Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa
File:                     3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa (raw, json)
Hash identifier:          Ouse9B1I6N8WblIOnA3f3f8TbVsYpztqRtqtrwAPsAY=
Subject key identifier:   F4:80:45:7A:99:19:B8:98:FC:74:E7:53:0F:A4:B3:04:A9:9B:3E:13
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       779F7DD108CC2344A122BEF701A442840944DB49
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:46 +0000
ROA not before:           Sun 01 Feb 2026 04:23:46 +0000
ROA not after:            Sun 31 Jan 2027 04:28:46 +0000
asID:                     52369
IP address blocks:        190.110.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9f:7d:d1:08:cc:23:44:a1:22:be:f7:01:a4:42:84:09:44:db:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:46 2026 GMT
            Not After : Jan 31 04:28:46 2027 GMT
        Subject: CN=F480457A9919B898FC74E7530FA4B304A99B3E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:1b:07:55:d2:f0:c6:3f:65:5e:67:1e:f2:
                    05:19:a8:74:92:67:a0:66:2f:76:29:26:d2:84:4f:
                    99:69:c7:0c:11:37:8a:b0:74:c9:d9:fc:70:12:92:
                    b6:ca:6d:ee:a2:f8:89:3b:11:bf:68:ee:60:17:2a:
                    44:39:93:0a:f6:b5:ac:8b:04:53:d0:dd:4c:4c:18:
                    2c:ad:ec:59:74:98:5a:ec:a6:96:b4:ca:04:ef:1a:
                    88:93:41:57:63:09:99:05:97:c6:a1:3d:0b:6c:5f:
                    e8:ac:89:da:71:5d:99:77:03:7e:1e:55:d4:8a:39:
                    45:6b:cf:80:51:d2:35:25:f2:d7:a6:d6:9d:51:1f:
                    7a:b8:e4:6d:e2:7e:9f:7f:bf:d0:f8:ad:4a:47:0d:
                    2f:67:81:00:9c:37:ee:aa:ac:c5:04:b9:33:bd:32:
                    a5:3b:da:4b:b1:a0:60:42:30:63:58:dc:94:4c:7c:
                    a9:36:1e:86:0c:65:48:d2:5f:93:58:64:cd:60:7c:
                    b6:fd:d2:8d:f4:51:e1:c7:f5:a9:15:06:81:30:88:
                    ba:9c:00:92:18:ac:ac:4a:bd:05:8b:4a:7d:67:ed:
                    10:e1:33:d8:78:4a:19:62:d7:fe:27:7c:31:45:fe:
                    7c:49:8a:79:a0:76:08:24:9f:10:9c:0c:b1:a8:e2:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:45:7A:99:19:B8:98:FC:74:E7:53:0F:A4:B3:04:A9:9B:3E:13
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:89:f6:95:65:41:86:5b:ad:68:3a:a6:6f:b9:95:3f:7e:
         5a:29:db:fc:35:d0:88:15:e2:36:da:7b:cb:3f:3f:99:90:54:
         af:25:0c:8d:f7:67:01:08:70:13:e2:1b:3b:bc:73:f0:dd:ce:
         68:b1:3c:43:01:5f:77:27:44:94:d7:48:c9:7e:79:7c:b1:80:
         8b:ca:64:c3:d6:f4:4d:95:bb:52:87:b2:6a:f9:8b:19:47:e2:
         23:15:c1:77:0b:70:43:94:f7:62:63:75:10:ed:d7:63:a5:2f:
         d9:cd:87:74:20:b8:2f:48:fa:db:28:66:61:89:a7:47:9f:d3:
         b3:0d:55:8d:3d:ce:dd:8f:95:f1:df:9f:0d:51:97:cf:8a:14:
         ee:bd:98:41:cf:1b:80:4a:e0:0c:d3:63:f1:7f:10:d1:b1:ef:
         b1:27:f4:8b:e1:be:16:79:9c:7b:ab:5a:b0:e8:39:1f:ed:e2:
         48:76:78:f4:e2:a4:a9:fd:af:b0:7d:dd:ae:17:5b:0b:d6:45:
         51:34:ff:9a:98:ce:9e:67:d2:18:83:ac:e8:7b:ff:30:5b:e4:
         4e:b8:ef:6b:c0:e9:47:ef:97:bf:75:1b:02:83:02:00:6d:42:
         81:49:08:01:08:13:81:f1:ec:67:e7:70:b3:c9:67:56:f5:da:
         d9:c0:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:10 2026 by rpki-client