Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa
File:                     323830333a623838303a3a2f33322d3438203d3e20323635383034.roa (raw, json)
Hash identifier:          HdIx3VbBN0f1Tfa5bl4wmW66K4l7SSowrtQwCGSIWzc=
Subject key identifier:   7A:5F:74:00:A6:A2:98:90:46:D1:FA:BB:7C:36:CE:38:82:8C:52:F2
Certificate issuer:       /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial:       51B45FA39526063269FD52A549FF94FDEFE92CA5
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa
Signing time:             Tue 06 Jan 2026 19:17:03 +0000
ROA not before:           Tue 06 Jan 2026 19:12:03 +0000
ROA not after:            Tue 05 Jan 2027 19:17:03 +0000
asID:                     265804
IP address blocks:        2803:b880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 04:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:5f:a3:95:26:06:32:69:fd:52:a5:49:ff:94:fd:ef:e9:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
        Validity
            Not Before: Jan  6 19:12:03 2026 GMT
            Not After : Jan  5 19:17:03 2027 GMT
        Subject: CN=7A5F7400A6A2989046D1FABB7C36CE38828C52F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:01:25:f1:08:af:f8:89:2d:1c:96:28:61:
                    27:cf:52:10:bc:e7:3d:82:c0:fd:83:03:d8:6b:36:
                    86:a0:6d:88:ac:01:0b:73:02:bb:85:5a:32:8f:ce:
                    b1:f4:77:f3:0d:ac:9a:95:d7:27:98:e6:ab:a6:bf:
                    0e:35:17:31:a9:56:8d:9b:0d:25:78:61:60:63:16:
                    05:02:03:e5:31:8d:42:a4:dc:aa:29:da:0e:38:18:
                    d0:8d:31:10:85:fb:f7:dc:f4:28:0a:d6:3e:a9:47:
                    40:2e:b5:d6:a0:fe:b8:50:7e:e6:d6:6f:8b:af:b5:
                    bd:69:20:7a:be:ee:cf:f0:44:67:39:1d:cf:94:46:
                    3b:f5:2e:39:fa:a3:b9:95:7d:7b:58:80:9b:2f:8f:
                    20:fe:a5:7a:69:3a:8d:14:e0:77:37:d6:f5:af:60:
                    64:ff:48:d7:2a:4d:14:d9:0a:c3:a3:e7:af:bd:9d:
                    64:a8:b6:ba:20:18:f7:aa:b6:66:c6:9f:6b:e1:99:
                    08:3f:01:d2:ff:17:a8:e6:64:35:c6:2f:c7:56:35:
                    af:84:df:98:45:f0:75:25:64:67:a1:1c:37:94:10:
                    5e:89:9b:1e:5e:78:8b:ef:51:ad:1b:cc:3b:2d:f2:
                    b6:fc:0d:8c:3d:bf:66:ad:81:e6:3a:1a:fe:a0:47:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:74:00:A6:A2:98:90:46:D1:FA:BB:7C:36:CE:38:82:8C:52:F2
            X509v3 Authority Key Identifier:
                keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b880::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:b8:2c:55:0a:da:42:5a:58:1d:1a:0a:1d:26:4d:42:83:
         bb:09:11:ac:50:52:98:42:ca:fc:a5:d4:ff:58:dd:13:2f:23:
         77:60:db:9f:20:55:58:37:05:c9:0f:ce:99:11:6e:a2:f8:38:
         7d:6a:d8:82:b0:d0:52:ae:12:a3:7f:f1:fb:6d:93:20:6f:a5:
         ae:f0:6f:66:18:13:bc:44:b1:ce:22:b3:e4:13:50:b8:dd:2f:
         a7:83:2a:46:c4:68:18:63:07:d7:1b:f9:b5:f2:e3:39:4b:98:
         80:7c:a0:a8:a9:0c:a2:da:05:4e:47:37:e9:fb:1d:fc:54:8b:
         7d:13:e0:31:13:e8:2d:d2:0f:9a:7d:bd:56:c4:b0:3f:e0:4d:
         29:0c:4f:74:cc:ee:48:66:af:22:cc:6b:24:43:09:49:c5:25:
         9b:ce:3b:14:41:1b:21:b6:c7:2e:eb:0d:d4:17:14:29:b2:31:
         3b:de:db:4a:68:c2:71:67:91:b2:c5:17:f8:0f:16:29:bc:86:
         17:36:e7:12:4b:61:c4:f6:a6:0a:df:65:b5:c4:c5:5e:86:1a:
         ab:de:8f:20:50:9a:f6:cf:2a:5a:8d:9c:fb:04:96:39:52:74:
         80:d3:38:16:23:5e:46:7f:21:a3:ea:63:dd:b1:bf:40:c5:12:
         bb:c3:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:21 2026 by rpki-client