Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/323830313a31343a663030303a3a2f34382d3438203d3e20323636383639.roa
File:                     323830313a31343a663030303a3a2f34382d3438203d3e20323636383639.roa (raw, json)
Hash identifier:          n9TD9DpXAYlFA/KF62s0jdrxI5V7IDmcC3IYKgxsgz0=
Subject key identifier:   59:FC:4A:DB:C8:8E:8C:79:01:CE:D7:B9:1E:42:B2:CC:80:37:D8:AB
Certificate issuer:       /CN=889C5AEF2F5739414D003220C7DB755B14BC610D
Certificate serial:       19FAC84A5AB380A60D95785ABB21FE2E20092FE8
Authority key identifier: 88:9C:5A:EF:2F:57:39:41:4D:00:32:20:C7:DB:75:5B:14:BC:61:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889C5AEF2F5739414D003220C7DB755B14BC610D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/323830313a31343a663030303a3a2f34382d3438203d3e20323636383639.roa
Signing time:             Tue 06 Jan 2026 20:48:26 +0000
ROA not before:           Tue 06 Jan 2026 20:43:26 +0000
ROA not after:            Tue 05 Jan 2027 20:48:26 +0000
asID:                     266869
IP address blocks:        2801:14:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/889C5AEF2F5739414D003220C7DB755B14BC610D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/889C5AEF2F5739414D003220C7DB755B14BC610D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889C5AEF2F5739414D003220C7DB755B14BC610D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 05:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:c8:4a:5a:b3:80:a6:0d:95:78:5a:bb:21:fe:2e:20:09:2f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889C5AEF2F5739414D003220C7DB755B14BC610D
        Validity
            Not Before: Jan  6 20:43:26 2026 GMT
            Not After : Jan  5 20:48:26 2027 GMT
        Subject: CN=59FC4ADBC88E8C7901CED7B91E42B2CC8037D8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:19:2b:a1:48:e8:1c:4b:5e:62:66:f6:0b:
                    b2:97:09:f9:d0:fa:8c:90:2e:4e:02:db:7f:44:20:
                    5e:58:a5:88:12:d7:16:f6:7c:76:71:d0:b3:33:c3:
                    5c:e4:ce:ff:6a:ad:bc:56:b1:95:d9:8d:c3:e4:bf:
                    83:14:e5:f6:b0:02:13:be:bb:21:c4:6c:6a:8b:49:
                    12:3a:b8:0a:84:25:51:2c:71:4d:5b:90:b6:ff:17:
                    cf:38:5f:12:44:02:39:58:53:17:5b:a2:ce:04:43:
                    13:47:73:c8:00:4f:cd:6b:4f:f7:92:3b:30:7a:2e:
                    9a:75:b5:cc:f3:03:91:9d:9f:1c:0c:96:56:7c:4c:
                    bc:10:3b:2a:09:ea:a6:e9:e0:98:ca:a9:b3:e6:44:
                    2a:4a:47:70:42:b6:8c:bf:60:cb:12:38:e5:63:7d:
                    63:a3:e1:4e:38:84:ec:78:ef:bf:0b:d5:1d:28:2a:
                    69:1f:aa:25:9d:66:ae:81:e8:0c:2d:3c:5b:89:70:
                    36:94:cf:ef:d8:ca:09:41:9e:30:14:45:0d:e7:46:
                    fa:58:7f:24:02:54:5e:56:e1:6d:b1:05:22:cd:2f:
                    26:4c:1c:23:f9:cb:ed:af:36:a7:b0:cf:75:42:88:
                    c9:ca:17:fa:8a:09:3e:c0:f4:75:42:96:a6:3d:aa:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:4A:DB:C8:8E:8C:79:01:CE:D7:B9:1E:42:B2:CC:80:37:D8:AB
            X509v3 Authority Key Identifier:
                keyid:88:9C:5A:EF:2F:57:39:41:4D:00:32:20:C7:DB:75:5B:14:BC:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/889C5AEF2F5739414D003220C7DB755B14BC610D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889C5AEF2F5739414D003220C7DB755B14BC610D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79B697A91CEDBC96885EBD7932C3A00F1CBAA40DDC00897FF680CA5E646917CF/0/323830313a31343a663030303a3a2f34382d3438203d3e20323636383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:bb:3f:58:06:10:2f:24:eb:5f:99:50:9b:d8:d9:3f:0e:
         84:60:7a:6a:24:47:e1:51:ae:d5:20:63:11:1b:78:48:12:8f:
         bf:71:be:fc:ec:10:79:54:01:29:f9:0c:2a:d6:78:c0:21:97:
         47:cc:05:9a:33:95:ae:f8:ad:b4:28:10:ba:4c:9d:ac:98:ea:
         00:0b:bd:3f:35:d4:23:54:8b:83:76:d0:65:7e:a0:68:d0:b2:
         17:6e:f3:9c:7f:c7:0b:ad:81:37:f2:87:ab:bf:43:b1:96:97:
         ed:fa:42:06:0e:22:e5:da:06:0f:a6:17:c9:49:e2:f2:ee:2e:
         59:a1:d2:96:7d:be:d1:8a:14:cb:11:59:54:0d:8d:b2:3c:8f:
         dc:f9:c1:ed:bd:9a:4b:6d:a1:15:e1:94:56:8a:27:e8:94:8d:
         d5:c2:c6:2f:80:8d:25:f2:85:6d:66:5a:b1:ba:d9:cf:d5:95:
         66:fa:cc:d8:5e:86:c7:e2:32:41:b7:28:47:a9:c3:ea:27:d8:
         2f:2c:ae:e6:53:62:0b:ae:be:0c:c7:21:2f:ea:16:d0:f6:df:
         e4:5b:e1:8e:48:0c:48:18:28:41:88:f2:85:a0:8d:e2:f8:26:
         ec:02:4a:9c:dd:0f:9b:0a:09:e0:de:85:45:df:51:be:0c:06:
         57:e0:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 16:06:58 2026 by rpki-client