Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33323a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a33323a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          TTjcdShZBi0Z+66BRa4MUTnFL598LfJ7zJ2PnoSF944=
Subject key identifier:   F5:57:1D:87:71:9A:25:E8:7D:3E:9F:01:24:72:DD:B4:DB:8E:69:F0
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       339E99FD8453A0F85A4E47BC3443A3B004AA399F
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33323a3a2f34382d3438203d3e203131383330.roa
Signing time:             Thu 19 Feb 2026 19:00:00 +0000
ROA not before:           Thu 19 Feb 2026 18:55:00 +0000
ROA not after:            Thu 18 Feb 2027 19:00:00 +0000
asID:                     11830
IP address blocks:        2801:151:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 12:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:99:fd:84:53:a0:f8:5a:4e:47:bc:34:43:a3:b0:04:aa:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb 19 18:55:00 2026 GMT
            Not After : Feb 18 19:00:00 2027 GMT
        Subject: CN=F5571D87719A25E87D3E9F012472DDB4DB8E69F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:90:40:c2:cb:8c:c7:e7:8e:51:0c:51:b4:
                    86:b6:c8:d2:f5:67:bc:31:c8:60:b4:41:9b:df:5e:
                    22:98:d8:c4:39:93:12:27:47:22:9e:1c:2d:5f:32:
                    8a:36:71:2f:87:75:46:e3:ef:92:44:c6:a0:cc:ec:
                    5a:8a:92:6b:98:eb:ac:6c:79:db:a3:94:5d:00:89:
                    a6:ad:95:89:6c:a7:04:6c:77:5f:bb:4a:16:44:63:
                    6d:e9:e8:84:e1:97:be:18:3b:d8:e0:95:f6:35:23:
                    5b:d1:66:3f:4d:62:95:3a:bc:8e:75:18:fe:4c:22:
                    9a:bf:55:ad:9f:64:7a:49:51:09:2c:b4:9b:de:b5:
                    01:02:77:f4:4b:83:f0:24:11:9e:01:0c:92:82:4c:
                    d3:d2:29:fc:aa:5c:4d:a2:e8:51:1b:42:cc:ee:5f:
                    e0:d8:9b:4a:f3:68:9c:c9:0b:e4:6c:01:0d:3f:1f:
                    c8:f1:76:49:df:6c:1e:64:a3:2c:f7:db:14:b1:f4:
                    d9:67:2a:b5:7b:38:77:f9:05:90:6c:b0:d2:41:8c:
                    a3:1f:06:38:28:c0:a8:68:83:1a:f0:f4:2c:46:df:
                    d6:49:f3:3b:72:20:5d:c8:25:e9:ef:9a:35:72:40:
                    41:08:10:67:d5:79:b9:44:8f:7b:ba:28:9b:34:76:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:1D:87:71:9A:25:E8:7D:3E:9F:01:24:72:DD:B4:DB:8E:69:F0
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33323a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:32::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:ec:6b:cd:da:15:77:6d:31:44:d7:94:db:85:15:92:fd:
         31:d1:9d:32:0d:a3:ca:3a:d9:7e:9c:57:3e:b3:11:c9:41:3b:
         fe:80:5e:9c:7e:e8:82:b0:9d:b7:d1:c9:74:ae:93:c9:10:07:
         af:9e:37:8d:a3:e1:7a:eb:51:89:c0:76:87:dc:43:d5:c3:68:
         5c:24:33:4e:15:6e:1c:fe:98:fa:fd:93:29:be:8f:5a:85:54:
         55:ca:d4:76:89:b7:37:3d:63:1c:96:2a:e8:1a:6c:91:8a:3e:
         24:a1:ec:9e:7f:7e:b8:9a:5c:92:73:6d:84:8c:5b:bf:b7:da:
         60:8e:2f:23:73:e3:59:4d:34:d5:07:47:eb:9e:96:2f:27:e5:
         f9:66:2d:d5:75:fa:76:c1:25:a4:c5:c8:8c:fe:35:d2:ea:4d:
         9c:f7:2f:91:19:75:02:f7:dc:23:af:25:f5:b4:d9:df:a1:04:
         d2:68:19:3a:07:f8:f7:be:91:ab:50:5c:57:07:b8:f9:0a:b3:
         cf:de:79:9e:6d:25:b5:d2:b3:66:8d:64:79:1a:0e:ce:85:6f:
         94:86:8b:18:bb:c6:fa:f6:05:14:b4:8e:ca:6b:a4:de:d6:92:
         9c:68:76:e3:37:2b:58:d3:8a:21:1c:51:cb:96:07:3a:76:6f:
         47:74:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:40:34 2026 by rpki-client