49:00:CE:5D:E8:A9:4D
Certificate issuer:       /CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
Certificate serial:       7395F5C7CE9232E93B9071A4800CD59DE4E24A87
Authority key identifier: 65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa
Signing time:             Tue 06 Jan 2026 20:51:43 +0000
ROA not before:           Tue 06 Jan 2026 20:46:43 +0000
ROA not after:            Tue 05 Jan 2027 20:51:43 +0000
asID:                     52465
IP address blocks:        2803:8680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:95:f5:c7:ce:92:32:e9:3b:90:71:a4:80:0c:d5:9d:e4:e2:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
        Validity
            Not Before: Jan  6 20:46:43 2026 GMT
            Not After : Jan  5 20:51:43 2027 GMT
        Subject: CN=240C6E0CCA8E11EB2D6B8285F14900CE5DE8A94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:cd:e0:8c:20:b0:45:6b:ef:c9:22:0b:c3:
                    5a:2d:6c:00:c5:46:0b:d0:1f:8a:62:2c:a3:22:a6:
                    c0:ef:5c:50:cf:48:3a:cd:fb:b1:8c:fa:e7:81:9e:
                    38:1c:94:30:83:17:b9:9a:82:5d:fd:b2:4a:a1:0d:
                    b4:ef:25:86:c8:e7:74:fa:b2:c5:e5:1e:c8:6f:56:
                    fd:92:34:b1:9a:2d:25:75:a6:64:1e:34:84:1f:70:
                    a7:e5:05:25:fe:c4:23:8e:f2:2c:fe:69:32:24:70:
                    98:60:fe:f6:bf:aa:ef:4d:7e:25:78:9d:1c:ac:4f:
                    f2:a2:87:ee:f1:87:97:ad:24:e4:d5:d8:3b:f8:64:
                    e0:2f:8b:c0:e1:2a:36:7a:2d:77:4c:d5:c7:fd:96:
                    04:ef:ee:f6:d0:80:2c:57:ff:6d:aa:53:e8:30:18:
                    5e:d8:b7:1a:03:68:c6:da:54:47:6f:b5:52:f6:46:
                    70:4d:5f:7e:10:e9:2d:91:95:a9:ab:79:d7:32:72:
                    7c:18:81:3e:92:05:86:2d:45:99:57:35:ca:bf:49:
                    d7:9e:0b:b9:6f:57:c9:92:9d:c4:47:03:c5:05:de:
                    3a:bf:fa:22:de:c8:f9:2e:27:6a:58:99:b3:81:38:
                    7f:3d:9b:f9:a8:03:9a:3f:5e:6c:fd:8d:e7:ad:ed:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:6E:0C:CA:8E:11:EB:2D:6B:82:85:F1:49:00:CE:5D:E8:A9:4D
            X509v3 Authority Key Identifier:
                keyid:65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8680::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:41:7d:2b:b0:2b:f8:15:c0:1e:dd:3c:f8:1c:46:e6:53:9a:
         19:77:10:0a:1f:fd:97:88:43:6b:cf:5d:37:d0:ba:14:5f:15:
         2f:24:a1:73:92:af:79:13:13:c8:37:c8:8b:54:df:4c:f5:06:
         56:d8:d0:0f:7e:19:dd:21:29:ae:c4:f5:3b:1d:fe:71:87:4b:
