Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa
File:                     323830333a333831303a3a2f33322d3438203d3e20323731383339.roa (raw, json)
Hash identifier:          rt0jadmOBqDYLNxDC98ArUgN9G7OjqSUA+LmoDBfAuE=
Subject key identifier:   3B:0C:4F:93:3E:41:AE:DB:ED:43:64:9A:76:5C:16:93:9D:28:07:2D
Certificate issuer:       /CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
Certificate serial:       0C42636C096B9C047CF5C98B47B0652DB7E2E5C7
Authority key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa
Signing time:             Tue 06 Jan 2026 20:52:28 +0000
ROA not before:           Tue 06 Jan 2026 20:47:28 +0000
ROA not after:            Tue 05 Jan 2027 20:52:28 +0000
asID:                     271839
IP address blocks:        2803:3810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:63:6c:09:6b:9c:04:7c:f5:c9:8b:47:b0:65:2d:b7:e2:e5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
        Validity
            Not Before: Jan  6 20:47:28 2026 GMT
            Not After : Jan  5 20:52:28 2027 GMT
        Subject: CN=3B0C4F933E41AEDBED43649A765C16939D28072D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:27:33:1d:91:59:a8:08:81:60:d3:e1:97:
                    46:cb:50:80:4d:e6:b7:27:dc:12:71:af:bf:93:0a:
                    73:b2:9a:ac:4c:7a:db:98:f8:93:91:c9:af:4f:fc:
                    c9:93:1c:76:6f:70:eb:d7:64:dc:21:15:2a:05:73:
                    6d:86:13:53:0d:77:0e:bb:99:d7:4a:21:24:f3:9c:
                    12:13:0e:ce:fa:b8:76:8b:63:42:7e:40:7f:1d:ad:
                    59:cf:fd:63:18:7a:07:20:24:f7:f9:fc:96:8d:da:
                    49:1a:02:c2:1f:cb:78:84:5d:79:75:46:a7:24:90:
                    a7:d8:80:e7:da:81:48:f6:37:b7:81:3d:f0:ae:36:
                    e1:93:30:5b:63:68:39:b1:70:c7:dd:b7:b1:53:84:
                    67:f0:c1:c9:ce:2a:51:b8:8c:34:24:84:7e:41:01:
                    e6:4f:e4:86:c7:1a:cc:8d:ab:a6:52:28:e8:fc:ef:
                    cd:dd:e2:ab:33:86:df:d0:cc:a1:bb:0c:8e:2b:39:
                    6c:22:20:68:68:59:31:5a:3d:1d:7f:e9:15:b5:4b:
                    28:56:86:cb:99:ac:d0:81:a4:ac:fd:ef:01:ea:e8:
                    d6:99:4e:a8:45:1f:8c:37:a4:7b:bf:73:99:2c:72:
                    04:32:8e:7a:b7:a4:89:97:37:17:05:58:49:97:00:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:4F:93:3E:41:AE:DB:ED:43:64:9A:76:5C:16:93:9D:28:07:2D
            X509v3 Authority Key Identifier:
                keyid:2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:58:ec:37:82:e8:9d:73:73:41:33:5a:ec:a7:b5:a0:45:03:
         55:bc:1b:7e:2e:54:81:e7:75:c3:10:e0:3f:77:8c:e0:c3:4c:
         66:df:31:68:1e:fe:42:51:84:d9:d3:5c:13:e1:bb:98:54:aa:
         b5:9b:6b:9c:f4:61:d4:e1:3c:35:ad:ca:07:1c:51:ef:40:12:
         29:34:1b:e1:65:1f:4d:a5:d8:eb:3f:f4:be:8e:93:74:52:7a:
         03:f3:b9:ab:5d:76:80:ab:ee:28:9d:b4:1e:38:7d:40:86:8e:
         e7:8c:6c:e0:9d:c1:80:eb:b8:af:61:82:9c:62:71:38:10:b5:
         58:bf:91:9a:de:d9:b6:04:18:2d:a9:32:e9:53:72:3e:48:01:
         34:19:98:d4:a0:71:48:2f:8f:76:3e:72:50:40:75:10:07:8f:
         b7:c0:cd:d7:18:18:5f:b7:11:34:59:eb:dd:3e:47:46:d9:e2:
         f2:f6:91:0d:76:73:b0:22:34:a5:c7:a7:9a:3a:81:52:83:13:
         ec:d3:f8:52:31:43:38:08:b3:95:b9:3c:05:72:06:2d:42:a7:
         2f:9e:54:50:80:2c:63:76:b9:89:e7:f3:59:f9:cf:6e:a2:ae:
         d6:42:99:f4:df:52:b2:5e:63:a7:0c:e4:22:1a:d6:b3:95:ad:
         3e:a9:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:19 2026 by rpki-client