Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/323830313a31643a3430303a3a2f34382d313238203d3e203134303830.roa
File:                     323830313a31643a3430303a3a2f34382d313238203d3e203134303830.roa (raw, json)
Hash identifier:          1FbmqmT/c7V6enpo5iofL2b5pPaZbdo4v1A0iFjTW4k=
Subject key identifier:   04:51:8C:04:F6:BA:73:0B:B9:84:B1:63:79:B9:EA:36:B8:E2:84:90
Certificate issuer:       /CN=C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF
Certificate serial:       196B696E4CC412B95D3A29A0ACFA47ED39DCA636
Authority key identifier: C4:EA:1E:B3:78:8F:D4:12:E3:DB:4A:86:8D:D7:F0:57:3C:3D:59:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/323830313a31643a3430303a3a2f34382d313238203d3e203134303830.roa
Signing time:             Fri 20 Feb 2026 04:10:00 +0000
ROA not before:           Fri 20 Feb 2026 04:05:00 +0000
ROA not after:            Fri 19 Feb 2027 04:10:00 +0000
asID:                     14080
IP address blocks:        2801:1d:400::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6b:69:6e:4c:c4:12:b9:5d:3a:29:a0:ac:fa:47:ed:39:dc:a6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF
        Validity
            Not Before: Feb 20 04:05:00 2026 GMT
            Not After : Feb 19 04:10:00 2027 GMT
        Subject: CN=04518C04F6BA730BB984B16379B9EA36B8E28490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:cc:ec:04:aa:46:7a:93:1b:d7:67:43:a1:
                    18:29:48:5d:0e:68:01:4f:e5:74:8e:e8:53:0b:55:
                    6a:00:4c:2e:1e:b0:67:ae:89:ca:3d:59:ee:80:b8:
                    50:21:38:bb:9b:bc:76:a3:78:ee:73:73:2b:8f:1e:
                    0b:a8:c0:f2:6b:bd:ab:81:53:73:8e:b7:83:3c:cd:
                    0f:be:2c:06:bf:66:c3:9d:dc:e1:8f:df:85:9c:ad:
                    75:4f:0a:48:f8:31:1b:6c:15:7d:18:17:a9:c3:a9:
                    98:73:8b:5d:8e:28:a7:e6:78:17:b6:ad:26:53:15:
                    c1:ff:bb:d7:df:92:23:41:12:ca:ad:23:d2:36:20:
                    ef:02:f1:57:75:98:6c:b5:26:24:56:9f:88:53:8f:
                    b6:20:f2:87:d5:80:19:6a:f3:db:ae:c5:e7:68:24:
                    db:23:08:dd:2e:92:d1:f1:82:f9:2e:61:2a:4e:ab:
                    a7:ff:3c:7a:c2:ce:d4:8d:07:40:da:b1:c3:c7:be:
                    8c:2f:54:8c:72:71:16:53:71:ea:34:67:66:aa:56:
                    f7:64:25:f7:f4:61:75:96:de:a3:43:c1:bd:f7:a2:
                    f2:81:11:7d:e6:53:e7:1c:ea:73:86:ff:fb:ab:ab:
                    1f:41:12:fa:23:07:43:05:13:ec:89:61:0a:04:84:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:51:8C:04:F6:BA:73:0B:B9:84:B1:63:79:B9:EA:36:B8:E2:84:90
            X509v3 Authority Key Identifier:
                keyid:C4:EA:1E:B3:78:8F:D4:12:E3:DB:4A:86:8D:D7:F0:57:3C:3D:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4EA1EB3788FD412E3DB4A868DD7F0573C3D59BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27BF40214622D25D943D9C378BCC2C86CA8B82C7A809DDD96E05E422F0C53BE3/0/323830313a31643a3430303a3a2f34382d313238203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:09:86:13:4b:4c:de:7b:fd:cd:14:f3:7d:81:ba:87:ea:
