Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          QOEpd6xInQbv05iuZj/UsLmvkxvitZeWD7uQzeYAKmM=
Subject key identifier:   12:5E:DE:99:4E:4E:54:D3:64:8B:97:6F:83:7E:ED:F4:10:8D:1D:69
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       109A9A87EBC8504E35E6CCC7D964BE6813E35D47
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:03 +0000
ROA not before:           Fri 30 Jan 2026 06:36:03 +0000
ROA not after:            Fri 29 Jan 2027 06:41:03 +0000
asID:                     262191
IP address blocks:        2800:b70:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9a:9a:87:eb:c8:50:4e:35:e6:cc:c7:d9:64:be:68:13:e3:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:03 2026 GMT
            Not After : Jan 29 06:41:03 2027 GMT
        Subject: CN=125EDE994E4E54D3648B976F837EEDF4108D1D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:8e:37:20:db:14:63:65:f0:2a:60:42:2c:
                    25:2f:02:12:fd:ea:f9:15:72:b7:c9:01:06:c6:3f:
                    99:1f:c0:4e:5a:69:c2:f1:aa:af:e9:5c:d3:76:70:
                    4a:33:c5:50:44:76:1f:e7:b3:32:6c:56:5a:e8:e2:
                    47:07:66:43:66:a3:71:8f:1d:ef:3b:9a:5e:41:bb:
                    29:1e:f2:5b:b5:fa:c6:e7:17:c1:6c:a5:b2:60:35:
                    9c:67:9a:29:60:83:83:f1:28:64:dc:63:3a:63:ff:
                    b8:ee:e4:93:c9:cd:a5:22:60:96:35:4f:df:bf:70:
                    b1:e7:9e:e5:52:49:ee:21:5b:d2:3e:bb:5d:bc:22:
                    3c:2e:fa:ae:0b:82:19:1f:b7:f9:54:dc:3e:ab:f1:
                    0b:b7:f9:5d:0f:8a:98:c7:f3:08:47:a8:30:f1:8b:
                    2e:3c:de:4e:2c:e4:ca:a2:03:02:c4:a4:ee:81:21:
                    20:9b:6d:d2:f9:77:0a:a8:e4:df:69:84:c9:5a:64:
                    cd:81:38:af:f1:42:98:c4:94:47:5a:66:cf:b7:85:
                    42:e1:0b:04:3e:54:8e:d6:95:cf:05:5a:34:5f:bb:
                    57:5f:cf:51:63:3d:a2:e7:21:36:11:89:bc:33:f7:
                    d6:41:38:45:2d:54:b3:90:3e:fc:a8:1c:27:61:e8:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:DE:99:4E:4E:54:D3:64:8B:97:6F:83:7E:ED:F4:10:8D:1D:69
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         e1:8a:87:f2:71:30:f5:39:aa:e4:5f:18:48:5c:ac:ed:82:af:
         f4:29:22:96:3a:c2:92:71:f1:a7:01:5c:1b:70:ca:95:b2:e6:
         a6:73:0b:b3:9e:40:b1:6c:91:1e:3f:be:6d:85:3b:18:69:12:
         a4:a6:9b:d1:ee:28:10:c7:4d:fc:ef:8c:ef:45:c3:50:c2:98:
         c2:2e:95:c6:a3:0d:3a:f1:86:90:e6:4c:ab:e8:50:44:52:49:
         83:df:91:45:18:6d:80:d3:7f:e5:48:78:92:9b:8f:53:ed:7e:
         3a:d3:fe:45:48:c0:2a:06:0a:0a:d7:ad:66:74:7a:c6:50:b9:
         d7:67:b2:04:e6:cf:b8:44:c1:f3:76:ca:9c:9f:34:aa:28:5d:
         6a:e3:71:f5:ad:7e:a5:bc:99:9e:d5:16:f7:09:df:0f:78:48:
         17:36:31:89:1d:f9:d1:9a:a3:21:91:a7:b2:90:19:63:bb:b3:
         ea:ae:bf:99:4f:b3:38:0e:e9:cc:d1:09:ff:fb:b7:8b:ac:88:
         0b:95:59:51:fc:12:4e:9e:21:06:ba:f4:44:90:1d:65:b7:8e:
         a1:54:21:fb:ad:d1:69:df:f5:6b:68:80:cf:63:4b:f4:3a:7a:
         45:58:88:20:2e:d1:ed:bb:3a:2a:65:8f:2b:48:da:dc:2f:5e:
         82:3b:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:46:13 2026 by rpki-client