Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/323830333a653838303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a653838303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          ZRt9Sn9XRQFG9bM0r5E++v3aPuhx7H4twoqUa3XEcsM=
Subject key identifier:   FE:43:1C:0D:B2:58:62:47:E0:90:95:C9:57:BD:FE:90:53:4E:FE:6D
Certificate issuer:       /CN=118F90F371D9C027A32B54664D90927AD358EA5B
Certificate serial:       3370A3A5DEA327E7D4BC6E51F207CF0D26425F71
Authority key identifier: 11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/323830333a653838303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:19:06 +0000
ROA not before:           Tue 06 Jan 2026 19:14:06 +0000
ROA not after:            Tue 05 Jan 2027 19:19:06 +0000
asID:                     52468
IP address blocks:        2803:e880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:70:a3:a5:de:a3:27:e7:d4:bc:6e:51:f2:07:cf:0d:26:42:5f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118F90F371D9C027A32B54664D90927AD358EA5B
        Validity
            Not Before: Jan  6 19:14:06 2026 GMT
            Not After : Jan  5 19:19:06 2027 GMT
        Subject: CN=FE431C0DB2586247E09095C957BDFE90534EFE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:14:e0:69:b8:50:c3:81:8a:6d:76:57:b2:
                    0a:dd:78:32:94:21:46:16:79:fb:c5:3e:dd:f7:25:
                    34:32:7b:01:ba:57:eb:e1:23:47:33:cf:1d:e7:78:
                    65:35:91:72:5e:07:59:f3:73:46:fb:f7:4f:31:2b:
                    4e:7e:08:0c:50:2a:9c:4f:2a:8a:2c:72:8f:50:ab:
                    9b:73:33:57:00:85:7c:4e:f2:90:88:3c:77:06:7e:
                    80:36:06:18:a1:44:38:70:ee:14:cf:5c:47:ec:d1:
                    d3:c8:df:5a:84:1e:3c:92:1c:61:b6:8f:f6:30:6e:
                    ca:4d:94:93:f9:12:b1:62:66:42:89:11:15:22:ee:
                    39:4b:49:29:b2:55:1c:48:99:d1:5b:54:60:85:33:
                    3d:fe:49:af:69:57:49:3c:0d:84:8c:dd:a6:61:19:
                    f5:f3:75:87:1a:42:f0:6d:7c:31:a7:df:8d:33:71:
                    73:9f:6a:20:9b:2b:8c:96:ba:21:77:4a:0f:0d:8a:
                    45:a0:d3:fe:d2:92:d7:aa:0b:a7:f5:bd:ab:15:f1:
                    a2:db:1e:8a:be:6a:e5:15:12:5f:51:c8:86:a5:35:
                    fa:35:38:83:07:82:34:70:6e:1f:5f:d7:e0:6d:57:
                    ba:6b:29:13:90:00:05:3b:32:fa:22:5c:78:0a:3e:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:1C:0D:B2:58:62:47:E0:90:95:C9:57:BD:FE:90:53:4E:FE:6D
            X509v3 Authority Key Identifier:
                keyid:11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/323830333a653838303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:5a:61:a1:fb:7b:9d:2b:17:4e:38:d9:e6:35:be:f6:3c:
         d7:fe:02:ef:39:d4:28:6e:8a:27:03:d0:72:84:81:a3:bf:bd:
         50:39:48:8c:3c:19:97:06:33:11:0b:36:f4:af:19:49:e4:e8:
         70:43:8b:20:dc:aa:82:4a:a2:6d:2f:06:88:2d:cc:d2:32:ef:
         e8:7e:62:13:9d:a1:d9:99:dc:f1:2d:52:ec:b4:84:30:b0:4e:
         da:e8:b5:61:11:9b:43:62:cf:95:9b:58:99:d0:05:d6:35:e9:
         79:ba:e1:cd:4e:de:c3:c9:76:16:4d:41:79:19:0c:1a:45:23:
         dc:85:52:57:24:e4:d6:30:9b:ea:0e:f7:59:c5:16:11:72:9c:
         9a:1e:53:55:4e:37:8a:ec:fc:bd:19:c5:61:58:5c:82:0e:7c:
         14:50:56:a3:b2:e0:13:37:3e:4f:37:88:d3:ed:2e:a0:a9:44:
         a7:c6:27:d4:27:c0:e6:7b:64:01:73:d2:23:b5:31:6f:50:aa:
         b5:54:1d:57:ad:74:b8:8d:9b:89:b5:e2:cb:7a:da:26:a4:5e:
         cf:e1:b3:73:59:85:55:cf:43:97:e5:74:e8:09:28:40:95:1e:
         7a:e0:d3:8b:dc:14:81:e7:61:a3:a9:3d:4e:6e:11:52:d2:10:
         47:3c:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:24:28 2026 by rpki-client