Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa
File:                     323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa (raw, json)
Hash identifier:          WpJofDCF7ajIHESBUEVgKH8JJcEXO3Z/qVhmL8LEzfk=
Subject key identifier:   14:20:F6:74:DB:3E:13:EC:8B:96:29:9E:C3:2F:C6:BD:47:8E:17:9C
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       386959D6DD6E8E1926BFAC6D25A0FAF7CD6176D8
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa
Signing time:             Tue 06 Jan 2026 19:07:09 +0000
ROA not before:           Tue 06 Jan 2026 19:02:09 +0000
ROA not after:            Tue 05 Jan 2027 19:07:09 +0000
asID:                     20191
IP address blocks:        2001:1310:7171::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:69:59:d6:dd:6e:8e:19:26:bf:ac:6d:25:a0:fa:f7:cd:61:76:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Jan  6 19:02:09 2026 GMT
            Not After : Jan  5 19:07:09 2027 GMT
        Subject: CN=1420F674DB3E13EC8B96299EC32FC6BD478E179C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:f8:7c:b2:a7:c3:ad:ca:73:25:bf:ab:08:
                    0b:db:3e:11:e2:dd:90:f9:f2:cf:55:ce:62:eb:67:
                    0e:57:eb:f7:b4:ba:14:d2:7d:8a:3b:0e:56:1b:c1:
                    59:9b:f7:67:5a:17:58:cf:22:5c:8c:d3:b4:e5:69:
                    24:4e:95:3e:ad:5e:21:ec:37:a3:9e:e8:24:88:bf:
                    d0:61:e5:71:22:ea:5e:7e:70:36:66:5f:34:9a:4b:
                    bc:ac:8f:95:bc:79:dc:e8:84:c7:cd:09:c9:f9:02:
                    87:64:43:ab:c4:db:fb:b8:52:08:73:0a:6f:7f:16:
                    b0:bf:16:ed:80:9d:6c:b7:73:60:76:6b:f1:78:ce:
                    5e:b4:18:23:93:7d:a2:d3:a3:b6:14:72:53:b3:cc:
                    14:94:5b:b8:67:5c:3f:45:0e:5c:e4:53:9b:27:45:
                    64:9f:fb:c6:a1:f6:71:63:7e:3f:ad:38:ec:4c:32:
                    ec:94:0a:ea:32:b7:6c:04:f3:ff:31:93:32:76:fe:
                    14:d9:5a:32:c3:dc:7d:29:07:4d:87:46:71:8d:ed:
                    ad:48:69:85:38:47:5f:79:bb:ca:8d:88:ea:87:00:
                    e2:fb:bf:11:ae:17:87:5e:8d:ff:8a:43:55:6a:1b:
                    cd:55:00:e4:aa:56:7c:93:e1:f3:d3:c4:57:df:0c:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:F6:74:DB:3E:13:EC:8B:96:29:9E:C3:2F:C6:BD:47:8E:17:9C
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:7171::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:19:c7:cb:84:6b:22:9d:50:7d:b5:31:b2:86:f7:c3:c0:12:
         2b:9c:07:9b:68:cf:76:a9:e5:1b:dc:c8:98:7f:b1:7e:9e:9d:
         8b:81:ca:60:6f:68:58:f4:7e:6f:ab:50:ab:b5:4c:2c:66:dc:
         a6:3d:14:c9:c0:fa:94:1e:d6:21:9a:f8:c0:7a:7c:d1:7f:8f:
         0d:00:e8:1f:62:c3:88:84:0b:11:f9:83:2b:f9:b6:ce:e5:1e:
         fe:09:30:69:4d:f3:e9:c3:92:9a:cc:33:e5:00:f5:7a:80:64:
         6d:13:cf:2c:dd:5a:63:7a:0b:92:fd:57:cd:41:05:69:d0:e5:
         14:88:1f:e2:1c:a2:9f:a4:83:aa:a0:57:81:89:57:8d:eb:f1:
         fb:c3:b6:64:35:c2:5b:4d:f8:59:2b:b1:a5:41:07:03:bc:18:
         62:90:94:c5:97:51:b5:b5:74:4c:01:5a:a2:2d:1a:cc:85:2f:
         49:da:28:2c:e5:44:f7:76:a5:54:32:95:6c:29:b1:aa:7a:60:
         86:3e:91:31:cb:62:8c:a1:3a:c4:55:b8:f9:e8:bf:af:a5:40:
         aa:50:da:b1:cc:85:2b:1d:d7:e1:27:c2:60:00:08:09:db:24:
         5f:98:b6:c4:5a:e9:f9:ae:37:2e:e1:6b:d8:9a:3d:0d:57:42:
         04:1c:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:37 2026 by rpki-client