Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036343a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          6EdwSOx+HfalIre/Mj0K9c5cd83mELLcQ9Gu/y0iOeA=
Subject key identifier:   4C:FC:51:50:C3:95:6A:65:DB:86:33:F3:9B:6D:63:12:37:BE:1D:59
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       5DE85ADFC07A581C605CD08C9412DF985582C949
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 20 Feb 2026 09:31:26 +0000
ROA not before:           Fri 20 Feb 2026 09:26:26 +0000
ROA not after:            Fri 19 Feb 2027 09:31:26 +0000
asID:                     3573
IP address blocks:        2801:1f0:4064::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 16:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:5a:df:c0:7a:58:1c:60:5c:d0:8c:94:12:df:98:55:82:c9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Feb 20 09:26:26 2026 GMT
            Not After : Feb 19 09:31:26 2027 GMT
        Subject: CN=4CFC5150C3956A65DB8633F39B6D631237BE1D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:a2:34:87:47:56:5a:e2:ca:8c:db:39:e1:
                    a9:c0:64:aa:8e:00:c1:78:d8:19:ed:d4:52:8e:79:
                    43:5b:22:f7:b2:a8:c0:e2:76:31:68:d1:18:3a:b3:
                    47:96:ef:66:5d:d4:7d:ce:cd:85:a9:55:d5:8d:93:
                    fd:b8:ac:f8:71:93:72:ef:cc:12:4c:a0:6f:1d:c7:
                    bd:41:a4:71:4e:67:a9:ce:0c:e5:2a:5f:56:9b:ae:
                    78:3c:ad:8d:15:3b:4a:21:c7:ce:dd:1e:c9:47:82:
                    e4:2d:b9:94:d9:4d:51:02:24:e4:49:48:34:41:a3:
                    72:8f:da:28:3b:a9:b2:da:00:0a:75:bc:c6:0c:69:
                    c2:33:ac:94:73:39:b7:f5:dd:bd:0f:7d:0e:4e:f0:
                    fd:c5:78:98:ed:33:84:98:37:73:4b:fc:5b:26:33:
                    a5:72:e0:b3:62:e6:15:c4:85:fd:bc:53:a4:ae:a7:
                    13:5b:01:8c:36:2a:b7:85:a3:c4:0d:13:4f:d8:13:
                    3b:b2:7c:75:61:86:cc:1e:69:91:16:ad:9a:05:fa:
                    8f:1f:20:58:27:24:f3:9f:c2:2d:ab:78:ea:4b:f3:
                    11:5c:0c:e3:23:74:94:13:0f:57:13:8d:09:23:46:
                    ad:b8:ab:40:1d:0a:63:da:10:0a:20:82:f8:70:e4:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:51:50:C3:95:6A:65:DB:86:33:F3:9B:6D:63:12:37:BE:1D:59
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4064::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:23:e2:3e:6c:c6:95:e4:0d:b5:45:8b:ba:6f:e9:1b:bd:
         4a:87:6c:f8:d9:70:fa:b3:94:cd:33:e6:a8:80:76:8e:8d:87:
         4c:55:70:e2:27:ad:81:55:b3:79:fc:b2:a1:5d:22:f2:59:d5:
