Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
File:                     323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (raw, json)
Hash identifier:          CS+P551Yu5V1f1S0N+nkUhlgxfNbyXLy5YTAVtPeesk=
Subject key identifier:   4B:B8:29:32:2F:D5:F0:AD:5A:99:EA:6C:B3:0C:74:D3:E3:C2:BF:54
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       14D908DD7A15D4B4698FCB39EBA5007EDF80B496
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
Signing time:             Tue 06 Jan 2026 19:44:03 +0000
ROA not before:           Tue 06 Jan 2026 19:39:03 +0000
ROA not after:            Tue 05 Jan 2027 19:44:03 +0000
asID:                     266780
IP address blocks:        2803:9f20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d9:08:dd:7a:15:d4:b4:69:8f:cb:39:eb:a5:00:7e:df:80:b4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Jan  6 19:39:03 2026 GMT
            Not After : Jan  5 19:44:03 2027 GMT
        Subject: CN=4BB829322FD5F0AD5A99EA6CB30C74D3E3C2BF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:29:2f:67:5d:32:03:98:33:38:bd:a0:4e:
                    fa:af:87:95:71:f3:dc:b8:0b:6f:1f:ff:47:cc:7e:
                    0e:ee:f2:93:65:81:ff:d4:87:6b:fb:ba:39:1c:c8:
                    6d:f9:4e:17:4c:b8:0e:be:73:7b:74:65:02:c4:7b:
                    f4:fb:6c:67:7a:17:2e:ae:ce:72:09:9a:b5:df:6b:
                    02:cc:99:bb:c6:20:bd:32:c3:b5:43:41:a0:6d:05:
                    9d:6f:3d:54:65:20:f0:58:93:a2:50:04:e6:29:10:
                    6d:bb:d1:f9:b2:5f:97:f3:a4:0d:b1:cb:22:ba:26:
                    f3:c4:da:e0:57:7a:81:9f:8c:26:ce:af:43:0f:5c:
                    80:8e:48:45:8a:53:55:41:da:54:20:e8:65:fd:cb:
                    75:17:c2:37:1c:0e:32:8f:c7:63:fb:8a:36:47:a8:
                    1c:3a:68:bd:ef:a2:aa:fc:9b:55:ef:03:8c:98:db:
                    be:4d:07:61:c8:36:a7:34:2a:f7:6b:cc:c3:6f:ce:
                    7b:2d:8e:94:b3:2c:bf:79:d5:35:06:80:cc:dc:7d:
                    96:53:90:52:6a:08:a0:35:eb:6d:57:0b:dd:24:1a:
                    d3:f2:03:41:3e:7f:0c:4e:b5:21:8f:52:28:e0:dc:
                    53:36:a2:a8:79:2f:23:c7:eb:6e:5d:05:c1:ca:21:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:29:32:2F:D5:F0:AD:5A:99:EA:6C:B3:0C:74:D3:E3:C2:BF:54
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:9d:22:8f:64:50:46:49:ba:66:90:7b:bc:e1:68:fb:10:
         ba:56:55:50:6b:4e:73:d8:0f:7e:dd:77:df:2a:81:8d:29:a8:
         a7:7b:00:30:fd:a8:3f:cc:79:7c:e1:52:8d:dc:14:2b:af:ab:
         5c:0a:0b:31:be:9c:81:6e:de:93:be:78:5f:7d:45:2d:c5:88:
         2c:dc:e8:63:7b:58:a6:78:7b:87:c7:a0:65:49:f8:88:f2:86:
         c4:b8:76:22:80:b7:fa:43:c5:ad:61:93:4b:6c:d5:1c:18:63:
         4e:0d:51:90:b2:f8:b4:20:c7:f6:83:81:58:d0:b4:f8:12:cd:
         a5:f4:7c:01:50:01:5c:fa:16:b3:d4:65:ec:33:b8:0d:19:f1:
         e6:ad:1d:09:38:cb:0a:f1:8a:fd:5a:c1:62:65:41:2b:e7:93:
         ab:a7:0a:3e:db:09:2c:01:3b:4d:bd:d6:da:fb:27:6f:cc:6e:
         ca:9b:7f:29:45:f0:54:0a:d8:e3:bb:aa:57:d1:7b:b0:bc:ad:
         ec:df:8c:1f:9d:d9:48:ad:97:d6:81:f4:d3:6d:ea:29:00:d8:
         01:a7:57:1d:77:31:42:86:d9:db:39:7a:96:64:f6:4e:75:63:
         2d:78:69:61:c0:ae:96:49:f6:19:fc:c0:d7:9e:26:aa:fd:db:
         97:de:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:28:27 2026 by rpki-client