Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
File:                     3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa (raw, json)
Hash identifier:          ISKlHcpmyknn2Dsf5VhGv1D92AA0XR6fhxk4Kn1OjkY=
Subject key identifier:   64:57:48:D2:E4:E4:B0:F6:30:5B:92:97:72:72:08:75:A2:70:61:B4
Certificate issuer:       /CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
Certificate serial:       3AED12DCAB4625E48857C617061184E493C381B4
Authority key identifier: 10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
Signing time:             Tue 06 Jan 2026 20:53:02 +0000
ROA not before:           Tue 06 Jan 2026 20:48:02 +0000
ROA not after:            Tue 05 Jan 2027 20:53:02 +0000
asID:                     263731
IP address blocks:        201.131.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:12:dc:ab:46:25:e4:88:57:c6:17:06:11:84:e4:93:c3:81:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
        Validity
            Not Before: Jan  6 20:48:02 2026 GMT
            Not After : Jan  5 20:53:02 2027 GMT
        Subject: CN=645748D2E4E4B0F6305B929772720875A27061B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:f3:8b:f9:e0:7e:94:5f:61:27:06:dc:e9:
                    56:68:67:ba:6d:1b:34:73:6d:b1:d5:da:49:57:14:
                    15:b5:18:76:41:ab:63:47:ea:7a:41:ac:33:df:c9:
                    30:23:99:39:e1:71:02:df:36:8d:40:33:59:b6:b3:
                    6b:0c:27:c3:0a:14:b1:1a:13:d5:16:5e:39:ac:4d:
                    54:0a:cd:a1:9d:9f:b6:84:3c:ad:43:c6:30:73:ae:
                    d3:a1:f7:f3:80:c5:70:a2:e7:1c:a1:5a:17:d9:6b:
                    50:00:e4:54:c7:d7:83:c9:ec:e2:af:77:3c:bf:43:
                    1c:ae:01:cc:e9:81:33:fc:4a:3e:07:0c:2a:e5:a6:
                    61:0a:f8:3d:1c:60:10:17:73:15:7b:80:fb:11:a4:
                    6a:12:05:87:a4:f8:ef:65:58:aa:ea:e6:85:f4:2c:
                    b5:b6:5e:df:9f:1b:f6:41:84:61:9d:1a:63:27:4f:
                    42:10:55:44:8b:c1:53:4b:1f:d7:a9:1a:25:07:bc:
                    a8:fb:14:be:38:54:1a:7c:97:9a:dd:ac:50:63:31:
                    80:46:0d:65:92:53:d7:ad:60:7f:8f:ba:05:74:a4:
                    23:cf:8b:8a:39:8d:0f:cf:83:e6:52:4e:39:9e:7a:
                    ce:d0:e0:d2:f5:24:c2:73:02:3d:c7:e5:01:73:15:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:57:48:D2:E4:E4:B0:F6:30:5B:92:97:72:72:08:75:A2:70:61:B4
            X509v3 Authority Key Identifier:
                keyid:10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:74:39:6f:a3:68:9a:9d:ae:ce:79:8b:2e:be:0b:2b:91:
         1f:d1:98:d4:97:06:ce:39:04:83:f9:df:24:45:52:d0:5b:f7:
         04:3d:b8:72:e4:5c:52:56:5c:c5:44:b3:8a:69:f9:65:fc:8d:
         5d:bd:6e:83:46:d7:72:05:b7:9d:96:cb:ef:70:bb:5c:57:ba:
         05:75:c5:83:8b:51:d7:4c:c4:a5:1b:be:50:ba:b2:7d:2d:15:
         26:4f:25:cf:4e:ed:9b:06:ae:be:df:10:b3:b5:4d:6b:31:49:
         0a:47:92:22:53:b9:86:78:0d:37:73:cd:fd:5b:4c:3e:d4:06:
         d5:d4:78:ed:58:5c:a5:90:10:06:f0:85:5b:01:fc:73:ef:ea:
         46:92:29:da:f6:60:c3:15:5d:16:b8:83:4e:88:92:0a:38:66:
         00:9a:35:f5:a1:b3:00:ab:71:2d:af:0d:44:b3:57:0a:27:f5:
         c8:86:a8:57:07:80:3a:c0:b3:3d:1d:f1:e8:7f:47:79:66:ee:
         c0:71:b5:78:3a:9b:94:2c:47:de:b1:ef:b4:b1:a2:82:60:41:
         a3:51:20:e1:a0:97:d8:07:b8:e8:bb:a6:04:67:24:d5:2c:dd:
         2b:89:04:3b:e5:b5:6a:be:7e:d9:27:ac:ac:05:ca:c0:98:49:
         08:35:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:23 2026 by rpki-client