Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66323a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66323a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          MmX28abGIXGmpUL7JOUADCdodZ5CQCqgzeA1+lq+gfc=
Subject key identifier:   F7:9F:34:F0:9A:40:8B:16:34:B6:28:D7:96:F8:7D:66:9F:F0:4B:22
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       38A483A3D4867C22AC6C5B92F03D290D7A7C35C9
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66323a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Thu 19 Feb 2026 19:05:00 +0000
ROA not before:           Thu 19 Feb 2026 19:00:00 +0000
ROA not after:            Thu 18 Feb 2027 19:05:00 +0000
asID:                     271891
IP address blocks:        2801:151:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a4:83:a3:d4:86:7c:22:ac:6c:5b:92:f0:3d:29:0d:7a:7c:35:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb 19 19:00:00 2026 GMT
            Not After : Feb 18 19:05:00 2027 GMT
        Subject: CN=F79F34F09A408B1634B628D796F87D669FF04B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:5c:a7:09:72:02:26:06:4c:13:33:21:49:
                    00:8f:ab:9e:db:ae:a3:cc:28:97:e9:b7:e6:ec:09:
                    7f:6c:5f:40:13:c6:9b:0f:7b:f3:9b:06:e8:60:9a:
                    a3:a2:ae:e4:95:7c:fc:e0:bf:52:89:93:df:b4:e8:
                    15:c7:1d:16:a3:20:bf:2c:3f:6f:86:37:ce:29:38:
                    a4:b4:a1:9e:e4:bd:c9:0b:01:24:f2:b4:59:c0:07:
                    80:7d:04:7b:b5:34:03:04:64:b6:61:37:14:3b:7e:
                    7b:da:0d:f2:41:81:0c:95:a0:13:2e:c5:ab:9d:0d:
                    0f:1c:d7:72:1a:5e:de:60:60:4c:90:a6:f6:be:5c:
                    3b:79:eb:62:de:8e:a1:99:15:35:e7:d4:ea:78:51:
                    0a:19:ed:42:9f:b3:23:f2:28:46:2d:71:1d:a8:b9:
                    f3:4a:57:9e:ac:04:6d:13:98:ff:ea:8c:44:fa:db:
                    81:6a:8b:4f:bc:65:df:48:c2:65:1c:a7:6c:ef:04:
                    06:d9:21:81:9e:db:2f:e2:1b:7f:6d:ea:03:04:09:
                    d2:fc:ac:cc:4b:57:d1:bc:58:f1:76:da:bf:72:50:
                    d9:b0:15:36:de:1f:4c:ef:fe:67:e9:43:a6:6f:f6:
                    8b:05:2d:e1:58:cf:f5:e2:54:93:29:02:c2:d3:8d:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:34:F0:9A:40:8B:16:34:B6:28:D7:96:F8:7D:66:9F:F0:4B:22
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66323a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:52:2e:45:3b:25:98:75:40:57:5c:e4:a9:77:f2:5b:65:7d:
         58:c0:78:17:ce:c0:ef:7c:45:ed:3d:8e:c8:fa:90:94:85:90:
         9e:21:fb:48:eb:5d:b4:28:2e:6a:2b:2f:cc:47:90:1f:35:b0:
         a3:48:85:35:72:b0:ae:31:f4:8a:fa:11:47:3a:03:f6:b3:f2:
         a3:17:60:e6:c9:3a:28:ba:46:b0:62:c0:dd:66:5c:47:60:c1:
         9d:85:22:e6:70:b0:9e:7e:c2:5b:de:bc:13:e1:4d:48:5b:ca:
         27:3c:d3:3e:b8:6c:83:a3:1e:2f:c2:33:13:84:29:c5:e7:87:
         4a:ed:f1:0f:11:90:ef:2c:dc:82:3d:b4:c8:0b:4e:96:af:1d:
         76:5a:e3:df:b2:fe:b9:c5:2c:4c:2f:bf:41:c7:79:34:71:79:
         3a:de:90:0c:9a:13:87:f0:b0:2f:14:cf:60:ff:3c:30:c5:bd:
         a9:ec:08:55:76:a2:09:f2:f5:ec:ab:e1:5c:2e:4f:14:12:43:
         7c:e7:28:7b:77:9d:bb:0a:98:4e:6d:37:0f:d3:ae:c6:d6:8a:
         83:8c:36:13:6a:9c:9b:c4:54:ae:12:7c:e2:61:0c:22:3c:91:
         8c:31:ba:ca:d5:ee:a2:a8:ad:42:61:03:2c:43:cd:9d:3c:fe:
         08:d5:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:06:56 2026 by rpki-client