Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
File:                     323830333a643036303a3a2f33322d3438203d3e20323637383133.roa (raw, json)
Hash identifier:          j6jSW1Gm5f/Pby8xHzzM+gJ8jrJyKr2jeqSCIP+wghc=
Subject key identifier:   5E:85:97:0F:BB:5D:CF:47:92:BD:D5:E3:B3:37:1C:FE:42:BB:77:F1
Certificate issuer:       /CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Certificate serial:       31AD3E04C7A2D5F0840665BD2FB8ABD720971254
Authority key identifier: 4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
Signing time:             Tue 06 Jan 2026 19:36:58 +0000
ROA not before:           Tue 06 Jan 2026 19:31:58 +0000
ROA not after:            Tue 05 Jan 2027 19:36:58 +0000
asID:                     267813
IP address blocks:        2803:d060::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ad:3e:04:c7:a2:d5:f0:84:06:65:bd:2f:b8:ab:d7:20:97:12:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
        Validity
            Not Before: Jan  6 19:31:58 2026 GMT
            Not After : Jan  5 19:36:58 2027 GMT
        Subject: CN=5E85970FBB5DCF4792BDD5E3B3371CFE42BB77F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:14:d0:73:c2:09:cb:b4:32:91:3e:ab:98:
                    d9:8e:dc:a9:19:1c:3a:7a:eb:f6:ad:6f:7f:3a:42:
                    ba:ec:e9:25:bb:ac:9d:ab:85:5f:64:04:cb:50:b2:
                    7e:7b:7b:b9:c9:01:1a:f9:df:59:78:fe:a0:14:c4:
                    0a:fd:1a:bb:84:0a:8c:93:32:32:af:b5:88:86:64:
                    32:84:f7:51:7d:6a:48:9a:be:48:c9:4a:42:bc:92:
                    23:0a:68:d0:fb:ce:98:b4:b9:09:b2:47:25:b9:ec:
                    07:90:6e:ad:a5:48:2f:40:d6:fe:d1:4a:8e:7a:18:
                    22:27:48:ab:ff:2b:7e:bd:20:14:3e:12:68:18:e9:
                    44:97:2f:59:ab:eb:da:00:d8:ce:39:01:f9:0a:e6:
                    0e:9e:23:b2:25:3b:88:4c:c7:d5:de:7e:7f:50:05:
                    f4:f2:99:e7:36:f5:a4:39:25:f0:80:ab:7b:2a:48:
                    7f:53:97:cc:49:5e:8f:d7:b6:06:23:3f:94:30:36:
                    76:98:f7:f1:d6:3f:48:4c:8d:9d:dc:ef:6e:97:d7:
                    67:2a:b3:a0:0d:26:43:98:44:f4:d1:66:a5:ab:7a:
                    74:8b:b7:97:7a:dd:2d:9e:4b:65:30:6b:44:37:ea:
                    72:88:00:79:0d:89:bd:09:82:e0:47:99:ec:21:a1:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:85:97:0F:BB:5D:CF:47:92:BD:D5:E3:B3:37:1C:FE:42:BB:77:F1
            X509v3 Authority Key Identifier:
                keyid:4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d060::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:40:fb:7a:5b:7f:53:5e:b6:59:3e:bb:a8:6a:97:e8:89:c1:
         1f:af:8e:a3:70:db:16:1b:ad:2b:64:8b:5e:2c:07:4a:9f:57:
         97:fb:5c:00:c6:60:32:58:ac:7f:e6:b8:fc:8a:b5:07:38:e0:
         6a:15:08:bf:ba:e7:e4:7d:57:32:0f:58:e3:6b:ed:f0:ac:51:
         a2:65:9f:2f:0f:8c:6a:cb:b9:af:2c:fc:e2:ca:14:d1:7a:4d:
         7d:ba:04:4b:13:f8:00:39:52:92:90:1e:b6:b5:41:68:a4:3b:
         d2:b8:2b:53:0a:fd:02:35:ac:81:61:e9:84:00:25:e0:a1:64:
         09:bb:af:d3:c5:85:d6:35:0a:5f:7b:d6:2d:0c:fd:5d:f2:5c:
         e9:df:06:66:3a:a9:44:e0:62:b5:cd:66:d9:e7:1c:b4:29:c6:
         63:df:3f:fc:a3:f7:ee:98:2f:ae:ba:30:4b:b3:3a:9b:7c:5b:
         d1:d8:9a:71:a4:fb:51:85:db:ec:48:dc:76:41:7e:99:c0:3c:
         f7:be:e8:34:52:af:37:77:a4:9e:58:fa:0d:91:41:23:28:8b:
         f6:9f:bf:3f:ed:89:ed:fa:7d:c5:15:dc:4a:80:95:1d:d3:08:
         bc:e8:e4:d7:f9:60:79:ca:23:62:03:e6:8f:26:e9:43:4c:1c:
         da:ad:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:46 2026 by rpki-client