Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/323830313a31353a353830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31353a353830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          3KUthgjI1lDSc7uHy845i3JoqA+NmuocgON6BFLs4Tg=
Subject key identifier:   22:63:5A:37:9D:39:CD:DF:1D:15:34:9E:9B:41:FA:A1:50:B2:C4:A7
Certificate issuer:       /CN=C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B
Certificate serial:       2F83AA8A91FDC5B8A2FF157E30B8441AF8FA8080
Authority key identifier: C7:32:56:6E:F9:CB:66:8B:8E:A3:B3:3D:A5:D9:F9:5C:2C:D0:53:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/323830313a31353a353830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 18:58:17 +0000
ROA not before:           Tue 06 Jan 2026 18:53:17 +0000
ROA not after:            Tue 05 Jan 2027 18:58:17 +0000
asID:                     19429
IP address blocks:        2801:15:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:aa:8a:91:fd:c5:b8:a2:ff:15:7e:30:b8:44:1a:f8:fa:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B
        Validity
            Not Before: Jan  6 18:53:17 2026 GMT
            Not After : Jan  5 18:58:17 2027 GMT
        Subject: CN=22635A379D39CDDF1D15349E9B41FAA150B2C4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:21:50:32:c6:2c:aa:8c:c9:c7:03:58:d8:
                    37:8a:e4:f7:e2:76:6f:42:32:e1:08:b1:e7:b4:2c:
                    41:09:c1:df:de:a6:b1:13:2a:0f:11:cb:97:ad:d6:
                    64:0c:25:79:0b:de:86:d3:76:63:d1:17:89:ac:5a:
                    2a:ed:e1:ab:22:99:79:fc:52:8c:f5:a3:42:34:a6:
                    a5:9c:ed:b2:10:05:ed:8e:d8:be:d3:44:a8:2f:75:
                    3b:a2:a7:37:16:34:4d:37:57:71:89:35:7d:2b:e6:
                    b2:12:28:81:16:25:6a:45:eb:52:98:69:e7:f4:87:
                    c4:24:23:51:a4:39:81:44:46:10:f7:b6:cb:1b:30:
                    34:40:ba:7d:62:fb:02:41:7d:ef:9a:61:59:18:f1:
                    8d:7b:c5:ed:5e:1f:46:49:e4:24:be:31:9e:1b:b2:
                    06:88:5e:31:e7:34:b0:79:b9:28:5b:8c:a2:2a:ec:
                    e9:2a:d8:32:c8:12:00:6a:a2:7a:70:53:f6:58:c0:
                    3e:37:93:7d:9a:05:71:8c:79:94:15:7e:e5:b3:ad:
                    2d:c0:29:ad:e1:31:3f:a1:4f:01:a7:53:a1:2f:48:
                    10:ba:14:e9:9b:f3:d9:9a:9a:9d:53:4f:03:c0:02:
                    90:fd:d9:07:26:c4:35:f6:62:9b:72:93:6b:0b:f8:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:5A:37:9D:39:CD:DF:1D:15:34:9E:9B:41:FA:A1:50:B2:C4:A7
            X509v3 Authority Key Identifier:
                keyid:C7:32:56:6E:F9:CB:66:8B:8E:A3:B3:3D:A5:D9:F9:5C:2C:D0:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C732566EF9CB668B8EA3B33DA5D9F95C2CD0532B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1D809D2B20F2C76C623EC4F4AB847D2E728F3922F03A13EF5267171C2F9A8F9/0/323830313a31353a353830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:d6:9b:04:55:80:e6:68:f9:1a:0c:31:9f:4a:ff:4a:a1:
         c5:4b:de:24:7a:08:13:33:f1:b5:ff:4f:14:19:26:e1:f3:97:
         d7:04:5d:55:eb:64:5e:c7:92:5b:ee:d2:01:cb:2d:72:46:b6:
         27:8f:03:5b:be:c6:51:84:d1:3d:26:05:9b:56:82:2b:65:d2:
         fc:ae:20:7e:3d:3e:dc:6a:33:47:d2:ea:4c:96:10:20:00:6e:
         c7:14:19:66:52:0c:39:6a:09:09:45:13:7d:02:ce:44:98:6b:
         29:40:1e:08:d3:73:b2:43:29:4c:e0:8e:27:e1:56:3b:6d:22:
         3c:0a:a0:30:3d:5f:84:fc:2d:33:46:aa:a3:d2:34:bd:1c:4c:
         57:e5:ef:bb:e2:08:b7:60:b1:7b:8b:3c:21:d2:1b:a1:d4:05:
         5c:0a:ca:d1:43:57:cf:f9:29:c4:1f:3e:95:02:05:d6:31:25:
         bc:54:93:07:ca:94:60:de:f5:92:86:b3:7b:4c:fa:3e:9e:16:
         1d:8e:37:41:e8:e7:35:5a:a7:69:86:0e:44:ac:66:a1:76:9b:
         f2:6a:de:53:df:88:93:0b:95:68:b6:c6:32:48:18:37:92:4f:
         b8:7b:9f:15:80:81:36:ef:6b:d3:3a:fb:1d:c8:ae:d7:8f:fb:
         11:f8:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 11:35:48 2026 by rpki-client