Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          MDxsrajL9OCOGNob9hzNmsMIuWgM1yk1F222gUl3gRM=
Subject key identifier:   86:ED:8D:C6:B6:6A:7B:F5:2D:C0:2E:D5:8C:9D:86:C2:C9:EF:40:C9
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       50E387729A0B048C53326E0FE1B50125A2828C51
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:45 +0000
ROA not before:           Sun 01 Feb 2026 04:23:45 +0000
ROA not after:            Sun 31 Jan 2027 04:28:45 +0000
asID:                     52369
IP address blocks:        190.110.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:87:72:9a:0b:04:8c:53:32:6e:0f:e1:b5:01:25:a2:82:8c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:45 2026 GMT
            Not After : Jan 31 04:28:45 2027 GMT
        Subject: CN=86ED8DC6B66A7BF52DC02ED58C9D86C2C9EF40C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:eb:e3:35:6f:55:87:2a:12:7d:9b:e2:25:
                    dd:84:2e:b7:e8:b2:ce:a9:ed:98:b1:d2:8d:4e:4a:
                    65:a2:08:11:c5:76:e2:29:20:24:be:fe:b0:e7:4f:
                    dd:7a:83:dc:a2:91:56:70:11:bd:ec:30:e0:97:b0:
                    03:40:cd:06:a7:f4:c0:e5:65:05:f4:73:f5:dd:e4:
                    c2:be:14:60:a9:a8:c4:cd:0c:38:5a:74:be:60:4b:
                    80:06:74:8b:76:8c:10:f9:d6:35:27:ce:75:11:58:
                    d8:01:1d:ec:6d:ad:ef:d3:df:15:e6:2b:62:40:60:
                    8b:47:e7:a8:24:e9:63:f5:dc:e4:ab:aa:da:ad:4c:
                    ee:09:86:1b:0c:ab:61:50:5c:1f:fd:44:15:b9:50:
                    d6:e8:e1:d6:d3:e4:91:1d:4d:c3:cf:a1:46:d1:b9:
                    4e:07:9e:65:12:d5:fa:4c:98:cd:97:19:40:70:0e:
                    d1:06:89:85:b1:a1:6f:fa:7b:57:ab:0f:d0:a5:c6:
                    d6:b8:02:85:91:74:85:84:a2:2c:94:10:6b:0b:5c:
                    56:ca:28:6a:50:ce:cf:fd:e1:a9:83:c0:fe:48:71:
                    f3:fc:e3:2c:b9:39:81:7c:29:6a:31:18:65:30:72:
                    cb:c4:e0:21:93:01:1a:ea:df:d1:01:66:5e:cc:34:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:8D:C6:B6:6A:7B:F5:2D:C0:2E:D5:8C:9D:86:C2:C9:EF:40:C9
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:06:86:3a:31:26:27:83:7c:7f:91:50:0c:d4:20:6b:05:
         4e:23:6c:0a:02:70:29:24:86:e0:5a:e6:71:b7:ec:d6:4d:e9:
         49:90:89:2d:c1:9f:4f:d7:98:71:71:c0:62:11:8f:38:89:b4:
         72:83:30:5a:84:ba:b3:40:a2:dd:24:dc:9c:2a:af:12:6d:ca:
         2f:9f:8e:2f:46:d8:a3:f2:67:d6:ab:73:a8:7b:4d:a7:c0:7f:
         af:ae:df:6e:77:2d:ee:3b:a1:16:10:89:f8:37:55:02:2c:5e:
         93:d5:58:d4:10:23:40:3a:36:ab:12:41:7b:c2:16:4c:70:b7:
         87:35:1d:dd:87:3f:39:0a:90:ba:ed:0d:32:d7:4a:1c:c8:45:
         78:fd:f6:e3:55:6d:40:25:93:2e:6c:79:89:ae:38:4c:ec:21:
         95:d9:56:9d:53:1c:6d:f9:44:58:bf:2d:13:93:02:71:a8:97:
         c0:04:ff:65:a2:45:db:30:4e:ee:46:45:88:ae:70:d4:2e:52:
         28:01:a0:96:bb:0c:e6:a5:e9:40:62:de:89:74:16:a8:cf:2d:
         83:4d:96:52:8e:16:01:64:81:a1:93:de:63:f1:c4:2f:f8:6d:
         33:15:ef:e1:0f:56:19:bf:fb:16:6a:d5:5b:d3:1c:26:19:c2:
         c0:a1:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:14:47 2026 by rpki-client