Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          rS4LQr7yrISdUET3mO1KIClJwupx8/eKXyg4ctUOIsQ=
Subject key identifier:   27:32:D4:99:14:FA:D7:B6:19:7F:29:07:92:13:67:98:D0:35:41:B7
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       738C2150DDAE510F1D05C4AB30559514C4DEBD78
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa
Signing time:             Mon 02 Feb 2026 10:28:52 +0000
ROA not before:           Mon 02 Feb 2026 10:23:52 +0000
ROA not after:            Mon 01 Feb 2027 10:28:52 +0000
asID:                     3573
IP address blocks:        2801:1f0:4072::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:21:50:dd:ae:51:0f:1d:05:c4:ab:30:55:95:14:c4:de:bd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Feb  2 10:23:52 2026 GMT
            Not After : Feb  1 10:28:52 2027 GMT
        Subject: CN=2732D49914FAD7B6197F290792136798D03541B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:a1:d9:fb:64:95:e1:52:2b:bc:2b:42:97:
                    3b:7e:62:15:25:34:26:8f:16:a7:7c:e2:49:36:7b:
                    6b:39:5e:68:e0:c6:82:9d:0a:f2:27:42:0f:b8:4e:
                    39:c4:66:ab:df:54:5b:15:10:f6:58:1b:29:97:db:
                    2e:13:7c:0b:a4:6a:e7:11:8d:df:d9:f1:e3:ec:85:
                    ca:82:43:cf:56:26:1a:8d:74:9a:a6:f3:9c:f1:b9:
                    f4:93:bb:ad:5a:e0:ec:60:4d:fc:40:cf:62:cd:33:
                    84:05:03:31:df:39:4d:45:9b:7b:3f:50:03:fc:6d:
                    5e:d0:cd:21:0a:1c:cf:89:e7:27:81:a9:9f:1e:5f:
                    f3:fc:f1:e5:7d:12:f0:ea:83:e3:39:a6:d8:7b:36:
                    80:68:6c:9b:a3:f5:5e:b6:dd:be:8f:08:34:5d:0e:
                    88:45:58:69:70:a3:d7:99:95:cd:d5:09:0f:96:c8:
                    9e:3f:6d:c7:18:7b:56:43:14:a6:ea:be:76:70:11:
                    42:c1:13:74:2b:4d:ca:d8:d1:65:98:bd:5e:49:89:
                    83:8b:82:ff:36:44:6d:1e:16:67:df:fb:1b:d5:f3:
                    c7:10:55:74:5a:f6:c5:8f:c6:3f:8c:dc:23:b1:4d:
                    0a:45:87:1e:4f:80:11:ce:e3:f3:e4:84:f3:02:5a:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:D4:99:14:FA:D7:B6:19:7F:29:07:92:13:67:98:D0:35:41:B7
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4072::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:32:b5:97:24:62:a2:9b:b4:9f:ae:0c:02:d2:db:15:ce:c5:
         4b:b5:03:d1:c4:e5:ab:54:48:c4:85:03:ae:b7:42:59:53:fc:
         94:f3:0f:86:f0:f5:af:30:f8:c6:60:7c:ba:42:9b:76:07:0c:
         36:2e:47:76:bc:ad:0a:f9:26:c3:3c:83:c4:c9:85:1b:47:82:
         59:83:92:1b:14:8b:55:c0:73:52:d0:d2:6a:43:0e:88:db:f2:
         8c:ef:a2:d5:42:f7:6b:ab:eb:62:c0:17:5b:36:0a:4d:41:0a:
         5b:b6:e7:14:3d:cc:80:78:29:d7:f7:f8:d0:80:6e:6e:e6:40:
         be:c4:b7:14:8e:dd:2f:d5:1f:b9:a3:88:4d:8d:52:25:bd:0b:
         9e:87:09:ec:48:07:a3:7f:49:e6:d3:c1:69:fe:c3:0b:6d:b0:
         3d:47:80:ab:de:e4:45:33:62:fe:2a:14:a6:c9:a9:c7:48:fc:
         8c:19:ab:5f:f5:70:e7:ef:fe:69:dc:b8:4f:5f:2f:36:a1:5b:
         42:2a:11:e4:bf:7d:47:dd:2a:6e:1e:23:f6:12:4d:4e:1e:e2:
         44:a0:6b:cc:b6:14:4c:7c:c6:cc:81:4a:65:8d:ac:03:2a:b3:
         e3:52:7d:f4:5c:46:bb:7d:1a:bf:26:7b:9f:55:68:89:4e:83:
         17:f0:4a:bf
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUc4whUN2uUQ8dBcSrMFWVFMTevXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MjQ2NzVFODg0MzdGQzI2NjhCRDY5RTI3Njc4RDVB
N0QwQ0IyQTAeFw0yNjAyMDIxMDIzNTJaFw0yNzAyMDExMDI4NTJaMDMxMTAvBgNV
BAMTKDI3MzJENDk5MTRGQUQ3QjYxOTdGMjkwNzkyMTM2Nzk4RDAzNTQxQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmKHZ+2SV4VIrvCtClzt+YhUl
NCaPFqd84kk2e2s5XmjgxoKdCvInQg+4TjnEZqvfVFsVEPZYGymX2y4TfAukaucR
jd/Z8ePshcqCQ89WJhqNdJqm85zxufSTu61a4OxgTfxAz2LNM4QFAzHfOU1Fm3s/
UAP8bV7QzSEKHM+J5yeBqZ8eX/P88eV9EvDqg+M5pth7NoBobJuj9V623b6PCDRd
DohFWGlwo9eZlc3VCQ+WyJ4/bccYe1ZDFKbqvnZwEULBE3QrTcrY0WWYvV5JiYOL
gv82RG0eFmff+xvV88cQVXRa9sWPxj+M3COxTQpFhx5PgBHO4/PkhPMCWpr/AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUJzLUmRT617YZfykHkhNnmNA1QbcwHwYDVR0j
BBgwFoAUppJGdeiEN/wmaL1p4nZ41afQyyowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODk3MTQzMDY4NkYyRTNBQjdFMDVFODdCMkNCNEIxRjAy
NjJEMUIxRTFBOUY2Q0EzMjNBQTgxNTQ3RjUwRTBFLzAvQTY5MjQ2NzVFODg0MzdG
QzI2NjhCRDY5RTI3Njc4RDVBN0QwQ0IyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjkyNDY3NUU4ODQzN0ZDMjY2
OEJENjlFMjc2NzhENUE3RDBDQjJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg5NzE0MzA2ODZGMkUzQUI3RTA1RTg3QjJDQjRCMUYwMjYyRDFCMUUx
QTlGNkNBMzIzQUE4MTU0N0Y1MEUwRS8wLzMyMzgzMDMxM2EzMTY2MzAzYTM0MzAz
NzMyM2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzMzNTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AQHwQHIwDQYJKoZIhvcNAQELBQADggEBACQytZckYqKbtJ+uDALS2xXOxUu1A9HE
5atUSMSFA663QllT/JTzD4bw9a8w+MZgfLpCm3YHDDYuR3a8rQr5JsM8g8TJhRtH
glmDkhsUi1XAc1LQ0mpDDojb8ozvotVC92ur62LAF1s2Ck1BClu25xQ9zIB4Kdf3
+NCAbm7mQL7EtxSO3S/VH7mjiE2NUiW9C56HCexIB6N/SebTwWn+wwttsD1HgKve
5EUzYv4qFKbJqcdI/IwZq1/1cOfv/mncuE9fLzahW0IqEeS/fUfdKm4eI/YSTU4e
4kSga8y2FEx8xsyBSmWNrAMqs+NSffRcRrt9Gr8me59VaIlOgxfwSr8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:53 2026 by rpki-client