Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62633a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a62633a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Ma3jvjLqVjIy4wJ6YSsllW4AlMYTVWzQo+dmUnnFcyQ=
Subject key identifier:   6A:B0:04:66:DC:2C:6B:4C:24:63:B0:8C:F9:23:CE:42:15:F0:7E:90
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2C13C81DA3394B8375819947063C5685DC778BE6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62633a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Thu 19 Feb 2026 19:05:00 +0000
ROA not before:           Thu 19 Feb 2026 19:00:00 +0000
ROA not after:            Thu 18 Feb 2027 19:05:00 +0000
asID:                     271891
IP address blocks:        2801:151:bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:13:c8:1d:a3:39:4b:83:75:81:99:47:06:3c:56:85:dc:77:8b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb 19 19:00:00 2026 GMT
            Not After : Feb 18 19:05:00 2027 GMT
        Subject: CN=6AB00466DC2C6B4C2463B08CF923CE4215F07E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:6c:ea:a0:37:61:b9:3d:03:bc:4d:2e:45:
                    c6:e4:49:64:c5:50:c8:04:c9:96:06:5f:97:9b:21:
                    50:d8:10:62:b4:f5:45:73:fe:4e:2e:67:c8:2b:97:
                    a4:b5:06:80:4a:de:25:d0:3a:a4:6d:fe:2f:f6:4e:
                    6c:dd:a9:ad:37:39:e2:25:9f:3c:b5:d0:63:22:e1:
                    74:06:ca:af:b6:f0:7e:e6:25:65:12:98:f1:a3:d8:
                    8b:9a:b6:4a:5e:59:b5:ef:13:b3:cf:bc:a0:a6:0c:
                    d8:91:2a:ad:75:02:a7:30:76:65:c9:d6:59:65:0e:
                    55:7c:2d:aa:eb:35:e5:f3:b1:a8:69:d8:3c:e0:5e:
                    c6:16:83:b3:14:e7:f3:74:41:51:f1:e4:fc:c9:dd:
                    23:c4:31:07:1a:ce:ae:fe:fc:ef:99:0c:f5:3c:4c:
                    71:06:18:ae:2b:6a:e3:24:7d:de:eb:cf:37:9e:21:
                    2a:9e:6f:e3:c8:8c:b9:32:af:0e:b3:78:69:c4:d6:
                    e9:b2:7e:fa:ef:b5:29:c4:0f:61:92:19:2c:e3:33:
                    34:b6:c7:7f:b4:dd:85:ca:d8:6b:60:99:fd:96:17:
                    3c:d4:ca:1c:c4:fa:4b:70:63:8b:a2:99:56:32:58:
                    20:3b:09:56:2b:b5:56:00:d7:5b:3c:d8:6e:51:fd:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:04:66:DC:2C:6B:4C:24:63:B0:8C:F9:23:CE:42:15:F0:7E:90
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a62633a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:bb:cc:c5:fb:b3:c6:c0:ea:6e:cd:b8:52:86:3b:89:88:48:
         71:ab:49:6c:69:71:ee:08:0e:71:bf:bd:5c:d9:c3:04:62:3d:
         ca:ba:d9:99:27:b6:4a:ae:66:da:fe:4d:19:a1:b6:49:7d:93:
         18:c1:67:37:e1:c8:68:46:24:4a:fe:45:d6:85:ee:b4:1c:4e:
         65:10:d2:b4:06:73:be:97:01:31:94:df:6a:a4:e2:c9:f0:89:
         19:a0:76:32:a7:63:22:2f:57:46:2e:40:05:01:c7:ed:a3:df:
         cf:85:fa:3e:85:d5:f5:12:0c:36:71:f3:01:dd:40:11:9c:48:
         db:39:f9:98:5f:5e:d8:11:5c:8a:58:10:fa:5e:55:81:9f:73:
         41:18:7a:b9:53:db:8c:4c:c4:95:1b:3b:61:0f:26:fe:a7:73:
         5c:32:76:91:61:34:2b:c6:fd:cb:c8:43:2d:7a:c5:c9:7c:60:
         e7:68:80:22:88:7a:ba:35:57:75:f1:3c:5e:22:4b:cb:3c:8e:
         75:6f:16:29:fb:35:ba:83:db:f1:70:ea:8d:80:5a:99:6f:18:
         ab:74:76:32:2e:21:de:fb:46:9d:09:ea:02:ed:e2:52:12:d2:
         89:9b:09:9c:c5:67:c7:ff:01:c8:21:36:02:80:e1:b4:62:55:
         61:4f:95:18
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIULBPIHaM5S4N1gZlHBjxWhdx3i+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNjAyMTkxOTAwMDBaFw0yNzAyMTgxOTA1MDBaMDMxMTAvBgNV
BAMTKDZBQjAwNDY2REMyQzZCNEMyNDYzQjA4Q0Y5MjNDRTQyMTVGMDdFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DWzqoDdhuT0DvE0uRcbkSWTF
UMgEyZYGX5ebIVDYEGK09UVz/k4uZ8grl6S1BoBK3iXQOqRt/i/2Tmzdqa03OeIl
nzy10GMi4XQGyq+28H7mJWUSmPGj2IuatkpeWbXvE7PPvKCmDNiRKq11AqcwdmXJ
1lllDlV8LarrNeXzsahp2DzgXsYWg7MU5/N0QVHx5PzJ3SPEMQcazq7+/O+ZDPU8
THEGGK4rauMkfd7rzzeeISqeb+PIjLkyrw6zeGnE1umyfvrvtSnED2GSGSzjMzS2
x3+03YXK2Gtgmf2WFzzUyhzE+ktwY4uimVYyWCA7CVYrtVYA11s82G5R/fa9AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUarAEZtwsa0wkY7CM+SPOQhXwfpAwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTYyNjMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRALwwDQYJKoZIhvcNAQELBQADggEBAL+7zMX7s8bA6m7NuFKGO4mISHGrSWxp
ce4IDnG/vVzZwwRiPcq62ZkntkquZtr+TRmhtkl9kxjBZzfhyGhGJEr+RdaF7rQc
TmUQ0rQGc76XATGU32qk4snwiRmgdjKnYyIvV0YuQAUBx+2j38+F+j6F1fUSDDZx
8wHdQBGcSNs5+ZhfXtgRXIpYEPpeVYGfc0EYerlT24xMxJUbO2EPJv6nc1wydpFh
NCvG/cvIQy16xcl8YOdogCKIero1V3XxPF4iS8s8jnVvFin7NbqD2/Fw6o2AWplv
GKt0djIuId77Rp0J6gLt4lIS0ombCZzFZ8f/AcghNgKA4bRiVWFPlRg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:06:56 2026 by rpki-client