Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa
File:                     323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa (raw, json)
Hash identifier:          vXyxlvOn1vNf3Zj065hgoZ97V0fu3h0rfwJvPueJjZk=
Subject key identifier:   F9:C6:27:04:3B:16:CF:26:69:DE:98:9F:49:67:29:80:BB:A8:44:1F
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       078453E735600784ADE0F5D6338AC7A08679A4C3
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa
Signing time:             Tue 06 Jan 2026 19:07:00 +0000
ROA not before:           Tue 06 Jan 2026 19:02:00 +0000
ROA not after:            Tue 05 Jan 2027 19:07:00 +0000
asID:                     265652
IP address blocks:        2801:1e:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:84:53:e7:35:60:07:84:ad:e0:f5:d6:33:8a:c7:a0:86:79:a4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Jan  6 19:02:00 2026 GMT
            Not After : Jan  5 19:07:00 2027 GMT
        Subject: CN=F9C627043B16CF2669DE989F49672980BBA8441F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:27:18:e0:bc:6a:bc:7a:59:1f:6e:3c:4c:
                    21:d8:45:c6:d7:a3:bd:ad:75:4b:45:58:f8:df:37:
                    df:c6:91:04:c5:88:12:c1:a7:f5:03:c5:87:70:db:
                    be:cc:eb:50:fa:d4:77:de:99:df:70:e8:15:86:79:
                    3d:58:49:97:42:a7:f8:8f:77:fb:68:2b:5c:d6:31:
                    15:2d:93:b8:bd:b7:ed:55:32:1b:33:1c:df:83:d9:
                    cf:49:52:60:60:47:e2:eb:f6:b5:cb:f3:39:e0:8c:
                    79:29:c7:63:92:2d:ae:34:09:35:b2:7d:a8:79:29:
                    e9:d1:0c:50:0e:3e:4b:a6:f7:6f:95:af:be:68:87:
                    66:e1:95:77:a0:0f:20:cd:d8:7f:d8:29:a1:ea:6d:
                    29:18:0d:f1:3a:2e:12:f0:c9:ba:60:da:f3:c6:48:
                    f0:3c:2b:c7:4a:84:97:35:ee:41:96:9e:b1:94:7c:
                    1f:e7:1c:3c:20:59:65:ab:2b:76:49:78:21:69:74:
                    0c:68:3a:1f:1e:92:d3:7e:24:cd:7f:ad:2f:b6:3e:
                    ee:ff:dd:e5:37:07:58:37:84:3c:d6:70:8f:eb:f8:
                    72:8a:94:5a:38:81:a8:e4:54:f8:71:eb:73:31:63:
                    db:5f:fd:d3:55:72:c4:ae:59:21:1c:81:81:fd:12:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:27:04:3B:16:CF:26:69:DE:98:9F:49:67:29:80:BB:A8:44:1F
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:4f:09:5f:eb:6c:d5:93:39:9a:b4:b8:07:90:28:83:42:79:
         33:84:38:63:3d:42:5a:a0:4c:a8:75:7c:ec:69:32:7e:6f:5c:
         f0:41:67:48:01:0d:03:9f:ec:19:1e:3c:da:f2:67:c8:3d:6e:
         69:03:5a:a7:71:e1:b6:f7:a0:6e:08:78:4a:ad:a4:d1:a2:57:
         8f:2e:a5:ad:89:d3:65:64:c0:7d:f7:3b:1d:d2:09:a2:16:1b:
         c1:3c:30:2b:d4:af:a5:7f:77:e1:c9:e3:1b:59:5c:e9:7e:00:
         c8:3c:45:20:b4:d9:cc:ab:b0:68:ad:af:e6:2d:c1:54:1b:77:
         e1:55:55:20:21:60:17:fb:d6:88:ab:16:bf:6e:76:7d:55:b5:
         99:e5:7c:a7:38:73:a1:2f:63:25:87:67:9a:fc:ee:15:0b:d6:
         93:ab:ca:4f:ce:3d:fc:75:90:23:7e:40:b1:0c:d6:79:b1:82:
         34:02:e9:b0:d6:bb:f1:39:3b:9c:17:25:a9:85:3c:94:11:42:
         f1:ea:22:e2:66:44:3b:cc:72:fa:39:3e:1f:76:79:d1:1a:37:
         6b:63:26:1b:d4:78:3e:37:fb:e0:0e:bb:19:c4:6b:46:16:cf:
         9d:cb:00:6e:cb:4c:24:6c:2a:cf:5e:e2:7d:19:93:91:45:d6:
         14:1d:5e:f5
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUB4RT5zVgB4St4PXWM4rHoIZ5pMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZFN0FFQUI3NUM3NTBENDU2MzUzQ0E0RDM4NjAwN0RD
RDlGRTI4ODAeFw0yNjAxMDYxOTAyMDBaFw0yNzAxMDUxOTA3MDBaMDMxMTAvBgNV
BAMTKEY5QzYyNzA0M0IxNkNGMjY2OURFOTg5RjQ5NjcyOTgwQkJBODQ0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+icY4LxqvHpZH248TCHYRcbX
o72tdUtFWPjfN9/GkQTFiBLBp/UDxYdw277M61D61Hfemd9w6BWGeT1YSZdCp/iP
d/toK1zWMRUtk7i9t+1VMhszHN+D2c9JUmBgR+Lr9rXL8zngjHkpx2OSLa40CTWy
fah5KenRDFAOPkum92+Vr75oh2bhlXegDyDN2H/YKaHqbSkYDfE6LhLwybpg2vPG
SPA8K8dKhJc17kGWnrGUfB/nHDwgWWWrK3ZJeCFpdAxoOh8ektN+JM1/rS+2Pu7/
3eU3B1g3hDzWcI/r+HKKlFo4gajkVPhx63MxY9tf/dNVcsSuWSEcgYH9ErF9AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU+cYnBDsWzyZp3pifSWcpgLuoRB8wHwYDVR0j
BBgwFoAUBueuq3XHUNRWNTyk04YAfc2f4ogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEM5RTY5QzJGNzFDRjJFNzg0Njc0RjYwOUQ0MjU2Qzg0
RDQ2MEZDOEU1N0E3OTFEMzA5RjkwMzBFQ0Q4NzYyLzAvMDZFN0FFQUI3NUM3NTBE
NDU2MzUzQ0E0RDM4NjAwN0RDRDlGRTI4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNkU3QUVBQjc1Qzc1MEQ0NTYz
NTNDQTREMzg2MDA3RENEOUZFMjg4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTRDOUU2OUMyRjcxQ0YyRTc4NDY3NEY2MDlENDI1NkM4NEQ0NjBGQzhF
NTdBNzkxRDMwOUY5MDMwRUNEODc2Mi8wLzMyMzgzMDMxM2EzMTY1M2E2NDMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzUzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB7QADANBgkqhkiG9w0BAQsFAAOCAQEAF08JX+ts1ZM5mrS4B5Aog0J5M4Q4
Yz1CWqBMqHV87Gkyfm9c8EFnSAENA5/sGR482vJnyD1uaQNap3Hhtvegbgh4Sq2k
0aJXjy6lrYnTZWTAffc7HdIJohYbwTwwK9SvpX934cnjG1lc6X4AyDxFILTZzKuw
aK2v5i3BVBt34VVVICFgF/vWiKsWv252fVW1meV8pzhzoS9jJYdnmvzuFQvWk6vK
T849/HWQI35AsQzWebGCNALpsNa78Tk7nBclqYU8lBFC8eoi4mZEO8xy+jk+H3Z5
0Ro3a2MmG9R4Pjf74A67GcRrRhbPncsAbstMJGwqz17ifRmTkUXWFB1e9Q==
-----END CERTIFICATE-----
Generated at Wed Feb 18 15:37:27 2026 by rpki-client