Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/323830313a31323a3430303a3a2f34382d3438203d3e20323734313333.roa
File:                     323830313a31323a3430303a3a2f34382d3438203d3e20323734313333.roa (raw, json)
Hash identifier:          9sWVfpjCuUg3f4tFWQqiTYK1cMSOkoIDpr0FT+WQRzY=
Subject key identifier:   E7:A3:41:0D:A3:53:31:1B:1F:DE:C7:4A:87:8E:4F:0A:C7:D6:D8:FB
Certificate issuer:       /CN=06EB671A8B5345B79ABBED3482C6BF06D3BB4300
Certificate serial:       03E546A149B4021ACB74AAEF88C632E6D633FF5A
Authority key identifier: 06:EB:67:1A:8B:53:45:B7:9A:BB:ED:34:82:C6:BF:06:D3:BB:43:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/323830313a31323a3430303a3a2f34382d3438203d3e20323734313333.roa
Signing time:             Fri 30 Jan 2026 06:34:35 +0000
ROA not before:           Fri 30 Jan 2026 06:29:35 +0000
ROA not after:            Fri 29 Jan 2027 06:34:35 +0000
asID:                     274133
IP address blocks:        2801:12:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Feb 2026 01:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:46:a1:49:b4:02:1a:cb:74:aa:ef:88:c6:32:e6:d6:33:ff:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EB671A8B5345B79ABBED3482C6BF06D3BB4300
        Validity
            Not Before: Jan 30 06:29:35 2026 GMT
            Not After : Jan 29 06:34:35 2027 GMT
        Subject: CN=E7A3410DA353311B1FDEC74A878E4F0AC7D6D8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:9e:bc:63:9d:71:fc:95:bc:dd:a4:e7:71:
                    d0:38:68:2e:31:40:7f:c8:f9:d1:3f:f5:1b:ac:15:
                    6a:03:ab:6b:37:49:a2:7a:dd:19:d9:06:65:e6:4a:
                    e2:69:50:48:13:6f:5b:0a:bc:cd:b9:4c:80:07:7d:
                    78:4c:f5:be:60:26:ba:03:75:69:9a:61:cb:37:a7:
                    48:ad:83:1a:91:b9:1b:85:6e:6b:a7:03:a7:3f:0e:
                    cd:67:93:b2:39:93:89:bb:c1:9d:17:0e:8a:53:46:
                    62:cb:a9:a0:c4:fc:95:33:49:1d:b7:99:8c:3a:0b:
                    c2:f9:c8:40:fa:2d:e5:23:b2:c3:84:78:8e:a1:8d:
                    cb:32:18:ad:5b:91:93:8d:a1:fc:a2:12:08:58:c0:
                    b2:67:37:b3:cb:50:96:d5:b7:1c:17:7e:49:52:fb:
                    95:89:76:73:36:0e:f5:d9:f8:0b:85:87:35:b3:d2:
                    6f:54:fa:62:60:8f:75:6d:84:5b:03:09:9c:65:8a:
                    c0:36:ac:d8:97:81:f5:ef:d6:16:a5:de:d0:39:16:
                    83:a4:5e:39:72:03:35:57:48:49:79:2e:af:f4:2e:
                    2d:95:90:79:46:38:26:5a:bc:01:96:90:99:cf:b9:
                    67:5b:d5:69:a2:37:e3:1e:17:b3:02:c9:d3:96:c2:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:41:0D:A3:53:31:1B:1F:DE:C7:4A:87:8E:4F:0A:C7:D6:D8:FB
            X509v3 Authority Key Identifier:
                keyid:06:EB:67:1A:8B:53:45:B7:9A:BB:ED:34:82:C6:BF:06:D3:BB:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/323830313a31323a3430303a3a2f34382d3438203d3e20323734313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:d7:1d:86:f2:0f:17:18:59:42:64:48:16:39:43:eb:e3:
         15:91:99:fb:d6:7c:7d:8b:69:57:f2:5b:89:b3:75:30:16:3c:
         4e:e9:66:62:9f:32:d3:30:6d:e3:88:ae:55:0b:49:1e:34:0e:
         a6:ee:1a:90:ee:8e:8b:84:bb:37:d1:11:e1:a3:a0:7e:bc:c8:
         7e:af:21:f3:95:d4:92:71:db:f6:29:e2:89:a7:8d:98:5c:2b:
         eb:6d:6d:1f:f2:4e:f8:b8:c8:9b:c3:73:67:25:2b:80:21:2d:
         3b:91:a2:e2:de:ab:e8:81:5d:9e:d1:3f:56:73:48:60:ec:a0:
         45:6d:54:0b:5f:10:68:d1:f8:5e:1f:3e:08:94:dc:dc:b6:ac:
         b3:5e:25:95:0c:2e:9d:9e:a0:9f:1e:17:68:ea:9c:84:ea:98:
         e9:a3:bd:57:c0:3c:25:24:4f:80:fe:bd:47:ab:26:9a:f9:67:
         8c:74:94:9b:5c:58:08:71:ff:f8:b8:f9:33:26:b0:20:6c:27:
         f7:47:a0:d9:24:ce:bf:d8:ce:5f:c2:73:06:01:ca:b0:d9:4a:
         8c:c1:f2:f6:cb:0e:59:fa:cc:79:84:12:d6:e5:89:dd:73:fa:
         bb:d2:75:cf:fb:bc:da:70:54:65:1a:f6:a9:24:80:03:fd:8c:
         8a:ba:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:48:51 2026 by rpki-client