         48:61:3d:a2:e9:fc:1f:16:52:16:1c:0f:2a:90:39:0a:01:33:
         34:42:da:c1:a4:ee:2a:a6:b7:69:b9:ad:97:2f:a5:e1:cb:fc:
         15:82:72:06:71:63:d1:7a:09:6c:bf:4b:57:4c:1a:a6:e1:a7:
         da:5d:3e:85:06:2f:30:80:dc:f9:00:32:32:70:59:f2:46:58:
         c2:91:9d:77:c3:37:ac:6d:5d:8f:1b:86:ea:21:94:f7:cb:63:
         07:4d:46:21:ce:26:4f:de:05:c5:7c:1d:25:67:3b:a6:ee:d1:
         49:59:18:c6:ca:c3:67:66:f0:60:cf:84:1b:37:3f:33:6f:34:
         0a:93:39:e9:f2:41:c7:06:a6:a8:ed:69:b2:ba:b7:ce:5c:fa:
         44:36:68:9e:bb:31:36:e3:8e:c4:96:01:3e:47:bc:f8:98:4d:
         3e:89:51:cc:5c:b8:0a:ed:8e:d3:4e:30:1f:ca:13:27:25:bf:
         8b:4e:f9:30:88:55:7e:b3:b5:7e:cd:de:25:e7:4c:b2:fc:f6:
         3e:1a:9f:89
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXeha38B6WBxgXNCMlBLfmFWCyUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MjQ2NzVFODg0MzdGQzI2NjhCRDY5RTI3Njc4RDVB
N0QwQ0IyQTAeFw0yNjAyMjAwOTI2MjZaFw0yNzAyMTkwOTMxMjZaMDMxMTAvBgNV
BAMTKDRDRkM1MTUwQzM5NTZBNjVEQjg2MzNGMzlCNkQ2MzEyMzdCRTFENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxqI0h0dWWuLKjNs54anAZKqO
AMF42Bnt1FKOeUNbIveyqMDidjFo0Rg6s0eW72Zd1H3OzYWpVdWNk/24rPhxk3Lv
zBJMoG8dx71BpHFOZ6nODOUqX1abrng8rY0VO0ohx87dHslHguQtuZTZTVECJORJ
SDRBo3KP2ig7qbLaAAp1vMYMacIzrJRzObf13b0PfQ5O8P3FeJjtM4SYN3NL/Fsm
M6Vy4LNi5hXEhf28U6SupxNbAYw2KreFo8QNE0/YEzuyfHVhhsweaZEWrZoF+o8f
IFgnJPOfwi2reOpL8xFcDOMjdJQTD1cTjQkjRq24q0AdCmPaEAoggvhw5PxJAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUTPxRUMOVamXbhjPzm21jEje+HVkwHwYDVR0j
BBgwFoAUppJGdeiEN/wmaL1p4nZ41afQyyowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODk3MTQzMDY4NkYyRTNBQjdFMDVFODdCMkNCNEIxRjAy
NjJEMUIxRTFBOUY2Q0EzMjNBQTgxNTQ3RjUwRTBFLzAvQTY5MjQ2NzVFODg0MzdG
QzI2NjhCRDY5RTI3Njc4RDVBN0QwQ0IyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjkyNDY3NUU4ODQzN0ZDMjY2
OEJENjlFMjc2NzhENUE3RDBDQjJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg5NzE0MzA2ODZGMkUzQUI3RTA1RTg3QjJDQjRCMUYwMjYyRDFCMUUx
QTlGNkNBMzIzQUE4MTU0N0Y1MEUwRS8wLzMyMzgzMDMxM2EzMTY2MzAzYTM0MzAz
NjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQHwQGQwDQYJKoZIhvcNAQELBQADggEBAJx6I+I+bMaV5A21RYu6b+kbvUqHbPjZ
cPqzlM0z5qiAdo6Nh0xVcOInrYFVs3n8sqFdIvJZ1UhhPaLp/B8WUhYcDyqQOQoB
MzRC2sGk7iqmt2m5rZcvpeHL/BWCcgZxY9F6CWy/S1dMGqbhp9pdPoUGLzCA3PkA
MjJwWfJGWMKRnXfDN6xtXY8bhuohlPfLYwdNRiHOJk/eBcV8HSVnO6bu0UlZGMbK
w2dm8GDPhBs3PzNvNAqTOenyQccGpqjtabK6t85c+kQ2aJ67MTbjjsSWAT5HvPiY
TT6JUcxcuArtjtNOMB/KEyclv4tO+TCIVX6ztX7N3iXnTLL89j4an4k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:12 2026 by rpki-client