Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          RXXN4tyUbX4peNpyGLKO13H0gydxbf4NRUhk054yXaE=
Subject key identifier:   CD:07:10:A1:4E:7B:AC:07:51:EF:E1:44:1F:A9:83:18:95:72:1F:26
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       32142CE68DD78F3D91093DD5341B4163FD214C76
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 06 Jan 2026 18:59:51 +0000
ROA not before:           Tue 06 Jan 2026 18:54:51 +0000
ROA not after:            Tue 05 Jan 2027 18:59:51 +0000
asID:                     264770
IP address blocks:        168.194.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:14:2c:e6:8d:d7:8f:3d:91:09:3d:d5:34:1b:41:63:fd:21:4c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Jan  6 18:54:51 2026 GMT
            Not After : Jan  5 18:59:51 2027 GMT
        Subject: CN=CD0710A14E7BAC0751EFE1441FA9831895721F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:c2:b5:5e:06:02:90:cc:57:29:79:06:a3:
                    2a:09:30:c1:85:50:65:7d:27:27:f7:bf:bd:3e:bb:
                    c2:7b:eb:2d:de:6c:bc:c4:44:f1:16:f1:40:ea:9f:
                    74:70:08:0e:73:41:3b:f1:1e:c7:a6:ef:d0:b5:87:
                    d5:8a:61:09:e1:0e:f1:1c:d3:b0:bd:60:5e:20:49:
                    eb:5c:f9:65:0b:fd:f1:08:e3:8b:bc:28:33:9e:4d:
                    9a:97:e2:cd:f0:66:ff:4c:18:02:fb:38:08:d5:df:
                    a0:23:83:5a:86:68:bf:74:1e:96:7f:0c:e2:aa:04:
                    91:7f:3a:53:ab:d6:c4:93:2f:7f:e0:9b:a9:ca:8b:
                    c1:85:57:16:79:8b:74:ea:9b:c1:e7:44:69:02:92:
                    1b:d1:c0:db:be:86:1b:1b:5d:ab:e2:9b:22:f0:f7:
                    7a:03:49:0b:9e:a5:b8:df:c0:25:bf:78:30:04:b1:
                    cf:4c:f7:cb:6f:1b:fa:eb:be:f9:14:30:cb:b0:ec:
                    25:d4:f3:5d:20:a4:bc:46:2d:92:90:50:4c:27:a4:
                    a6:0b:94:eb:f9:86:5b:3f:74:c4:5c:31:4f:4c:47:
                    6d:58:0e:d1:4d:c2:3c:a3:51:14:2d:58:ca:a0:10:
                    73:1d:67:be:5b:c2:e3:ad:60:ba:96:c0:85:c8:2b:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:10:A1:4E:7B:AC:07:51:EF:E1:44:1F:A9:83:18:95:72:1F:26
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234322e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:40:d2:70:ce:8f:33:09:b4:3d:94:0d:e8:5b:44:cd:f0:50:
         e2:16:af:d4:a4:a7:b2:bf:7b:63:2e:3d:2b:64:6a:ae:9a:1a:
         fd:38:4d:1f:43:f8:93:ed:20:a0:69:88:5e:e4:77:c4:f4:33:
         59:4f:fb:8b:78:d5:f8:ce:88:54:3a:3c:68:90:6a:b4:2f:32:
         a0:4e:c4:8b:01:b9:bf:9f:4a:cb:b3:e8:94:ee:95:e9:9b:a5:
         d6:35:ed:ec:fa:40:a7:83:f0:94:6f:c9:97:b2:0f:36:27:39:
         08:9f:fd:5d:a4:41:34:e7:7a:36:8d:2e:fe:df:39:6c:22:64:
         03:e5:af:b4:54:f5:4a:0f:8a:b3:a9:7a:22:32:df:d7:4a:d4:
         56:10:8a:23:ad:0e:6f:d9:e5:44:f1:b5:79:7e:30:8a:e1:85:
         ca:76:2c:a7:5c:f8:a0:68:02:c4:27:71:39:69:3a:d7:d5:67:
         13:d9:c5:5b:06:9b:6f:fe:6b:2b:1a:f0:fe:0b:ca:7a:eb:7a:
         25:e3:66:92:34:8b:52:1c:fd:a7:69:99:3c:9c:6b:32:f7:10:
         33:11:13:cb:cd:a4:4b:4a:b4:57:5e:c4:b6:a5:93:12:e2:0c:
         89:f5:13:91:7e:33:59:6b:7e:eb:b5:45:69:a9:a3:86:87:71:
         a5:55:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:19 2026 by rpki-client