Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/323830313a3165383a3a2f34302d3536203d3e20323634363037.roa
File:                     323830313a3165383a3a2f34302d3536203d3e20323634363037.roa (raw, json)
Hash identifier:          RruRdzYxufoNVYTwG4L7lCWtitmLcrp5e+yL1ndwoN4=
Subject key identifier:   A6:69:C6:5A:A7:64:41:A6:04:3D:14:E6:1C:C9:BC:8A:B3:71:B7:58
Certificate issuer:       /CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
Certificate serial:       5CC25BA151B8D8DBB9A0461E4DCD2A033D15202A
Authority key identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/323830313a3165383a3a2f34302d3536203d3e20323634363037.roa
Signing time:             Tue 06 Jan 2026 19:17:39 +0000
ROA not before:           Tue 06 Jan 2026 19:12:39 +0000
ROA not after:            Tue 05 Jan 2027 19:17:39 +0000
asID:                     264607
IP address blocks:        2801:1e8::/40 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 12:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c2:5b:a1:51:b8:d8:db:b9:a0:46:1e:4d:cd:2a:03:3d:15:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
        Validity
            Not Before: Jan  6 19:12:39 2026 GMT
            Not After : Jan  5 19:17:39 2027 GMT
        Subject: CN=A669C65AA76441A6043D14E61CC9BC8AB371B758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:fb:de:cd:79:17:39:25:8a:92:e0:1c:84:
                    fe:81:e5:95:64:a5:3d:90:72:f4:de:c3:62:f2:e1:
                    d7:47:4f:c2:1c:c4:23:c7:12:1d:a9:be:9a:3e:68:
                    3b:ec:57:8c:98:bf:f5:02:9e:60:31:8d:74:37:ee:
                    30:ca:27:ae:6b:53:07:2c:07:a8:11:d7:c8:ae:87:
                    29:5c:d3:f5:67:9c:04:82:8b:9d:f4:a9:3e:1a:61:
                    ca:a7:c3:de:20:89:1a:7a:b8:67:65:04:b8:7b:88:
                    e8:9d:e8:77:c6:2c:f3:c4:47:3f:2d:ec:f9:69:13:
                    26:fd:29:6a:28:eb:5b:b0:a7:f9:73:59:9f:f1:25:
                    73:fc:1e:7d:2a:54:bc:d4:5b:e7:60:bd:a8:b7:20:
                    b2:61:7c:ae:11:a8:1f:46:b0:19:75:f7:f3:e3:1a:
                    e0:d0:4a:ae:d9:5f:86:2f:90:a3:3b:dc:a9:56:d2:
                    bf:64:d8:57:4f:43:01:c1:b5:8a:1f:b2:1f:f2:cd:
                    fb:fc:ab:4f:ae:14:f0:f2:3e:89:c1:ec:cc:47:6a:
                    a3:56:bb:b4:81:de:bf:07:e8:dc:84:cc:31:d2:f2:
                    a3:48:f3:ba:d6:25:c6:e4:23:50:84:a8:4e:49:5b:
                    2d:72:3f:d4:35:5d:9e:39:a0:35:53:e2:d6:9d:03:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:69:C6:5A:A7:64:41:A6:04:3D:14:E6:1C:C9:BC:8A:B3:71:B7:58
            X509v3 Authority Key Identifier:
                keyid:91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/323830313a3165383a3a2f34302d3536203d3e20323634363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e8::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:16:e4:a0:a3:9c:bb:5f:0a:ec:b5:0f:3f:23:a9:00:19:
         a9:42:3b:ef:9f:c1:c5:3e:a8:68:cf:be:c9:17:73:95:55:cf:
         a1:72:24:e5:08:b3:06:18:1c:ce:50:eb:fa:14:11:81:ad:6b:
         96:db:f2:0a:30:d5:4f:f5:70:cc:38:bf:8b:f4:89:a2:70:11:
         b4:b5:8e:e6:7b:8f:cf:ce:51:1c:6b:81:90:0f:28:b0:6e:48:
         da:4f:0b:c7:d4:11:de:2a:5f:12:75:47:78:10:1a:75:47:87:
         d7:40:a0:46:24:50:53:12:06:a2:6e:b5:17:7b:60:0d:90:3e:
         86:93:dc:9e:6e:a6:52:e5:86:55:68:52:47:9f:8a:3c:34:0a:
         7f:20:94:fc:64:52:af:d1:2a:f1:ba:cb:9b:25:23:3d:6a:91:
         78:4b:0c:25:60:56:07:fc:6b:0a:e7:a4:a5:7e:61:51:be:8e:
         57:de:cf:0a:e0:d7:c3:ca:bb:e4:7e:0e:fc:84:7e:5f:9c:95:
         f0:23:da:b0:e0:a8:d0:9f:87:e4:57:e7:91:90:7c:6b:aa:f6:
         81:54:5e:84:e9:de:59:fe:5c:2d:e7:a0:98:b6:fd:dd:93:4a:
         11:0e:2f:0b:de:b8:db:16:25:66:57:e6:51:04:32:a5:f1:83:
         b3:72:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:09 2026 by rpki-client