Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          lC7lY2fI9w4KLbP7JyV5xL9zPAiDKDMA0oobIklPcXM=
Subject key identifier:   62:48:65:82:E0:FB:86:AE:53:72:4A:36:0F:39:98:BC:01:C3:33:6A
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       0814CBF198712A6817104A9FE458971BEA61C1CE
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 06 Jan 2026 18:59:50 +0000
ROA not before:           Tue 06 Jan 2026 18:54:50 +0000
ROA not after:            Tue 05 Jan 2027 18:59:50 +0000
asID:                     264770
IP address blocks:        168.194.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:cb:f1:98:71:2a:68:17:10:4a:9f:e4:58:97:1b:ea:61:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Jan  6 18:54:50 2026 GMT
            Not After : Jan  5 18:59:50 2027 GMT
        Subject: CN=62486582E0FB86AE53724A360F3998BC01C3336A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:8a:71:29:de:77:74:ec:89:f7:0d:a8:47:
                    a0:6e:d5:49:64:de:3e:ae:31:8c:ae:7a:cd:93:f4:
                    89:c4:5e:b8:32:dd:1c:0e:c6:af:a3:5f:25:f2:29:
                    ec:1c:16:0f:12:1a:47:2a:23:f6:cc:ce:d4:e1:21:
                    a9:61:ba:ab:f4:2c:c6:9e:04:e0:f6:52:e7:1f:59:
                    10:13:3c:a3:bd:f9:8a:71:ce:a6:8e:05:89:08:00:
                    eb:10:c7:9a:5e:1f:25:4c:7a:1c:a4:df:9a:1b:62:
                    76:13:7a:4e:cd:96:b3:b7:76:1d:2f:59:34:42:ad:
                    0a:15:09:2a:33:28:8f:e4:e0:6c:50:a5:ef:43:57:
                    38:94:c2:f3:08:83:5f:3f:e9:42:15:7c:58:e7:32:
                    91:9b:27:6e:7b:aa:1a:b1:8d:d3:57:36:11:ea:f2:
                    9f:7d:50:71:1d:c6:eb:f1:53:22:ac:3c:b5:79:6d:
                    68:08:4f:fa:dc:d4:82:28:20:d6:63:43:b8:7d:05:
                    20:ec:e5:c0:2f:16:9c:77:40:8d:ab:13:b2:4a:16:
                    46:aa:a7:18:23:1a:4b:2f:e8:ef:00:b0:fb:98:2e:
                    f7:63:db:41:97:3c:80:5d:5c:81:a4:f8:ac:17:31:
                    26:4d:b0:ff:a2:3a:b9:cb:86:38:0f:a3:1c:26:b1:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:65:82:E0:FB:86:AE:53:72:4A:36:0F:39:98:BC:01:C3:33:6A
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:b9:d0:bc:83:20:55:62:3a:70:58:4c:d9:e5:ff:c7:29:
         3b:f6:67:3a:bf:d0:d4:bd:50:32:1a:73:30:b3:af:df:cc:8d:
         87:68:4a:20:c7:7e:ba:bc:bd:0d:31:5e:db:e8:98:0e:f2:e5:
         b3:aa:ae:eb:19:97:08:78:26:21:66:10:a1:e4:59:4f:2d:3b:
         21:b0:7b:cf:40:8b:f0:b8:1d:3c:e6:7a:9d:d7:d3:f0:10:0b:
         bf:ef:6b:5c:74:6e:be:b2:1f:3b:9c:cf:b5:6e:81:e4:75:02:
         e2:9b:d4:9a:db:a0:de:86:c5:65:74:9c:ee:12:ac:fb:a6:89:
         92:62:2c:49:c7:ea:17:ef:9e:0e:61:a4:05:b4:e4:3a:de:41:
         30:a9:cc:2d:12:4d:db:cf:d7:8b:c7:c1:80:bc:c9:e2:15:ee:
         d9:ce:b5:20:b8:c0:a5:58:36:f1:4a:af:fd:b8:d3:2f:0d:63:
         13:35:c2:4d:56:73:e0:34:c1:1e:16:cd:2e:20:17:68:2e:bd:
         1e:ba:f2:92:9f:9b:2d:14:6f:50:59:f1:52:3c:ae:59:93:67:
         6f:4d:cf:21:4e:14:8a:c9:12:67:8f:a8:a2:3b:5d:7b:dc:eb:
         a5:15:0f:ea:63:d4:6b:b5:21:14:51:4d:04:19:45:b9:c9:17:
         b6:3a:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:16 2026 by rpki-client