Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131372e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          h0y8Aw/ABLaZJiaJuGkeDKnZc5DkJymWJiMWaLhz4B4=
Subject key identifier:   8E:E4:F6:4E:B1:4A:CD:A1:54:15:1D:E5:52:22:83:2D:AE:7F:24:61
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       7BBD8F528B4F1A9E93E0AB5CD7E82DBC7A27F810
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:48 +0000
ROA not before:           Sun 01 Feb 2026 04:23:48 +0000
ROA not after:            Sun 31 Jan 2027 04:28:48 +0000
asID:                     52369
IP address blocks:        190.110.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:8f:52:8b:4f:1a:9e:93:e0:ab:5c:d7:e8:2d:bc:7a:27:f8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:48 2026 GMT
            Not After : Jan 31 04:28:48 2027 GMT
        Subject: CN=8EE4F64EB14ACDA154151DE55222832DAE7F2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:f7:e9:0f:cd:33:eb:71:f1:f3:d6:af:e1:
                    2d:87:eb:9a:d7:93:ab:0f:b7:7d:65:88:1e:33:4a:
                    29:18:f3:46:85:ce:e5:0e:38:e3:db:12:93:63:6f:
                    ce:51:34:56:e6:08:f0:78:9c:84:1e:b7:5f:48:9c:
                    44:74:5b:d1:19:86:6c:d0:ef:bb:15:00:05:0e:fb:
                    53:93:e9:0e:e0:96:c2:6d:cb:2a:f2:35:cb:02:9c:
                    f3:14:9e:5e:6b:7e:b3:97:ba:53:b4:19:d5:41:c2:
                    48:c9:7e:dd:09:b5:f8:dc:4b:d1:7e:b3:d8:97:e0:
                    33:b6:01:05:7c:a9:87:d8:62:84:93:fb:1a:68:a7:
                    f4:61:89:42:6a:ac:dd:43:82:56:0d:94:f6:7f:0f:
                    27:fd:bb:29:74:a5:8e:9d:53:9b:0b:1e:e7:13:2e:
                    db:f6:0e:8d:73:d0:37:0b:3f:29:8a:3c:cf:b2:e8:
                    0e:a7:b7:5c:c8:7b:69:d8:08:a0:35:e4:bb:a1:11:
                    03:4c:02:90:80:dc:55:4a:12:53:96:ed:67:44:8c:
                    b3:ef:db:b4:ba:77:3c:d4:05:1d:45:d6:3f:5d:ef:
                    de:6d:2f:2c:83:a7:b9:d4:cb:54:80:9b:20:90:8c:
                    e7:4a:ef:ae:02:fd:a1:f7:c7:58:5d:43:3f:53:7b:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:F6:4E:B1:4A:CD:A1:54:15:1D:E5:52:22:83:2D:AE:7F:24:61
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e8:dc:f1:64:9f:cf:a4:13:f2:c2:7d:b1:d0:33:7a:df:db:
         2f:07:31:1d:4c:03:5a:db:89:6e:19:8e:91:df:ec:db:3a:28:
         80:ee:31:82:03:ae:0d:1f:0f:fc:2a:b2:4c:24:6d:6a:c9:ae:
         3a:a5:3d:48:d1:aa:e8:07:29:3c:1b:fe:0b:41:78:43:dd:81:
         b3:e0:3b:71:22:04:ec:02:25:d3:09:29:15:8a:af:a0:cf:4a:
         07:d7:58:07:47:8f:3e:68:3f:35:88:54:4c:39:74:a1:b5:6e:
         84:ac:b8:8b:16:5f:63:1f:d7:00:68:2d:64:f7:91:25:da:78:
         9d:99:09:ee:fb:6c:5e:cc:a6:fd:23:95:f7:e7:0b:72:d1:dc:
         cd:b0:60:5f:ba:a3:e6:ce:c8:e1:18:55:0b:48:d4:50:0f:1f:
         91:cf:d7:4b:ba:5b:b0:b9:d6:60:2b:82:22:05:ba:87:cf:23:
         2a:ee:a1:78:ad:e7:41:d7:04:11:07:cb:49:5b:c8:a3:9e:98:
         9a:87:18:c8:be:2b:9b:a9:26:a3:da:93:09:bf:e5:3e:61:73:
         1d:bf:0b:32:51:af:a6:b5:99:e4:62:d6:bb:51:bb:fc:ea:6d:
         58:9f:45:30:ce:0e:cc:f6:f8:7b:c3:44:d9:09:41:00:4c:e6:
         64:41:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:04 2026 by rpki-client