Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/323830313a31363a613030303a3a2f34382d3438203d3e203631343634.roa
File:                     323830313a31363a613030303a3a2f34382d3438203d3e203631343634.roa (raw, json)
Hash identifier:          rYDLXkabDJiU78gfFp0AiU5rrCt7TXigGxOoEL5lDmk=
Subject key identifier:   A4:5C:6C:48:F5:06:8C:9A:C0:80:33:6D:16:C8:7C:BA:30:3F:40:AD
Certificate issuer:       /CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Certificate serial:       30E7CA45B2753D8CE31F51FF8709D74A542A3E76
Authority key identifier: D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/323830313a31363a613030303a3a2f34382d3438203d3e203631343634.roa
Signing time:             Tue 06 Jan 2026 19:39:11 +0000
ROA not before:           Tue 06 Jan 2026 19:34:11 +0000
ROA not after:            Tue 05 Jan 2027 19:39:11 +0000
asID:                     61464
IP address blocks:        2801:16:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 09:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e7:ca:45:b2:75:3d:8c:e3:1f:51:ff:87:09:d7:4a:54:2a:3e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
        Validity
            Not Before: Jan  6 19:34:11 2026 GMT
            Not After : Jan  5 19:39:11 2027 GMT
        Subject: CN=A45C6C48F5068C9AC080336D16C87CBA303F40AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:42:9b:5c:a2:d3:71:26:3a:45:98:e4:06:
                    20:a6:e5:3e:88:de:ba:12:e7:0f:9d:c0:da:9c:f0:
                    43:bc:ad:c2:b0:85:94:16:5a:12:e2:8f:8b:2c:3c:
                    f7:af:69:68:ee:f1:bf:4a:c9:c1:1d:1b:ea:1d:e7:
                    bb:a6:b1:0b:9e:dc:e3:7d:6e:a3:40:47:78:8e:72:
                    92:9e:b3:90:a9:62:2c:eb:db:16:28:33:48:f7:12:
                    fe:c9:29:89:34:8c:c1:32:65:c6:a6:6e:5f:2e:21:
                    1d:b2:42:4d:d3:f4:1f:b4:16:ed:94:a3:c1:56:f0:
                    2b:04:1d:5d:b3:d2:0f:1c:9f:0a:c1:43:79:1e:d3:
                    d9:5d:d7:f6:63:c2:d9:c3:e5:cc:64:5c:52:d4:d2:
                    3e:51:a9:cc:dd:e9:a9:c0:47:a1:70:d5:4a:46:ed:
                    e0:e7:8e:27:f6:19:8f:7a:0c:cf:d2:df:60:55:c8:
                    05:c9:7c:7d:64:7d:dd:a1:ff:e7:e4:1c:ce:47:7e:
                    14:13:05:3d:df:ff:db:3b:02:c1:91:fa:b3:ca:a1:
                    c7:af:bc:11:6b:a1:32:f4:b3:ca:c3:81:4d:46:35:
                    1c:57:8d:06:4c:be:48:6c:15:07:f9:e1:a2:f6:fe:
                    80:9e:04:a2:1d:72:ab:c0:e5:21:6c:8b:ae:2f:8d:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:6C:48:F5:06:8C:9A:C0:80:33:6D:16:C8:7C:BA:30:3F:40:AD
            X509v3 Authority Key Identifier:
                keyid:D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/323830313a31363a613030303a3a2f34382d3438203d3e203631343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:65:19:25:bb:0a:88:ac:15:b8:9a:4c:83:3c:2a:83:77:
         e7:72:f6:04:4c:ff:6f:a8:02:66:de:e1:21:94:00:54:cc:03:
         d6:13:64:98:6f:12:87:cd:7b:80:6e:21:3e:ac:c8:7d:56:ba:
         59:9e:20:64:1e:05:c5:f6:9e:66:6f:86:de:3b:16:b2:1c:55:
         d7:3f:83:b7:24:e9:66:78:c3:63:f4:87:16:31:71:c8:4d:ae:
         56:32:8f:35:cc:64:9b:cb:8a:51:4e:9a:11:b0:96:15:1f:82:
         83:11:74:18:bb:b3:8f:0b:41:34:12:e1:a4:44:ad:a6:eb:3d:
         3a:92:20:86:7f:45:c5:47:01:9f:d2:27:ed:e5:47:7a:0f:21:
         b3:ba:f4:47:b1:9c:12:d1:a0:c9:ac:14:f6:79:7e:53:85:df:
         d2:ec:fd:01:12:dd:03:97:b0:8f:39:81:79:43:e9:55:82:6f:
         20:be:20:c4:e5:aa:97:22:a7:74:fb:75:17:f4:ec:69:fe:85:
         c3:0b:ad:1e:e0:0e:2e:1e:bb:ce:4e:5f:da:9d:9a:62:51:80:
         9a:ae:8e:89:f5:78:e4:5d:41:e1:e4:6d:ad:99:0d:7a:86:6d:
         f7:9c:96:a9:f5:03:ca:96:d5:d9:0d:61:b2:8d:03:26:f9:f1:
         2b:6f:0c:8c
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUMOfKRbJ1PYzjH1H/hwnXSlQqPnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRCRTYzMURFNEE0NTlEQTA4NDM2NThGMjE5OTE3QjE2
RTZFMEQ2RDAeFw0yNjAxMDYxOTM0MTFaFw0yNzAxMDUxOTM5MTFaMDMxMTAvBgNV
BAMTKEE0NUM2QzQ4RjUwNjhDOUFDMDgwMzM2RDE2Qzg3Q0JBMzAzRjQwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MkKbXKLTcSY6RZjkBiCm5T6I
3roS5w+dwNqc8EO8rcKwhZQWWhLij4ssPPevaWju8b9KycEdG+od57umsQue3ON9
bqNAR3iOcpKes5CpYizr2xYoM0j3Ev7JKYk0jMEyZcambl8uIR2yQk3T9B+0Fu2U
o8FW8CsEHV2z0g8cnwrBQ3ke09ld1/ZjwtnD5cxkXFLU0j5Rqczd6anAR6Fw1UpG
7eDnjif2GY96DM/S32BVyAXJfH1kfd2h/+fkHM5HfhQTBT3f/9s7AsGR+rPKocev
vBFroTL0s8rDgU1GNRxXjQZMvkhsFQf54aL2/oCeBKIdcqvA5SFsi64vjUrdAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUpFxsSPUGjJrAgDNtFsh8ujA/QK0wHwYDVR0j
BBgwFoAU1L5jHeSkWdoIQ2WPIZkXsW5uDW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkQxQzlBQjA2OTZCMTJDRjgwRjUxMjg0MjlEQjVDRDZG
NUUxODlCNThDN0U1Mzk2QzkwNUNCRDA2MjgxNjQxLzAvRDRCRTYzMURFNEE0NTlE
QTA4NDM2NThGMjE5OTE3QjE2RTZFMEQ2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENEJFNjMxREU0QTQ1OURBMDg0
MzY1OEYyMTk5MTdCMTZFNkUwRDZELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJEMUM5QUIwNjk2QjEyQ0Y4MEY1MTI4NDI5REI1Q0Q2RjVFMTg5QjU4
QzdFNTM5NkM5MDVDQkQwNjI4MTY0MS8wLzMyMzgzMDMxM2EzMTM2M2E2MTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNDM2MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAWoAAwDQYJKoZIhvcNAQELBQADggEBAAxGZRkluwqIrBW4mkyDPCqDd+dy9gRM
/2+oAmbe4SGUAFTMA9YTZJhvEofNe4BuIT6syH1WulmeIGQeBcX2nmZvht47FrIc
Vdc/g7ck6WZ4w2P0hxYxcchNrlYyjzXMZJvLilFOmhGwlhUfgoMRdBi7s48LQTQS
4aRErabrPTqSIIZ/RcVHAZ/SJ+3lR3oPIbO69EexnBLRoMmsFPZ5flOF39Ls/QES
3QOXsI85gXlD6VWCbyC+IMTlqpcip3T7dRf07Gn+hcMLrR7gDi4eu85OX9qdmmJR
gJqujon1eORdQeHkba2ZDXqGbfeclqn1A8qW1dkNYbKNAyb58StvDIw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:18 2026 by rpki-client