Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a666666653a3a2f34382d3438203d3e203238343035.roa
File:                     323830363a3230353a666666653a3a2f34382d3438203d3e203238343035.roa (raw, json)
Hash identifier:          wSUrbW7d9tlopGjw0wOP5NzUof4chEhVs4OoXO9MAoc=
Subject key identifier:   27:3C:DE:2D:D2:00:65:D5:EA:CB:1C:1A:71:FC:97:61:7B:23:6C:E8
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       637766124B6F789A4DD3EA88DAC921E4817C5CA3
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a666666653a3a2f34382d3438203d3e203238343035.roa
Signing time:             Fri 20 Feb 2026 18:35:00 +0000
ROA not before:           Fri 20 Feb 2026 18:30:00 +0000
ROA not after:            Fri 19 Feb 2027 18:35:00 +0000
asID:                     28405
IP address blocks:        2806:205:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 00:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:77:66:12:4b:6f:78:9a:4d:d3:ea:88:da:c9:21:e4:81:7c:5c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Feb 20 18:30:00 2026 GMT
            Not After : Feb 19 18:35:00 2027 GMT
        Subject: CN=273CDE2DD20065D5EACB1C1A71FC97617B236CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:e6:49:dd:c5:91:f9:27:0a:ea:8f:0f:27:
                    5e:be:9c:9c:bf:25:f1:f1:5c:77:f9:4c:2b:df:45:
                    d1:40:7b:e5:70:f6:33:4e:64:42:c2:e0:29:2f:57:
                    c6:dc:28:e2:7a:ce:ae:21:5e:a2:0f:0c:4e:95:e0:
                    16:28:e5:57:0b:b2:de:7b:3e:11:03:63:98:db:34:
                    59:53:20:50:6b:e5:66:50:a8:51:1c:f2:6c:47:65:
                    e3:66:db:3c:d2:62:1d:dc:92:46:64:09:09:d6:99:
                    05:a8:b8:01:29:05:f4:42:d8:bf:f1:3e:e2:d7:45:
                    9a:d8:1f:02:d2:5e:18:03:6e:3c:76:e7:5a:31:99:
                    de:d7:84:e2:a2:b6:48:b5:52:72:88:6c:00:60:42:
                    42:7e:7b:8f:63:99:ae:34:dc:92:22:39:5b:2c:0d:
                    5f:76:cd:e0:3e:e1:08:53:bf:7a:30:fd:29:c5:f0:
                    89:ba:3b:20:77:24:74:84:f4:75:b7:e7:4f:d4:50:
                    3f:7d:09:3a:90:84:88:46:ef:2c:a0:42:3a:f0:84:
                    26:94:41:e0:ce:ad:39:28:cd:6c:77:c4:ab:49:80:
                    f7:2e:53:24:d9:0b:cf:d3:88:f3:fe:be:28:90:94:
                    4e:b1:ea:7c:43:bd:b1:ef:ad:34:68:9e:c6:7a:44:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:DE:2D:D2:00:65:D5:EA:CB:1C:1A:71:FC:97:61:7B:23:6C:E8
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a666666653a3a2f34382d3438203d3e203238343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:205:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:df:77:36:23:2e:73:76:78:c8:d8:54:f4:a7:20:61:98:a9:
         6b:41:14:da:58:0c:14:10:26:35:f5:1f:6d:5e:c0:58:3d:6f:
         ad:fa:66:2e:f0:12:07:95:eb:c3:af:81:3c:10:dc:07:41:6e:
         9b:46:f9:27:fb:55:bf:cd:16:12:85:61:c3:96:c1:f8:da:28:
         bd:3e:22:f0:82:bf:81:b7:da:36:7f:00:53:06:c0:0f:aa:8f:
         5d:31:87:37:e8:8b:d6:9b:27:56:35:fd:b9:19:be:af:13:8d:
         8f:ca:d8:37:3c:89:de:4f:bd:5d:a4:49:87:6c:5c:84:6c:a5:
         6f:fe:96:de:3b:e4:fd:a6:47:9a:0c:c5:a6:7b:4b:5d:53:b5:
         64:b0:a7:43:e7:0f:18:8d:9b:3c:30:34:43:a6:b2:ec:78:8c:
         0e:df:47:c6:d1:f2:ec:17:97:cd:e1:5e:98:0b:69:d2:38:a0:
         12:0d:11:f4:bb:32:89:21:9c:ca:d4:15:77:c5:bd:db:f2:f6:
         c2:11:d7:5c:b5:eb:90:3d:0d:50:00:96:14:ff:2c:22:e8:32:
         02:8c:5e:7c:a2:37:31:06:79:c3:71:fb:df:f2:59:91:f2:79:
         8b:e8:9f:6d:c5:22:25:50:93:a1:36:d6:69:40:9a:72:b9:b2:
         f4:cf:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:54:01 2026 by rpki-client