Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          UCGBviuKVUF7PHjcj1njwQTyDNLqBy0L7UNe1qTERbI=
Subject key identifier:   0C:E0:63:C7:D9:F1:FD:4B:47:26:A3:0E:77:19:A7:10:1B:67:A7:ED
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2C1E106DAFD0384D81E92FD3B9A2231C916D34A3
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 12 Feb 2026 15:30:12 +0000
ROA not before:           Thu 12 Feb 2026 15:25:12 +0000
ROA not after:            Thu 11 Feb 2027 15:30:12 +0000
asID:                     18678
IP address blocks:        2800:310:d04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:10:6d:af:d0:38:4d:81:e9:2f:d3:b9:a2:23:1c:91:6d:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 12 15:25:12 2026 GMT
            Not After : Feb 11 15:30:12 2027 GMT
        Subject: CN=0CE063C7D9F1FD4B4726A30E7719A7101B67A7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:8c:d5:32:f9:98:18:54:22:81:87:29:c4:
                    32:25:11:02:95:05:68:9c:db:09:b3:f3:f9:d2:9a:
                    85:92:f0:49:0c:c6:b3:03:d4:fe:92:95:e4:b9:73:
                    a6:f7:35:8d:0b:b3:41:c2:86:14:2a:db:3b:a4:aa:
                    4a:0c:43:51:11:cd:84:6d:69:c4:31:ea:db:d0:18:
                    ea:80:f2:21:ef:bf:ec:6c:35:2a:61:68:1b:49:44:
                    aa:9d:85:8a:20:06:49:47:64:cf:9d:e7:40:c3:d4:
                    ff:3e:0b:dd:6d:7e:43:3b:46:64:eb:fb:eb:31:03:
                    39:f3:3f:7e:78:09:e0:54:66:42:c4:3d:7d:e7:30:
                    b1:9b:a8:4b:ed:34:b0:4b:a1:70:bb:9d:ef:b1:b3:
                    cb:76:95:ed:89:bc:8e:5e:2b:60:b9:7a:1a:cc:cd:
                    7f:f4:f6:aa:b4:ac:84:93:76:d3:b3:fd:78:23:eb:
                    94:13:b3:88:09:7c:1e:38:7f:55:df:dd:cc:bf:47:
                    7e:9d:25:a5:42:0d:5c:0a:7e:91:2c:c6:8a:76:fc:
                    0b:b3:f6:58:4b:20:e6:e5:2b:6a:d3:cb:d8:4e:67:
                    bf:da:74:d4:0a:09:1e:06:bb:94:97:36:a5:8f:2f:
                    d9:e3:41:67:f1:f6:e6:54:19:15:36:06:e6:df:e0:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E0:63:C7:D9:F1:FD:4B:47:26:A3:0E:77:19:A7:10:1B:67:A7:ED
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430343a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:af:9c:71:91:9d:32:07:4f:8b:5c:50:cd:9b:98:f7:69:
         08:4e:27:c7:68:84:6d:0b:85:f0:1b:34:70:34:2e:56:b2:88:
         9e:cb:aa:3a:84:cc:30:6e:0c:ae:b8:e4:6d:ad:a4:4b:f3:84:
         e1:73:2f:d9:f4:25:6e:23:55:54:1f:0a:a4:9f:e9:6e:ee:fd:
         df:a8:f7:de:e0:fe:b5:94:b5:df:7f:6f:d8:da:1b:c5:64:fc:
         2d:b8:1e:80:9c:2d:d5:00:b5:f9:d4:0f:19:60:26:cf:dc:aa:
         86:2e:5a:06:88:5d:e4:62:ab:31:f9:44:3c:1b:60:40:bf:77:
         24:b2:b7:b0:c9:7b:aa:ed:40:db:6f:a2:d1:ce:0f:bd:7d:cf:
         1a:04:ac:a9:8e:ee:41:55:ee:f7:4c:bb:4b:b1:ad:ec:cf:8f:
         d7:8e:46:ff:a0:5a:cc:7c:55:94:7a:b8:f0:3b:f5:33:8e:82:
         fe:ce:c9:f1:33:5c:88:af:05:e2:9f:05:f6:30:52:8e:a4:d8:
         35:98:38:5f:a2:3d:93:82:12:c0:3e:b6:8f:b5:1d:e8:6b:75:
         a6:11:8e:2e:fc:0d:76:6a:35:0f:eb:2e:3f:aa:3a:1a:6a:21:
         91:e3:7a:b1:86:e1:a6:2f:ab:00:5b:46:9a:8c:5f:64:d8:0d:
         70:5c:5d:74
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIULB4Qba/QOE2B6S/TuaIjHJFtNKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMTIxNTI1MTJaFw0yNzAyMTExNTMwMTJaMDMxMTAvBgNV
BAMTKDBDRTA2M0M3RDlGMUZENEI0NzI2QTMwRTc3MTlBNzEwMUI2N0E3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8YzVMvmYGFQigYcpxDIlEQKV
BWic2wmz8/nSmoWS8EkMxrMD1P6SleS5c6b3NY0Ls0HChhQq2zukqkoMQ1ERzYRt
acQx6tvQGOqA8iHvv+xsNSphaBtJRKqdhYogBklHZM+d50DD1P8+C91tfkM7RmTr
++sxAznzP354CeBUZkLEPX3nMLGbqEvtNLBLoXC7ne+xs8t2le2JvI5eK2C5ehrM
zX/09qq0rISTdtOz/Xgj65QTs4gJfB44f1Xf3cy/R36dJaVCDVwKfpEsxop2/Auz
9lhLIOblK2rTy9hOZ7/adNQKCR4Gu5SXNqWPL9njQWfx9uZUGRU2Bubf4NaTAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUDOBjx9nx/UtHJqMOdxmnEBtnp+0wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTY0MzAz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQDQQwDQYJKoZIhvcNAQELBQADggEBAED6r5xxkZ0yB0+LXFDNm5j3aQhOJ8do
hG0LhfAbNHA0LlayiJ7LqjqEzDBuDK645G2tpEvzhOFzL9n0JW4jVVQfCqSf6W7u
/d+o997g/rWUtd9/b9jaG8Vk/C24HoCcLdUAtfnUDxlgJs/cqoYuWgaIXeRiqzH5
RDwbYEC/dySyt7DJe6rtQNtvotHOD719zxoErKmO7kFV7vdMu0uxrezPj9eORv+g
Wsx8VZR6uPA79TOOgv7OyfEzXIivBeKfBfYwUo6k2DWYOF+iPZOCEsA+to+1Hehr
daYRji78DXZqNQ/rLj+qOhpqIZHjerGG4aYvqwBbRpqMX2TYDXBcXXQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:18 2026 by rpki-client