Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa
File:                     323830313a3135613a3a2f34302d3430203d3e20323637373838.roa (raw, json)
Hash identifier:          DCZp+xyoXY8c4DKQNKLVU13abAXWMKT2QnEa/jlywk0=
Subject key identifier:   34:04:25:4E:2A:3C:37:1A:76:9F:1F:6E:A4:F5:A8:CE:91:B6:C7:A2
Certificate issuer:       /CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
Certificate serial:       6C15594BAF4550ACBA9C8EFE2DE6FD8EA890EA19
Authority key identifier: A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa
Signing time:             Tue 06 Jan 2026 19:37:08 +0000
ROA not before:           Tue 06 Jan 2026 19:32:08 +0000
ROA not after:            Tue 05 Jan 2027 19:37:08 +0000
asID:                     267788
IP address blocks:        2801:15a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:15:59:4b:af:45:50:ac:ba:9c:8e:fe:2d:e6:fd:8e:a8:90:ea:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
        Validity
            Not Before: Jan  6 19:32:08 2026 GMT
            Not After : Jan  5 19:37:08 2027 GMT
        Subject: CN=3404254E2A3C371A769F1F6EA4F5A8CE91B6C7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:c9:62:8e:15:29:1a:4f:ab:db:c3:35:34:
                    1b:e4:69:d8:9e:53:4b:45:1c:5b:f8:12:c2:1a:6f:
                    fe:17:5a:4c:3c:d3:9d:63:b5:69:2f:1e:e9:8b:19:
                    e3:d0:a3:50:84:f3:73:1e:c0:cb:cd:a8:17:90:96:
                    18:9f:49:47:f5:6a:7e:2e:4e:f2:06:8f:81:e5:ab:
                    25:cb:4c:6f:32:90:90:cd:87:09:ad:dd:c5:f2:75:
                    c1:e2:0f:8f:a8:8c:f7:fc:ef:9e:9d:fc:82:b0:a5:
                    6a:8f:e4:72:13:06:1a:e5:a9:2f:2f:83:c5:86:2e:
                    8c:1a:ab:79:39:a7:a9:ad:29:88:e0:b8:f1:70:ae:
                    ef:a8:0f:77:30:b3:40:f0:94:37:66:73:c7:e2:ac:
                    56:87:f4:b2:f1:91:f4:3a:e9:fa:46:47:da:da:51:
                    c2:96:17:14:74:6c:ea:3d:4c:b4:ae:d3:c5:8b:5b:
                    2c:37:86:13:ba:10:1e:89:02:1e:99:23:d1:41:19:
                    53:42:d8:f8:01:93:42:66:40:01:b5:8c:93:37:6a:
                    5d:d1:d6:7f:d6:ac:19:aa:fc:b5:ad:6d:15:70:a6:
                    05:f0:a7:36:20:cc:b3:53:99:af:d7:7c:fb:9d:3c:
                    e6:17:fb:b4:8d:e7:09:d8:0b:19:cc:38:31:23:e1:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:25:4E:2A:3C:37:1A:76:9F:1F:6E:A4:F5:A8:CE:91:B6:C7:A2
            X509v3 Authority Key Identifier:
                keyid:A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15a::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:a2:2d:65:72:97:b4:57:8d:d9:e9:fb:20:5d:f5:4b:ad:
         38:4a:2d:30:b5:01:a9:f8:ce:05:86:4b:cd:69:89:a2:4b:a0:
         06:f6:e1:2b:8c:f9:47:c9:d5:a8:4a:68:0b:2c:bb:78:ac:76:
         8e:41:5a:f6:67:b9:7e:71:0e:b0:e5:94:88:98:b2:69:8c:d2:
         f1:f7:c8:10:77:40:63:38:82:04:a4:3c:b7:c1:52:a8:cd:89:
         f9:af:fb:33:ac:25:8b:0f:c1:b1:b3:dc:71:37:48:dd:b0:ba:
         cd:5b:11:f4:67:2c:2c:24:6a:cc:24:22:92:ba:c4:b4:a3:27:
         be:e2:57:b5:71:ac:9c:8e:ae:ee:d3:7c:d7:29:96:4a:78:82:
         ea:10:40:86:0b:98:63:d5:e7:1c:9f:76:9f:bb:d7:2c:1a:60:
         49:3a:63:0a:58:b5:b5:e7:6c:d9:6d:8c:a5:85:00:40:1c:83:
         af:c3:ca:ac:48:a4:86:03:8d:c1:a5:b3:bb:70:2e:af:cb:17:
         a7:4d:50:01:b4:6a:f6:59:a8:2f:a1:3f:c9:23:6b:a2:86:b7:
         c5:fd:2f:fc:f6:8b:ac:0b:06:77:e9:3b:e9:56:53:36:f4:6b:
         51:2f:d7:56:1e:8d:cf:aa:de:d7:6b:f8:70:48:f6:d8:45:24:
         9c:fb:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:12:49 2026 by rpki-client