         de:87:bf:48:5e:02:8a:ad:31:23:34:16:42:d4:c2:ac:5a:47:
         b8:7c:40:7e:3e:90:cf:b6:08:df:0e:5a:54:32:4e:d0:8a:2d:
         1f:e9:af:06:c1:ba:11:54:03:68:1e:e9:27:49:72:81:f3:4f:
         c1:e1:f6:a8:3e:b5:65:13:82:91:58:c6:7e:17:71:2f:2a:df:
         c7:a1:50:84:15:aa:42:01:56:d6:c0:99:0b:17:ef:bb:75:a0:
         d3:d4:2c:64:4b:94:c2:2a:91:cc:8f:b1:84:cb:b9:2f:1d:6c:
         29:bf:1f:e2:61:89:4c:ec:79:4b:20:cd:a4:97:65:0c:81:ce:
         8a:0c:b6:39:9d:6b:2f:2c:c6:cd:df:96:30:b8:76:06:15:85:
         8d:be:54:e9:52:a8:01:8f:d1:a0:3f:4b:aa:c4:6f:1e:48:d7:
         fe:48:12:d6:ae:4a:78:84:0a:a1:c0:c1:5a:be:91:05:3d:bd:
         8f:3a:c8:ac
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUc5X1x86SMuk7kHGkgAzVneTiSocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUzQkNDQzhEQUIwNDU5QTVEMjNCQ0IxNDM3OTM4QUM2
MTVENTAyMzAeFw0yNjAxMDYyMDQ2NDNaFw0yNzAxMDUyMDUxNDNaMDMxMTAvBgNV
BAMTKDI0MEM2RTBDQ0E4RTExRUIyRDZCODI4NUYxNDkwMENFNURFOEE5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmis3gjCCwRWvvySILw1otbADF
RgvQH4piLKMipsDvXFDPSDrN+7GM+ueBnjgclDCDF7magl39skqhDbTvJYbI53T6
ssXlHshvVv2SNLGaLSV1pmQeNIQfcKflBSX+xCOO8iz+aTIkcJhg/va/qu9NfiV4
nRysT/Kih+7xh5etJOTV2Dv4ZOAvi8DhKjZ6LXdM1cf9lgTv7vbQgCxX/22qU+gw
GF7YtxoDaMbaVEdvtVL2RnBNX34Q6S2RlamredcycnwYgT6SBYYtRZlXNcq/Sdee
C7lvV8mSncRHA8UF3jq/+iLeyPkuJ2pYmbOBOH89m/moA5o/Xmz9jeet7ZS9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUJAxuDMqOEesta4KF8UkAzl3oqU0wHwYDVR0j
BBgwFoAUZTvMyNqwRZpdI7yxQ3k4rGFdUCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QTU5NDQ2MTFGREYyQjJDQ0FEMDM2MzkwNjU4RDM3QThD
Qzg5RUVENEQxRTM2REQ2RUFBNUI0MjcyMzg0RDgxLzAvNjUzQkNDQzhEQUIwNDU5
QTVEMjNCQ0IxNDM3OTM4QUM2MTVENTAyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTNCQ0NDOERBQjA0NTlBNUQy
M0JDQjE0Mzc5MzhBQzYxNUQ1MDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUE1OTQ0NjExRkRGMkIyQ0NBRDAzNjM5MDY1OEQzN0E4Q0M4OUVFRDRE
MUUzNkRENkVBQTVCNDI3MjM4NEQ4MS8wLzMyMzgzMDMzM2EzODM2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4aAMA0G
CSqGSIb3DQEBCwUAA4IBAQCAQX0rsCv4FcAe3Tz4HEbmU5oZdxAKH/2XiENrz103
0LoUXxUvJKFzkq95ExPIN8iLVN9M9QZW2NAPfhndISmuxPU7Hf5xh0veh79IXgKK
rTEjNBZC1MKsWke4fEB+PpDPtgjfDlpUMk7Qii0f6a8GwboRVANoHuknSXKB80/B
4faoPrVlE4KRWMZ+F3EvKt/HoVCEFapCAVbWwJkLF++7daDT1CxkS5TCKpHMj7GE
y7kvHWwpvx/iYYlM7HlLIM2kl2UMgc6KDLY5nWsvLMbN35YwuHYGFYWNvlTpUqgB
j9GgP0uqxG8eSNf+SBLWrkp4hAqhwMFavpEFPb2POsis
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:14 2026 by rpki-client