         38:61:8b:e2:87:9f:d3:35:b8:da:62:ff:82:4c:0a:a8:36:6e:
         8e:80:23:d5:3a:77:44:9f:5e:e3:4b:3d:f2:10:ed:21:aa:72:
         44:ee:48:93:a2:43:20:a4:ca:6c:3d:a0:af:2a:3f:88:e8:48:
         fd:dc:75:e3:6f:be:37:36:7e:c7:11:50:f6:7e:db:08:39:1a:
         8c:a2:f7:40:42:d4:69:3b:b7:9e:70:3e:39:5f:01:3d:8d:d7:
         5e:2a:55:12:67:63:30:1d:c5:5b:86:0b:6b:95:e1:dd:24:a4:
         03:6e:2e:de:6f:dd:8b:95:eb:97:c5:83:be:a0:39:87:9f:7f:
         9e:a8:96:80:b8:62:e4:be:17:57:6d:ed:27:01:a7:88:c2:ae:
         89:62:e4:ee:9d:23:d8:92:51:c8:d9:77:02:23:5d:d6:8b:18:
         3e:74:9d:f9:a4:6d:42:81:a0:5f:8d:72:d7:7b:c1:48:43:3f:
         0e:de:8a:a3:70:de:bb:98:85:42:6a:d9:1a:5a:dc:3e:13:e0:
         84:36:a1:78:42:ba:99:26:66:00:d1:b1:32:22:f5:eb:c0:5b:
         56:ec:67:54:74:ae:78:34:99:8f:3b:38:2b:76:68:b4:8d:ed:
         5d:af:8f:06
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUGWtpbkzEErldOimgrPpH7TncpjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFQTFFQjM3ODhGRDQxMkUzREI0QTg2OEREN0YwNTcz
QzNENTlCRjAeFw0yNjAyMjAwNDA1MDBaFw0yNzAyMTkwNDEwMDBaMDMxMTAvBgNV
BAMTKDA0NTE4QzA0RjZCQTczMEJCOTg0QjE2Mzc5QjlFQTM2QjhFMjg0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGczsBKpGepMb12dDoRgpSF0O
aAFP5XSO6FMLVWoATC4esGeuico9We6AuFAhOLubvHajeO5zcyuPHguowPJrvauB
U3OOt4M8zQ++LAa/ZsOd3OGP34WcrXVPCkj4MRtsFX0YF6nDqZhzi12OKKfmeBe2
rSZTFcH/u9ffkiNBEsqtI9I2IO8C8Vd1mGy1JiRWn4hTj7Yg8ofVgBlq89uuxedo
JNsjCN0uktHxgvkuYSpOq6f/PHrCztSNB0DascPHvowvVIxycRZTceo0Z2aqVvdk
Jff0YXWW3qNDwb33ovKBEX3mU+cc6nOG//urqx9BEvojB0MFE+yJYQoEhCmhAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUBFGMBPa6cwu5hLFjebnqNrjihJAwHwYDVR0j
BBgwFoAUxOoes3iP1BLj20qGjdfwVzw9Wb8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0JGNDAyMTQ2MjJEMjVEOTQzRDlDMzc4QkNDMkM4NkNB
OEI4MkM3QTgwOURERDk2RTA1RTQyMkYwQzUzQkUzLzAvQzRFQTFFQjM3ODhGRDQx
MkUzREI0QTg2OEREN0YwNTczQzNENTlCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEVBMUVCMzc4OEZENDEyRTNE
QjRBODY4REQ3RjA1NzNDM0Q1OUJGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdCRjQwMjE0NjIyRDI1RDk0M0Q5QzM3OEJDQzJDODZDQThCODJDN0E4
MDlEREQ5NkUwNUU0MjJGMEM1M0JFMy8wLzMyMzgzMDMxM2EzMTY0M2EzNDMwMzAz
YTNhMmYzNDM4MmQzMTMyMzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAdBAAwDQYJKoZIhvcNAQELBQADggEBAKs6CYYTS0zee/3NFPN9gbqH6jhhi+KH
n9M1uNpi/4JMCqg2bo6AI9U6d0SfXuNLPfIQ7SGqckTuSJOiQyCkymw9oK8qP4jo
SP3cdeNvvjc2fscRUPZ+2wg5Goyi90BC1Gk7t55wPjlfAT2N114qVRJnYzAdxVuG
C2uV4d0kpANuLt5v3YuV65fFg76gOYeff56oloC4YuS+F1dt7ScBp4jCroli5O6d
I9iSUcjZdwIjXdaLGD50nfmkbUKBoF+Nctd7wUhDPw7eiqNw3ruYhUJq2Rpa3D4T
4IQ2oXhCupkmZgDRsTIi9evAW1bsZ1R0rng0mY87OCt2aLSN7V2vjwY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:00:56 2026 by rpki-client