Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
File:                     323830363a3266343a3a2f33322d3438203d3e20323635353430.roa (raw, json)
Hash identifier:          1eQSiULXXyj2O+M+52AykeGRbsw3VzjXtYjRXKBziBQ=
Subject key identifier:   59:61:E6:C9:B0:7B:B6:04:8D:05:8D:60:F9:76:02:50:6A:24:7F:EE
Certificate issuer:       /CN=4B158614B27067F3C5F4A713E506CD799671ECB6
Certificate serial:       6B652F1641ADB6B0DFCED75B318549E873524704
Authority key identifier: 4B:15:86:14:B2:70:67:F3:C5:F4:A7:13:E5:06:CD:79:96:71:EC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
Signing time:             Fri 30 Jan 2026 06:48:56 +0000
ROA not before:           Fri 30 Jan 2026 06:43:56 +0000
ROA not after:            Fri 29 Jan 2027 06:48:56 +0000
asID:                     265540
IP address blocks:        2806:2f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:65:2f:16:41:ad:b6:b0:df:ce:d7:5b:31:85:49:e8:73:52:47:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B158614B27067F3C5F4A713E506CD799671ECB6
        Validity
            Not Before: Jan 30 06:43:56 2026 GMT
            Not After : Jan 29 06:48:56 2027 GMT
        Subject: CN=5961E6C9B07BB6048D058D60F97602506A247FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:d0:11:35:bc:4c:33:14:2f:b8:10:2d:ef:
                    f8:e0:be:71:ad:b5:47:26:51:98:fd:ec:c1:b8:05:
                    2a:d7:88:96:b6:e9:2f:58:44:02:e2:3f:f2:b9:c3:
                    b5:9a:73:ad:23:0b:b8:ff:3f:dc:d1:0e:fd:cf:c7:
                    9d:0c:97:18:71:08:5e:2e:ea:78:c8:03:2e:c2:af:
                    88:e8:a8:9a:19:c5:00:0b:17:fb:d2:ab:86:d1:56:
                    64:86:85:bd:4d:fe:f7:29:d3:d6:ff:f3:bf:2d:3e:
                    19:75:e7:50:08:19:93:e7:65:85:d5:e5:e8:93:86:
                    ab:f5:96:4f:37:c6:bd:67:2f:7b:c0:f3:ed:b8:81:
                    9f:8a:23:73:c2:ab:25:54:a2:ce:b6:7c:5f:b6:20:
                    cc:39:76:20:15:a3:56:6b:ab:3b:37:af:84:b2:91:
                    a4:63:d3:ba:06:9c:13:2b:df:f7:b9:ef:89:17:e7:
                    e9:af:64:06:2a:09:d9:08:8e:5f:03:ee:e0:88:e4:
                    61:be:8f:47:2d:3c:2a:3b:cd:7a:14:2e:f0:88:c0:
                    0b:c5:2a:28:b6:1a:99:53:2a:a0:3c:61:4b:fd:c6:
                    ac:05:8e:50:ea:d9:c6:bc:8b:05:8e:d9:93:08:e0:
                    e0:70:99:fc:37:5d:ad:ac:ff:0e:5c:87:f2:f0:c7:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:E6:C9:B0:7B:B6:04:8D:05:8D:60:F9:76:02:50:6A:24:7F:EE
            X509v3 Authority Key Identifier:
                keyid:4B:15:86:14:B2:70:67:F3:C5:F4:A7:13:E5:06:CD:79:96:71:EC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:18:2d:4a:e1:8d:22:27:f9:01:29:88:42:21:ce:71:c4:
         9c:7a:f9:e3:1c:8f:5c:aa:06:83:e3:05:3a:aa:c2:7f:e5:91:
         d2:9d:31:4d:0f:77:40:b5:bb:59:8e:f2:54:89:87:65:f7:96:
         e6:44:b1:91:8e:42:e6:3b:7c:0d:3c:61:66:c0:ed:c9:47:59:
         c2:d6:24:a8:d6:f1:60:a4:22:6c:ed:7c:6d:20:2c:b6:6e:6c:
         16:b6:28:b9:48:2b:0f:cc:ee:0f:d4:5b:59:4b:08:ad:66:d9:
         58:40:9a:ef:a2:da:76:4b:3f:68:88:d5:90:d7:9b:ce:bd:ca:
         25:eb:93:dc:c6:2f:19:e7:f9:b4:30:f0:fa:af:55:28:d6:5a:
         2c:b5:d6:a8:11:a2:13:72:ec:9a:4d:a9:70:3f:58:06:93:c8:
         a7:aa:97:2c:ea:ee:6f:f6:ee:b6:f9:4c:29:22:d7:58:22:46:
         6f:5d:98:17:ca:f2:fe:ba:04:e3:81:e1:bb:ad:72:76:10:2b:
         ea:ab:75:48:f7:2a:2b:41:44:65:76:18:e9:9a:e9:4a:a4:0a:
         0a:e3:e1:aa:35:8c:1a:66:aa:94:97:2f:7a:7d:03:82:d6:c4:
         d0:04:58:d0:b7:92:ae:2c:cf:9c:07:2e:62:4d:f9:5a:80:45:
         a7:0e:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:45 2026 by rpki-client