Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa
File:                     323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (raw, json)
Hash identifier:          qaDOTAGGMhyGLnF1wxy44A+7aO4NuYBRy9k6EWlVPcU=
Subject key identifier:   66:B3:9A:0B:40:F0:69:31:24:65:94:CC:10:CE:65:9B:AB:15:E4:29
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       3D90F219BAFA3F24810FED83BF3585EDF1C987D5
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa
Signing time:             Tue 06 Jan 2026 19:39:19 +0000
ROA not before:           Tue 06 Jan 2026 19:34:19 +0000
ROA not after:            Tue 05 Jan 2027 19:39:19 +0000
asID:                     266902
IP address blocks:        2801:15:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:90:f2:19:ba:fa:3f:24:81:0f:ed:83:bf:35:85:ed:f1:c9:87:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Jan  6 19:34:19 2026 GMT
            Not After : Jan  5 19:39:19 2027 GMT
        Subject: CN=66B39A0B40F06931246594CC10CE659BAB15E429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:3c:31:65:0a:a6:5e:5f:3f:9b:9b:4d:5f:
                    0b:c4:fd:36:6f:c3:39:36:84:48:df:6e:90:82:48:
                    5f:8a:57:9a:2a:17:05:2b:dc:87:66:18:08:1f:0e:
                    81:e4:4d:3e:f8:50:86:cd:91:05:14:1d:e4:30:da:
                    f0:9f:16:57:d9:53:e8:c1:06:26:b6:10:fa:df:01:
                    0d:aa:8b:80:b7:a7:bf:60:7d:d5:9e:5c:e6:ad:10:
                    5e:70:92:d2:5e:a9:55:bd:1b:87:23:6c:1c:91:c0:
                    37:29:f6:ae:43:4c:a7:be:0b:68:ce:32:60:ba:7d:
                    79:60:8c:31:51:a5:8d:6a:c8:09:a0:db:f2:75:9b:
                    5f:bc:58:a1:11:6f:76:5e:56:ee:56:8f:4c:f0:0a:
                    2b:c7:52:ff:66:c9:b1:07:9c:c6:a7:73:2c:5f:44:
                    9a:01:c2:d1:24:75:bd:34:dc:c4:de:b4:40:76:49:
                    dc:e2:aa:47:33:8d:03:a4:63:8a:d8:f8:3c:38:04:
                    fa:8c:31:80:68:62:6a:5c:f8:c4:8e:17:78:0d:4c:
                    3b:26:0a:28:7e:57:d2:73:db:ca:a5:d6:4f:c5:41:
                    7e:33:58:2d:d7:cd:0d:10:bc:43:47:e1:fd:cc:58:
                    05:52:00:70:a2:fa:de:81:18:a4:08:d0:0f:af:8b:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B3:9A:0B:40:F0:69:31:24:65:94:CC:10:CE:65:9B:AB:15:E4:29
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:b8:2a:af:35:d7:8d:75:51:2f:4f:89:01:66:08:60:bd:
         14:4d:ed:2f:a1:f8:c6:6a:67:5c:6c:6a:2b:a4:b3:52:29:47:
         01:a3:b6:ea:1d:a4:6d:4c:96:13:88:e6:14:55:f5:eb:ab:0d:
         18:23:da:6b:ed:9a:e1:77:32:d0:5a:f1:e1:36:31:ab:0c:10:
         98:69:79:c6:b3:d3:cb:0a:a6:b2:d3:fa:4e:b6:6d:85:18:db:
         a3:9c:e3:db:dc:33:80:8f:d4:a0:d9:01:85:9e:66:33:ae:18:
         37:c2:79:f8:0b:14:11:e1:94:57:5b:b9:55:3a:38:77:88:75:
         e8:22:bd:11:9a:30:3a:d3:b8:47:d8:c4:1f:60:a0:c4:9d:ff:
         ea:60:fa:91:95:cd:d2:f6:07:d8:20:a9:47:72:8f:d3:7c:bd:
         bd:03:ed:92:75:67:6f:ee:22:8a:f1:47:eb:57:fd:87:8c:08:
         50:d1:a4:a9:93:12:ae:5e:84:1c:b1:81:42:c1:a4:8d:5f:e8:
         70:cd:0b:48:d7:7e:62:cb:3f:1d:ce:2d:3e:39:25:e0:e2:8b:
         db:80:dd:85:aa:fb:2c:78:5d:d0:68:48:ff:5b:8d:84:db:4d:
         c7:bb:fb:ca:82:12:61:5b:9b:67:38:02:0f:3a:d6:93:cf:6b:
         88:01:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:22:15 2026 by rpki-client