Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          /kKtgVTG11QbtpakKU59akQ0ZwF++tseDj0wtyn4NaU=
Subject key identifier:   80:EA:4D:EE:6A:00:C3:E4:9C:A1:1E:93:7C:7F:A1:7C:9F:D1:18:3F
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       7B7B8A6DDE20F8F0132324DECC995E960D9D88BC
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:08 +0000
ROA not before:           Fri 30 Jan 2026 06:36:08 +0000
ROA not after:            Fri 29 Jan 2027 06:41:08 +0000
asID:                     262191
IP address blocks:        2800:b70:601::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7b:8a:6d:de:20:f8:f0:13:23:24:de:cc:99:5e:96:0d:9d:88:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:08 2026 GMT
            Not After : Jan 29 06:41:08 2027 GMT
        Subject: CN=80EA4DEE6A00C3E49CA11E937C7FA17C9FD1183F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:2d:d2:04:8f:43:28:47:b7:69:95:11:17:
                    b4:50:8e:60:4e:76:e3:79:9c:d2:f5:bc:3d:f8:5c:
                    03:72:f9:05:7d:4c:40:3c:5d:f2:ce:81:74:e7:88:
                    bd:da:fa:bc:a8:89:d7:cc:04:83:fd:30:85:7a:05:
                    51:bd:3c:3c:c8:fe:b9:18:fb:56:6c:be:56:f1:f8:
                    21:60:b6:2f:be:04:cf:ec:80:f9:39:8f:45:d4:8a:
                    86:6b:8a:99:ca:b0:68:71:0f:37:86:24:02:75:cc:
                    e3:83:38:78:09:ea:6d:6a:d6:e8:12:5a:6b:e7:be:
                    71:07:8b:98:ff:08:f6:b3:6a:db:b2:fe:61:29:01:
                    40:52:ca:68:5e:fe:53:12:59:5e:cb:da:07:16:91:
                    62:20:54:7f:f6:e1:24:e6:3b:c4:8f:0a:db:5a:03:
                    e9:56:08:a6:67:76:9e:60:a0:ae:26:58:d3:c8:6f:
                    e1:77:39:7c:a1:f8:a0:48:b2:19:4e:10:c2:f8:c7:
                    2d:8a:14:4c:d0:af:90:af:3c:8d:15:a5:5a:4d:27:
                    e3:de:3c:93:a7:de:21:05:fb:79:17:74:b7:75:cf:
                    24:33:3e:94:98:f1:94:fb:9d:e4:b0:c8:9c:de:3c:
                    31:9d:cd:af:8e:b1:62:23:e8:60:a2:6e:e7:18:28:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:4D:EE:6A:00:C3:E4:9C:A1:1E:93:7C:7F:A1:7C:9F:D1:18:3F
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:601::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:06:71:36:78:d1:b0:b9:0c:87:08:3b:d9:d8:79:35:02:6b:
         00:b1:99:e8:fa:0d:2d:98:98:ae:00:0f:5a:1b:e5:64:7b:20:
         01:84:72:76:08:40:02:b0:cf:9c:98:4a:f5:73:c0:e3:99:85:
         23:21:63:3a:2d:89:64:7d:ed:66:5c:b3:dc:29:8a:ef:de:5b:
         9b:cf:68:f5:f5:5a:1b:99:c9:d4:f8:13:07:db:93:45:74:f1:
         5d:48:ea:2b:c6:b7:2c:fb:03:77:82:7b:6c:91:1d:a3:04:a8:
         45:7e:f9:25:c0:fa:32:75:86:9a:86:2e:20:42:11:3f:16:ef:
         95:a7:b4:1f:b9:ee:77:1c:fe:bd:cc:7d:99:4e:89:c6:81:9e:
         cd:f2:bb:c2:ac:2f:2f:f7:65:f4:75:ab:ea:a4:39:66:8d:14:
         45:18:ab:9b:4e:17:24:93:4d:91:a2:bf:55:1e:23:d5:61:16:
         61:ed:22:af:f5:58:1b:63:8e:5c:b9:23:dc:f0:65:22:53:e9:
         8f:1f:5f:44:b6:46:0b:78:d5:99:b2:d3:c0:71:5d:67:99:fb:
         36:b0:a8:e8:b0:bf:41:09:5c:94:0b:ed:43:d0:43:65:82:ce:
         49:80:45:76:99:a8:9a:07:9b:de:4d:9f:42:29:86:d5:19:5b:
         ca:69:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:21:17 2026 by rpki-client