Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa
File:                     323830333a393232303a3a2f33322d3332203d3e20323635383432.roa (raw, json)
Hash identifier:          f9LwPatJ6vSaEFDbyLA2vkxprykxE7Va8ruEVhCzvd4=
Subject key identifier:   C7:F1:F6:B0:E5:22:FF:23:AA:E4:10:34:77:12:FA:13:A1:95:0A:F3
Certificate issuer:       /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial:       38C0E958F60B1649FB8E21ACCB0A9C89263E6B92
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa
Signing time:             Tue 06 Jan 2026 19:26:05 +0000
ROA not before:           Tue 06 Jan 2026 19:21:05 +0000
ROA not after:            Tue 05 Jan 2027 19:26:05 +0000
asID:                     265842
IP address blocks:        2803:9220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c0:e9:58:f6:0b:16:49:fb:8e:21:ac:cb:0a:9c:89:26:3e:6b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Validity
            Not Before: Jan  6 19:21:05 2026 GMT
            Not After : Jan  5 19:26:05 2027 GMT
        Subject: CN=C7F1F6B0E522FF23AAE410347712FA13A1950AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:91:fb:e4:6d:f1:3f:03:da:16:57:94:f8:
                    d1:08:de:c4:76:f9:e1:c5:f8:aa:87:64:30:49:c1:
                    4f:f8:9a:72:9f:a3:b8:eb:b5:fe:99:be:f6:5c:b9:
                    fe:4c:ce:43:ad:b7:64:9c:da:cc:47:6a:d5:95:ab:
                    1d:94:de:21:8d:b6:9a:22:1f:0c:01:ea:d2:56:e4:
                    8f:79:16:6c:ef:cb:94:a5:2c:33:52:0b:50:ff:d0:
                    91:38:32:a1:ae:19:22:20:e3:55:88:90:99:55:fc:
                    9e:65:53:e1:4d:41:3e:b6:91:38:75:87:bb:2a:7d:
                    c7:be:0b:b4:d0:c3:78:87:0c:6a:7a:50:ad:f7:83:
                    6d:6a:58:41:6b:8e:a9:a0:f1:02:fe:d9:ea:69:b9:
                    60:49:a4:b7:25:ee:48:be:9a:97:9f:ae:af:b3:06:
                    1a:64:34:68:1f:cf:af:b2:d4:18:40:02:a9:ed:c4:
                    b4:11:91:68:dc:45:62:57:b9:4d:8a:bb:e1:bb:26:
                    b9:e4:05:6a:a0:7c:be:d8:3d:67:04:e7:45:ff:24:
                    2d:f5:68:60:4b:3f:8b:81:bb:ab:34:18:bb:44:b8:
                    7e:9b:a2:a2:45:ee:53:5e:70:e1:f9:37:7c:ef:a5:
                    9e:0a:8d:56:54:4f:db:b9:0c:8f:4c:69:14:ab:d8:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:F6:B0:E5:22:FF:23:AA:E4:10:34:77:12:FA:13:A1:95:0A:F3
            X509v3 Authority Key Identifier:
                keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:ba:44:88:90:64:00:13:59:47:c0:50:e4:01:57:a1:58:
         67:17:a1:dc:5c:95:22:c3:07:08:96:8c:49:5b:3f:99:5a:70:
         b4:18:c4:85:71:0f:51:37:1d:6b:ef:1f:d2:c6:41:df:89:dc:
         36:dc:02:6d:ab:91:85:86:30:d3:88:bb:ee:d3:53:07:40:8f:
         47:a2:30:96:d7:57:89:57:99:66:a6:da:89:de:5f:43:53:fa:
         a0:af:c7:3e:c8:a6:5f:ba:4c:7c:16:a1:08:98:ed:89:ff:50:
         79:f6:81:2e:46:1e:1a:6c:a5:bb:9a:9d:d6:52:af:97:58:65:
         53:9f:00:81:62:cb:3f:06:b2:93:7b:02:dd:ae:f5:a2:b8:40:
         8c:79:f4:d9:51:71:f9:13:e6:cf:2f:05:61:3d:83:c1:55:ab:
         b5:84:91:7d:7c:85:51:79:0b:66:c3:8b:7e:e3:72:f3:e5:78:
         49:af:36:8b:e9:fd:cc:a9:30:12:fc:f9:25:65:ff:ba:62:99:
         f8:82:3c:3d:78:46:52:d9:72:6b:1c:96:1f:c4:d5:3b:1a:dd:
         15:b8:78:d5:5d:80:96:ec:f8:23:4c:8d:b9:d7:90:f8:fb:5e:
         a6:e4:f0:b9:21:dd:57:74:3f:9b:c9:d7:e3:bb:e4:0e:c9:81:
         d6:22:69:a9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOMDpWPYLFkn7jiGsywqciSY+a5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUwRTlDNDg0MUU3RkQxRTQwMjc4NkRCRDhBMUIzNUY2
OUFEQzVFMTAeFw0yNjAxMDYxOTIxMDVaFw0yNzAxMDUxOTI2MDVaMDMxMTAvBgNV
BAMTKEM3RjFGNkIwRTUyMkZGMjNBQUU0MTAzNDc3MTJGQTEzQTE5NTBBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm5H75G3xPwPaFleU+NEI3sR2
+eHF+KqHZDBJwU/4mnKfo7jrtf6ZvvZcuf5MzkOtt2Sc2sxHatWVqx2U3iGNtpoi
HwwB6tJW5I95Fmzvy5SlLDNSC1D/0JE4MqGuGSIg41WIkJlV/J5lU+FNQT62kTh1
h7sqfce+C7TQw3iHDGp6UK33g21qWEFrjqmg8QL+2eppuWBJpLcl7ki+mpefrq+z
BhpkNGgfz6+y1BhAAqntxLQRkWjcRWJXuU2Ku+G7JrnkBWqgfL7YPWcE50X/JC31
aGBLP4uBu6s0GLtEuH6boqJF7lNecOH5N3zvpZ4KjVZUT9u5DI9MaRSr2CFlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUx/H2sOUi/yOq5BA0dxL6E6GVCvMwHwYDVR0j
BBgwFoAU3g6cSEHn/R5AJ4bb2KGzX2mtxeEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUY2NDEyOUEzMjc1RTExRkM1RTMzMjgwQzZCNjVEMDc3
RTA3Mjk1QTJGNDkwMjU4ODhCMzcyMkI3MDlFNkZFLzAvREUwRTlDNDg0MUU3RkQx
RTQwMjc4NkRCRDhBMUIzNUY2OUFEQzVFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERTBFOUM0ODQxRTdGRDFFNDAy
Nzg2REJEOEExQjM1RjY5QURDNUUxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGNjQxMjlBMzI3NUUxMUZDNUUzMzI4MEM2QjY1RDA3N0UwNzI5NUEy
RjQ5MDI1ODg4QjM3MjJCNzA5RTZGRS8wLzMyMzgzMDMzM2EzOTMyMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM4MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDkiAw
DQYJKoZIhvcNAQELBQADggEBAGjkukSIkGQAE1lHwFDkAVehWGcXodxclSLDBwiW
jElbP5lacLQYxIVxD1E3HWvvH9LGQd+J3DbcAm2rkYWGMNOIu+7TUwdAj0eiMJbX
V4lXmWam2oneX0NT+qCvxz7Ipl+6THwWoQiY7Yn/UHn2gS5GHhpspbuandZSr5dY
ZVOfAIFiyz8GspN7At2u9aK4QIx59NlRcfkT5s8vBWE9g8FVq7WEkX18hVF5C2bD
i37jcvPleEmvNovp/cypMBL8+SVl/7pimfiCPD14RlLZcmsclh/E1Tsa3RW4eNVd
gJbs+CNMjbnXkPj7Xqbk8Lkh3Vd0P5vJ1+O75A7JgdYiaak=
-----END CERTIFICATE-----
Generated at Wed Feb 18 23:08:51 2026 by rpki-client