Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa
File:                     323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          eXSUw7Yt6v89oNm+s6+ClXZheKnQHI8jsObfz6tbuow=
Subject key identifier:   57:C0:B4:00:54:6C:53:08:9E:8A:26:6D:C6:32:2D:27:0C:C3:86:D9
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       0CBCCD8A46452001D841606B597F4FC56D6957AC
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa
Signing time:             Tue 06 Jan 2026 19:46:00 +0000
ROA not before:           Tue 06 Jan 2026 19:41:00 +0000
ROA not after:            Tue 05 Jan 2027 19:46:00 +0000
asID:                     198949
IP address blocks:        2801:0:4d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bc:cd:8a:46:45:20:01:d8:41:60:6b:59:7f:4f:c5:6d:69:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:41:00 2026 GMT
            Not After : Jan  5 19:46:00 2027 GMT
        Subject: CN=57C0B400546C53089E8A266DC6322D270CC386D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:69:73:aa:b6:1a:f4:a7:cf:a0:53:75:9f:
                    23:6c:58:37:f7:0b:4d:c7:e3:49:15:8a:80:80:af:
                    52:01:6f:36:f9:2a:a8:06:2b:f8:44:aa:ae:a1:6e:
                    15:2e:b7:9b:66:de:19:24:68:2a:19:ea:0c:4d:29:
                    ca:c7:79:61:c1:f8:6c:47:77:77:2a:eb:9b:98:9e:
                    42:25:ab:96:e4:86:5d:de:29:a0:25:78:55:99:53:
                    85:71:d3:99:8d:9e:99:5f:e1:92:5a:47:56:8f:1f:
                    73:2e:04:e7:62:68:65:80:b6:52:3a:5e:d6:ed:a8:
                    06:7f:7b:ae:00:56:87:a6:b9:39:e1:9b:1b:a6:49:
                    33:5d:6f:b5:37:8b:f2:ba:8e:d4:b1:61:0b:ac:b9:
                    74:b9:0d:12:5d:99:6b:9f:99:a5:50:fd:53:dd:34:
                    e5:c8:9c:8e:b0:ed:18:80:bf:ef:83:fd:55:42:37:
                    05:dd:9b:5f:f4:5c:36:26:30:23:46:41:81:d2:a6:
                    d3:84:04:b5:73:aa:ea:08:cd:86:3d:b6:47:93:b5:
                    3b:5e:48:b5:03:ce:7b:f9:88:f3:d1:20:2f:c8:fa:
                    1b:17:2e:18:07:10:e9:9f:a9:f6:8f:22:ad:41:a2:
                    97:a6:c4:de:2a:56:6d:0c:c0:1f:69:b2:86:cc:24:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:B4:00:54:6C:53:08:9E:8A:26:6D:C6:32:2D:27:0C:C3:86:D9
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:be:de:83:e2:a6:2a:45:dc:83:13:1e:be:cf:09:96:b5:df:
         93:b7:34:a7:8f:21:5f:24:13:47:43:cd:bc:07:d7:71:7e:42:
         e2:70:98:76:36:09:73:96:c9:4c:7b:f2:35:34:e6:69:f4:9a:
         ba:dc:0c:7d:c0:57:77:03:c0:4f:02:cd:75:3c:63:9a:33:96:
         61:f0:75:49:ac:1e:bc:61:d8:f1:05:0e:ce:d3:27:9e:f2:67:
         2d:b2:6a:62:33:23:05:df:2e:08:15:ba:71:5b:da:27:c2:15:
         e2:0e:a4:47:7d:2b:30:fa:34:b7:d3:1b:42:ca:32:20:ce:6c:
         22:29:4e:d7:d6:fb:c4:d0:8b:79:30:57:51:6b:96:cf:d6:3f:
         d0:6f:40:06:c5:51:3c:0a:ab:e2:1d:79:56:84:df:91:41:05:
         3b:07:c8:50:68:14:31:0c:55:8c:75:85:62:44:81:f0:d7:73:
         ce:ee:f2:60:67:fb:b2:0c:c0:aa:c1:75:b0:d1:7a:31:e4:57:
         63:c1:56:6b:6b:bb:9a:ee:30:0d:d6:ba:ec:c2:00:4d:81:78:
         df:ed:e2:8b:94:62:16:fb:48:1f:7c:ee:88:7c:62:ed:69:3a:
         de:07:c6:25:48:0f:f2:b9:4b:9f:56:d6:96:b3:6e:88:b9:01:
         ea:c8:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:54:19 2026 by rpki-client