Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/323830313a31323a353030303a3a2f34382d3438203d3e20323634373835.roa
File:                     323830313a31323a353030303a3a2f34382d3438203d3e20323634373835.roa (raw, json)
Hash identifier:          FsAcwo3WOVzRt2bSCkF1AXc4uXo0Ki51p/LNX8MP30I=
Subject key identifier:   4E:D7:BC:31:0A:E9:32:BA:47:39:94:8E:4F:B8:0D:B4:82:06:95:0B
Certificate issuer:       /CN=3F847DE4B0A860A1D8D91662A1046E42313C80FB
Certificate serial:       7997BC856B34ECA235DEAF0CC923C9947216EFB6
Authority key identifier: 3F:84:7D:E4:B0:A8:60:A1:D8:D9:16:62:A1:04:6E:42:31:3C:80:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/323830313a31323a353030303a3a2f34382d3438203d3e20323634373835.roa
Signing time:             Wed 18 Feb 2026 18:15:00 +0000
ROA not before:           Wed 18 Feb 2026 18:10:00 +0000
ROA not after:            Wed 17 Feb 2027 18:15:00 +0000
asID:                     264785
IP address blocks:        2801:12:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 22:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:bc:85:6b:34:ec:a2:35:de:af:0c:c9:23:c9:94:72:16:ef:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F847DE4B0A860A1D8D91662A1046E42313C80FB
        Validity
            Not Before: Feb 18 18:10:00 2026 GMT
            Not After : Feb 17 18:15:00 2027 GMT
        Subject: CN=4ED7BC310AE932BA4739948E4FB80DB48206950B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:6e:b2:c5:ed:f5:e0:6e:fc:27:f3:5a:e1:
                    06:48:b6:3a:a4:8d:0b:cc:95:47:f8:59:5d:c0:5e:
                    5d:32:06:2b:bd:b8:84:4d:50:0a:3a:cd:24:85:69:
                    d2:86:97:fd:39:39:0d:f5:a3:27:0c:76:34:78:7c:
                    41:fe:3a:6f:7a:a0:0a:d3:b7:6a:56:d2:ca:2d:50:
                    7e:69:a6:a7:4d:80:9b:ae:d3:ac:ce:92:aa:bb:c6:
                    8f:8d:73:98:5e:51:99:13:03:39:a5:a9:83:ed:ee:
                    ab:fe:ef:b9:bc:cb:23:fb:db:5a:06:d1:dc:fa:a4:
                    82:d6:48:f5:a2:e5:ed:3a:9f:50:61:40:78:a9:54:
                    9b:15:7d:cb:c6:44:ef:0b:d5:3f:cb:5b:0f:05:d2:
                    4d:5b:9b:78:fc:09:15:62:a2:40:df:bc:65:df:03:
                    6a:2a:52:ad:94:c2:0d:da:12:a5:ac:3f:0e:f7:01:
                    f0:4d:5d:0a:be:e7:2f:97:fe:22:d3:d0:ca:61:cf:
                    46:d8:07:51:c9:f8:a9:0c:b4:3a:67:87:76:37:5e:
                    04:4d:5a:d5:9f:c5:11:b8:41:8f:4f:13:9f:21:7d:
                    91:17:35:ad:9f:0c:32:9f:f6:ee:db:14:54:f1:9f:
                    d0:64:01:18:cf:c8:ad:29:46:27:aa:f2:b2:0f:b3:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D7:BC:31:0A:E9:32:BA:47:39:94:8E:4F:B8:0D:B4:82:06:95:0B
            X509v3 Authority Key Identifier:
                keyid:3F:84:7D:E4:B0:A8:60:A1:D8:D9:16:62:A1:04:6E:42:31:3C:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F847DE4B0A860A1D8D91662A1046E42313C80FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06B3AEB73D3792FDFD897AA036E19E996013E308B73BDB0346E79FB7F0372F27/0/323830313a31323a353030303a3a2f34382d3438203d3e20323634373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:e1:79:c0:8d:54:c1:60:25:5c:60:63:5a:60:97:b2:e8:
         96:e1:c4:10:73:b7:bb:fe:1b:bb:83:24:10:45:24:47:41:54:
         04:d3:9c:52:43:5a:46:c4:bf:eb:88:20:76:bb:f5:15:6e:7f:
         bc:7c:8a:fe:d8:90:2c:0c:88:ee:04:8c:63:60:75:5f:4e:22:
         7e:57:a6:3d:c5:92:3e:ee:99:6d:b5:43:37:df:db:a9:ea:ee:
         db:21:b7:4d:b6:79:ab:94:73:b9:32:a5:51:39:0a:62:c2:5a:
         ea:eb:c2:29:0d:29:6c:97:eb:1c:bb:8e:da:ed:bb:42:d7:77:
         ae:f8:e9:5d:2c:da:60:ee:7f:3c:3d:40:8f:01:ca:fc:5c:e4:
         5c:54:1f:16:c2:b8:8a:a5:6f:a2:c8:4d:db:5e:34:f6:89:1a:
         7e:ef:10:17:90:ef:48:5c:35:f4:a4:6a:4c:98:7b:30:eb:44:
         30:b5:fa:1c:22:90:f8:2a:62:ca:d2:97:0b:4a:3b:ea:17:33:
         60:4f:df:b9:9f:bd:61:ac:c7:e8:4c:d4:a2:c7:68:e5:68:03:
         20:ce:8c:24:04:cc:56:d4:42:42:7b:f4:dd:e1:4f:79:0c:bf:
         42:a7:aa:1e:49:5c:3a:9f:49:ad:dd:5c:4c:27:14:47:03:cf:
         a4:aa:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:04 2026 by rpki-client