Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          HVP6BVfJp/HrAuHd3NC4OPMR4ugGJrThRlQ3Cv7gwKI=
Subject key identifier:   52:98:C2:6A:9F:4F:EC:68:DE:3E:45:CD:6E:05:01:E4:ED:79:6F:7F
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2D08F9C3F0FC8A4B90AD0B37BC96D6503886DE28
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:06 +0000
ROA not before:           Tue 06 Jan 2026 19:33:06 +0000
ROA not after:            Tue 05 Jan 2027 19:38:06 +0000
asID:                     271891
IP address blocks:        2801:151:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:f9:c3:f0:fc:8a:4b:90:ad:0b:37:bc:96:d6:50:38:86:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:06 2026 GMT
            Not After : Jan  5 19:38:06 2027 GMT
        Subject: CN=5298C26A9F4FEC68DE3E45CD6E0501E4ED796F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:5d:c6:8c:56:35:95:ae:f1:12:cd:66:e6:
                    2c:08:13:ce:28:a3:36:8d:a5:4c:43:37:d5:f6:95:
                    56:b8:cf:d6:4d:4f:4f:04:eb:ab:83:a7:e4:c0:c0:
                    ac:f1:7d:5e:0b:90:66:0e:ee:6f:cb:40:ac:97:5b:
                    a0:1e:a7:61:a0:9e:69:16:7e:dc:46:67:87:3b:63:
                    ce:40:34:c8:1b:33:7d:24:cf:19:4f:fe:32:71:e0:
                    50:29:66:ee:42:cc:68:84:bf:2b:1a:72:45:69:a9:
                    f1:82:11:d9:1a:d8:c0:f6:7d:20:a4:7f:a4:53:60:
                    e2:14:1a:9a:18:15:e8:34:91:fa:9d:a2:2e:eb:0e:
                    37:5e:60:52:d4:b5:9a:6d:ef:dd:c8:2e:24:64:cd:
                    ff:4e:48:ab:f3:ac:a9:d2:a5:25:6e:19:e0:8b:bc:
                    df:45:08:26:84:18:c4:03:34:2d:28:54:65:33:5c:
                    a6:64:d1:3e:3f:7f:88:af:99:da:49:51:93:86:b9:
                    66:5a:a5:91:8c:e3:3f:d8:4a:58:22:4c:f9:6b:40:
                    96:f1:31:da:b8:95:17:6c:1a:d9:95:68:bc:7d:fb:
                    e7:7f:9a:74:b2:74:56:d9:3c:2a:2d:93:58:c6:1b:
                    bc:8c:69:35:55:7e:9f:5d:f8:a9:e3:dd:45:54:bd:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:C2:6A:9F:4F:EC:68:DE:3E:45:CD:6E:05:01:E4:ED:79:6F:7F
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:bd:92:46:03:f7:c8:17:41:1f:ac:1e:f4:14:87:c4:9c:
         a2:ed:0f:73:68:91:63:43:ad:50:b2:35:cf:42:04:b5:59:4d:
         cc:8f:e5:7e:60:f6:e9:6d:a9:99:24:c0:a3:da:7b:28:0d:ce:
         46:b8:e2:96:61:f8:3d:13:28:2e:62:7a:ff:70:89:c1:f8:a2:
         ad:28:50:16:5a:a9:82:15:38:21:47:9d:3a:52:ad:41:57:21:
         4e:b6:1d:f7:87:65:7f:3f:0f:34:c5:84:29:a0:26:da:93:99:
         87:fe:7a:e4:ac:68:d5:0f:c4:41:0e:3e:94:5c:c3:8b:d8:7f:
         e4:4c:bf:34:bb:03:5c:fb:b3:45:bf:4a:bd:1a:cb:90:55:0a:
         b5:cb:c6:ff:dd:28:ea:48:0e:8d:2c:e6:c9:3b:07:55:61:ae:
         1d:a0:c3:d6:4d:16:01:11:5a:30:9e:6d:60:0e:c9:f0:8f:10:
         a9:96:6c:55:73:06:84:b3:2b:16:05:2c:c8:15:d7:6d:47:fc:
         00:09:d3:b5:26:a4:a6:da:fd:45:c7:f0:88:b4:9a:f2:a1:2d:
         db:ce:00:21:85:c8:05:79:ff:06:eb:8f:20:04:fd:3c:1b:a9:
         c2:60:62:14:40:c5:e6:e3:ac:b8:47:88:5c:49:7c:9a:4d:fd:
         33:fb:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:13 2026 by rpki-client