Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a62623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          kCHDXw3jygsb1dG5tURcb+ruMH6p2486aF4YylTczyg=
Subject key identifier:   10:4C:20:BE:05:1C:91:CF:10:79:BB:39:48:5C:5C:E7:2D:5C:07:38
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6CD8C88B905C8986A2A18CE3440A28590CE6C194
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Thu 19 Feb 2026 19:05:00 +0000
ROA not before:           Thu 19 Feb 2026 19:00:00 +0000
ROA not after:            Thu 18 Feb 2027 19:05:00 +0000
asID:                     271891
IP address blocks:        2801:151:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d8:c8:8b:90:5c:89:86:a2:a1:8c:e3:44:0a:28:59:0c:e6:c1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb 19 19:00:00 2026 GMT
            Not After : Feb 18 19:05:00 2027 GMT
        Subject: CN=104C20BE051C91CF1079BB39485C5CE72D5C0738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:18:b4:24:1c:c2:91:0b:a0:63:c3:63:5e:
                    b7:99:05:b9:6b:10:e9:c3:df:49:83:1a:65:42:7f:
                    e4:6d:c5:0f:28:4c:5b:f7:d8:48:dc:7f:3c:48:0c:
                    63:44:1d:61:43:ad:e2:47:41:99:cc:22:25:ff:3f:
                    55:88:ab:47:b7:ce:31:67:d1:f5:5f:51:3f:80:f7:
                    f5:d2:c6:fc:bd:6f:06:f6:6a:8c:73:6b:fe:56:ee:
                    75:bd:5e:49:68:34:71:39:c6:29:ab:81:43:2b:49:
                    66:d7:6e:0f:57:df:d7:73:a2:a9:d0:b6:38:3e:7a:
                    85:a5:41:e7:1e:a9:99:9a:31:ab:7a:4a:3a:4c:6b:
                    72:f1:c8:af:5f:45:43:03:79:fc:d2:0a:3d:46:c1:
                    c7:f9:98:84:47:f9:58:85:f6:e2:6a:05:5b:02:23:
                    a5:89:dc:7f:2c:bc:2c:1c:b0:96:ee:88:cb:23:38:
                    34:c5:92:67:22:b7:22:05:bd:a9:ee:0b:96:65:5b:
                    77:5e:25:92:00:01:7e:63:ca:87:ee:3d:b5:78:f7:
                    1c:cf:9f:73:82:3d:c4:81:ec:30:ba:97:fe:cd:14:
                    6a:85:9d:68:03:10:12:db:6c:67:cb:21:aa:a2:28:
                    47:06:5a:e1:a7:4c:ff:57:18:22:42:81:b6:2e:17:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4C:20:BE:05:1C:91:CF:10:79:BB:39:48:5C:5C:E7:2D:5C:07:38
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:83:bc:ad:92:f5:40:75:45:04:cc:f5:d9:6a:41:8f:7a:
         09:f4:d0:12:1b:26:0c:71:53:8c:08:25:d8:3d:aa:d9:c9:f5:
         7a:f1:ed:70:3d:1e:2d:67:84:8e:8c:23:43:48:a2:7d:d1:68:
         7a:97:43:01:89:bc:19:45:88:f6:e0:90:24:1a:42:46:f8:81:
         ee:9a:20:25:03:37:7f:94:6d:79:fe:49:9d:a1:f1:d5:70:be:
         fe:4d:1d:32:4f:13:a6:f5:eb:55:81:7d:af:7d:20:1c:12:fc:
         a3:96:e3:e1:3d:af:d4:e7:b7:f8:19:46:c5:b1:f5:c8:ff:02:
         a9:72:91:58:ce:07:c4:6c:d8:e8:73:1b:63:4e:ff:1e:a8:64:
         6c:78:af:d9:6d:0e:5a:c0:01:2b:a8:98:6d:5a:48:17:1b:6b:
         cf:be:d9:23:df:d2:71:f2:34:e8:ad:0b:79:d3:40:0b:f1:47:
         6a:0b:34:77:14:36:7c:ea:ee:7c:9b:1b:d9:b6:9b:b5:71:59:
         66:9d:e0:35:85:d6:c9:d0:7b:4d:22:ba:a6:ec:49:e8:c9:90:
         d1:6e:86:e4:1f:74:82:35:3a:8b:13:62:d9:e1:a5:f6:88:79:
         36:b8:fe:6d:9e:1b:64:14:82:07:48:ac:cd:9d:c2:f4:1e:fa:
         ce:7f:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:06:55 2026 by rpki-client