Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          INUZsla1Q2X4wTjI3szmnpd0x6sc+8xpE6P7dZEjezY=
Subject key identifier:   88:9D:44:42:98:53:5E:8D:C8:5C:2C:0B:DA:16:F3:E3:18:F3:49:61
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2B300B5C61E0CFE7D9265833834F58B52A8B0F5D
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:17 +0000
ROA not before:           Tue 06 Jan 2026 19:33:17 +0000
ROA not after:            Tue 05 Jan 2027 19:38:17 +0000
asID:                     271891
IP address blocks:        2801:151:ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:0b:5c:61:e0:cf:e7:d9:26:58:33:83:4f:58:b5:2a:8b:0f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:17 2026 GMT
            Not After : Jan  5 19:38:17 2027 GMT
        Subject: CN=889D444298535E8DC85C2C0BDA16F3E318F34961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:0e:14:1f:ad:d9:7a:e2:72:9c:81:3c:84:
                    73:34:a6:7a:54:21:07:d3:c3:c4:97:22:5e:d6:9c:
                    7d:47:b5:2d:7c:7a:cf:d6:c3:25:87:d0:9c:65:90:
                    22:dc:93:8a:a5:ef:f2:50:f6:d7:63:3d:e4:95:2c:
                    2f:9e:09:2f:c9:c6:95:ca:05:d4:f2:cf:22:bb:59:
                    b3:9e:cb:52:b1:c3:47:f7:3f:19:15:7f:d8:7d:3a:
                    07:51:2a:7d:58:d2:44:af:50:eb:5b:c9:20:ab:5a:
                    d9:70:ce:ec:6f:ee:5a:ac:41:7b:53:46:d1:f2:e6:
                    4e:db:78:ff:f5:ee:9d:04:31:88:47:b4:6a:f4:36:
                    c8:63:4a:36:e1:2d:7a:f9:95:07:1f:e1:98:22:63:
                    c8:65:85:39:6f:49:59:10:03:38:fe:cb:46:04:43:
                    cc:5e:5e:b7:a5:20:22:dc:b7:2d:96:af:3f:e7:b7:
                    36:1e:fc:c2:0b:eb:16:8b:45:0b:cf:b6:04:f4:9f:
                    fb:43:d2:a5:78:64:02:62:e2:d7:87:98:3f:f0:f3:
                    31:5a:10:6a:85:6a:ac:7e:c6:29:34:e8:be:1b:6b:
                    41:c6:84:b3:0e:72:af:ee:49:18:b8:95:34:a1:d4:
                    87:43:8d:32:54:49:5f:63:72:c1:ab:d3:58:fa:7d:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9D:44:42:98:53:5E:8D:C8:5C:2C:0B:DA:16:F3:E3:18:F3:49:61
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65613a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:cc:f3:06:f6:82:a2:87:36:ce:16:66:5e:0a:58:53:f7:
         5f:f6:9e:89:94:c9:01:f2:0f:a6:dd:8b:ee:a2:2b:bc:7e:62:
         f8:2d:fe:b3:7e:08:21:a3:06:5d:dd:2a:39:87:bf:c0:76:03:
         9f:a1:ce:c9:fb:e6:3e:da:02:37:0a:78:28:02:04:41:4c:a2:
         a3:b3:36:c6:03:43:b5:26:aa:e6:a1:43:3d:c2:9e:cc:0d:4f:
         2a:5b:7f:a5:e2:aa:32:f4:28:d2:ee:bc:59:6f:31:b1:12:a5:
         29:65:97:1a:80:f7:67:d6:c2:dc:94:9f:28:94:84:8a:9f:ba:
         ec:a5:7f:fe:d6:b7:81:53:d5:40:37:6a:f3:72:a9:f3:77:df:
         62:9b:d7:40:13:8e:7d:8b:4f:4c:e3:04:71:85:8c:8f:29:6a:
         cd:73:3d:52:f6:eb:9f:01:84:4d:95:21:21:3c:aa:d0:ca:f4:
         29:05:f5:9b:cb:0e:d8:65:06:71:3d:1c:97:86:32:b4:43:b5:
         3d:ab:53:75:a4:9e:13:5d:3a:03:83:5b:51:28:36:36:58:32:
         56:32:1f:7c:f5:da:7d:71:30:bd:2c:1e:e1:f4:d4:1b:1d:55:
         c5:8f:d7:12:bc:a2:4f:47:7a:ab:61:f2:c9:6e:02:fd:44:2a:
         b5:7c:3c:f9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKzALXGHgz+fZJlgzg09YtSqLD10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNjAxMDYxOTMzMTdaFw0yNzAxMDUxOTM4MTdaMDMxMTAvBgNV
BAMTKDg4OUQ0NDQyOTg1MzVFOERDODVDMkMwQkRBMTZGM0UzMThGMzQ5NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgA4UH63ZeuJynIE8hHM0pnpU
IQfTw8SXIl7WnH1HtS18es/WwyWH0JxlkCLck4ql7/JQ9tdjPeSVLC+eCS/JxpXK
BdTyzyK7WbOey1Kxw0f3PxkVf9h9OgdRKn1Y0kSvUOtbySCrWtlwzuxv7lqsQXtT
RtHy5k7beP/17p0EMYhHtGr0NshjSjbhLXr5lQcf4ZgiY8hlhTlvSVkQAzj+y0YE
Q8xeXrelICLcty2Wrz/ntzYe/MIL6xaLRQvPtgT0n/tD0qV4ZAJi4teHmD/w8zFa
EGqFaqx+xik06L4ba0HGhLMOcq/uSRi4lTSh1IdDjTJUSV9jcsGr01j6fW9TAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUiJ1EQphTXo3IXCwL2hbz4xjzSWEwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTY1NjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAOowDQYJKoZIhvcNAQELBQADggEBAB5bzPMG9oKihzbOFmZeClhT91/2nomU
yQHyD6bdi+6iK7x+Yvgt/rN+CCGjBl3dKjmHv8B2A5+hzsn75j7aAjcKeCgCBEFM
oqOzNsYDQ7UmquahQz3CnswNTypbf6XiqjL0KNLuvFlvMbESpSlllxqA92fWwtyU
nyiUhIqfuuylf/7Wt4FT1UA3avNyqfN332Kb10ATjn2LT0zjBHGFjI8pas1zPVL2
658BhE2VISE8qtDK9CkF9ZvLDthlBnE9HJeGMrRDtT2rU3WknhNdOgODW1EoNjZY
MlYyH3z12n1xML0sHuH01BsdVcWP1xK8ok9Heqth8sluAv1EKrV8PPk=
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:59 2026 by rpki-client