Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
File:                     3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa (raw, json)
Hash identifier:          dfRDC0pOxImuxkaG1ylUR9xUw1Ma7/2Ksq6GtXysfBg=
Subject key identifier:   38:D1:E7:9D:46:5F:96:69:7F:41:AA:A7:75:A4:31:1A:09:D0:35:83
Certificate issuer:       /CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
Certificate serial:       7C5C43E44E80CEC3BBD7C31B740EDA91E31E2F87
Authority key identifier: 76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
Signing time:             Tue 06 Jan 2026 19:23:30 +0000
ROA not before:           Tue 06 Jan 2026 19:18:30 +0000
ROA not after:            Tue 05 Jan 2027 19:23:30 +0000
asID:                     269997
IP address blocks:        181.192.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 16:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:43:e4:4e:80:ce:c3:bb:d7:c3:1b:74:0e:da:91:e3:1e:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
        Validity
            Not Before: Jan  6 19:18:30 2026 GMT
            Not After : Jan  5 19:23:30 2027 GMT
        Subject: CN=38D1E79D465F96697F41AAA775A4311A09D03583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:c1:8f:c7:c9:cf:bf:9c:8d:a4:8a:a4:33:
                    3c:f3:bc:01:19:49:51:9e:66:6c:58:32:aa:2b:bf:
                    ab:7e:26:97:d7:c4:b7:af:37:17:3d:38:4f:97:c8:
                    87:6e:2b:2a:e3:ab:87:1a:0c:f3:87:ec:1a:35:2a:
                    b2:fb:85:0e:6c:01:16:98:1d:91:fe:73:e5:30:27:
                    53:82:dc:b2:2d:8f:0e:64:41:f3:ee:2c:4f:17:fa:
                    ef:a8:5f:2b:86:b3:89:7e:b2:5c:cf:3a:b9:85:7a:
                    7d:da:54:6e:e7:4c:26:1b:00:42:ae:85:1e:9b:61:
                    60:4e:96:a1:88:7d:e1:56:f8:d6:95:2f:ae:82:20:
                    ed:3a:d2:3d:f8:8a:1c:97:03:89:1b:84:84:a5:2a:
                    e3:c5:e5:3c:ac:fe:59:47:a9:62:97:0a:a7:f1:0d:
                    9c:cc:e6:1e:3a:7f:84:54:3a:4a:09:22:9c:96:fe:
                    97:81:da:a9:db:e4:9a:c3:a0:33:d2:a4:5b:a4:67:
                    c7:de:f3:82:ce:cb:96:b8:85:37:56:c8:b5:9a:65:
                    50:37:11:9a:98:10:d6:a5:44:65:e9:6c:fc:62:f6:
                    3b:5e:f8:6c:d8:a6:f7:93:24:4b:d6:df:b3:0d:c8:
                    9b:88:02:6f:b5:0d:9e:4b:9a:5d:f2:34:5f:64:91:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D1:E7:9D:46:5F:96:69:7F:41:AA:A7:75:A4:31:1A:09:D0:35:83
            X509v3 Authority Key Identifier:
                keyid:76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:67:89:d9:43:94:78:47:77:11:c7:8b:51:b9:98:9e:d0:c7:
         39:14:72:a3:48:c1:05:56:af:fb:40:c1:c0:1f:d3:b2:df:79:
         7b:95:08:c8:90:2f:e7:50:93:4e:3e:1f:de:9d:1f:15:72:07:
         0a:9c:f9:c0:5c:e4:50:19:e6:cf:d6:a9:7e:b0:42:7f:62:b5:
         94:46:66:21:32:d8:49:fa:c5:2f:d1:88:27:b0:20:ed:45:74:
         1a:68:40:9a:6b:49:f4:a8:00:99:f0:c1:b2:68:6d:fa:48:59:
         a2:0b:26:9c:75:17:d8:f0:b8:c3:77:34:30:c9:c3:8e:f7:12:
         45:98:f6:8b:cf:e3:ea:6b:f9:5e:65:97:02:a7:0e:fb:2d:99:
         5d:1e:1f:bf:ce:6b:26:71:e0:46:dd:46:ca:34:81:d2:49:4f:
         cc:28:28:f1:a6:83:12:da:b8:a8:e2:d5:7f:82:30:c5:61:22:
         85:13:e2:4a:51:8f:e1:a4:13:77:b2:2a:d8:53:4c:8f:ea:57:
         87:9a:32:96:81:c7:79:aa:89:0c:38:42:de:20:67:dc:32:53:
         20:76:fb:5d:a8:3b:b6:90:d8:35:fd:52:b9:da:a3:7e:de:9b:
         ff:24:23:92:40:25:89:ca:2b:fb:af:70:1e:c9:19:d9:68:f2:
         5d:d7:e9:9c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfFxD5E6AzsO718MbdA7akeMeL4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2MEVCMjg1Q0MyMTlDMkFENjZFN0YxMjVCN0RBMzY3
MTQ4RTE0QjAeFw0yNjAxMDYxOTE4MzBaFw0yNzAxMDUxOTIzMzBaMDMxMTAvBgNV
BAMTKDM4RDFFNzlENDY1Rjk2Njk3RjQxQUFBNzc1QTQzMTFBMDlEMDM1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEsGPx8nPv5yNpIqkMzzzvAEZ
SVGeZmxYMqorv6t+JpfXxLevNxc9OE+XyIduKyrjq4caDPOH7Bo1KrL7hQ5sARaY
HZH+c+UwJ1OC3LItjw5kQfPuLE8X+u+oXyuGs4l+slzPOrmFen3aVG7nTCYbAEKu
hR6bYWBOlqGIfeFW+NaVL66CIO060j34ihyXA4kbhISlKuPF5Tys/llHqWKXCqfx
DZzM5h46f4RUOkoJIpyW/peB2qnb5JrDoDPSpFukZ8fe84LOy5a4hTdWyLWaZVA3
EZqYENalRGXpbPxi9jte+GzYpveTJEvW37MNyJuIAm+1DZ5Lml3yNF9kkQ5RAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUONHnnUZflml/QaqndaQxGgnQNYMwHwYDVR0j
BBgwFoAUdmDrKFzCGcKtZufxJbfaNnFI4UswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wN0E5NzNDQjg2MUQzMzAwN0JDMjU5MEY1RUQ1RThEMDk3
OUYwMzg1NTk3Q0JFNzUxMEUwQ0U0OEUwN0I5NjY4LzAvNzY2MEVCMjg1Q0MyMTlD
MkFENjZFN0YxMjVCN0RBMzY3MTQ4RTE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NjYwRUIyODVDQzIxOUMyQUQ2
NkU3RjEyNUI3REEzNjcxNDhFMTRCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDdBOTczQ0I4NjFEMzMwMDdCQzI1OTBGNUVENUU4RDA5NzlGMDM4NTU5
N0NCRTc1MTBFMENFNDhFMDdCOTY2OC8wLzMxMzgzMTJlMzEzOTMyMmUzMTMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzOTM5Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK1
wGQwDQYJKoZIhvcNAQELBQADggEBAGBnidlDlHhHdxHHi1G5mJ7QxzkUcqNIwQVW
r/tAwcAf07LfeXuVCMiQL+dQk04+H96dHxVyBwqc+cBc5FAZ5s/WqX6wQn9itZRG
ZiEy2En6xS/RiCewIO1FdBpoQJprSfSoAJnwwbJobfpIWaILJpx1F9jwuMN3NDDJ
w473EkWY9ovP4+pr+V5llwKnDvstmV0eH7/OayZx4EbdRso0gdJJT8woKPGmgxLa
uKji1X+CMMVhIoUT4kpRj+GkE3eyKthTTI/qV4eaMpaBx3mqiQw4Qt4gZ9wyUyB2
+12oO7aQ2DX9Urnao37em/8kI5JAJYnKK/uvcB7JGdlo8l3X6Zw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:31:13 2026 by rpki-client