Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233372e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          UVdLLeauUcZSYJFdcnrnip4UCi1jTtD3kX+SmRyg+RI=
Subject key identifier:   37:BA:D2:88:D1:9B:08:A0:30:74:D4:95:25:76:1D:86:CB:02:EC:26
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       4EACCC215C038D19F5255E21BFA68E1710B4C487
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:44 +0000
ROA not before:           Sun 01 Feb 2026 04:23:44 +0000
ROA not after:            Sun 31 Jan 2027 04:28:44 +0000
asID:                     52369
IP address blocks:        190.184.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:cc:21:5c:03:8d:19:f5:25:5e:21:bf:a6:8e:17:10:b4:c4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:44 2026 GMT
            Not After : Jan 31 04:28:44 2027 GMT
        Subject: CN=37BAD288D19B08A03074D49525761D86CB02EC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:dc:b5:33:41:82:33:fe:80:6e:ba:68:36:
                    31:b3:04:a5:fa:f8:c4:6d:a2:2d:7b:d2:03:cd:33:
                    34:de:6e:4a:20:3b:82:c0:c8:5d:a6:0e:e7:d7:a5:
                    9c:52:69:82:9f:42:d3:98:63:b8:df:34:77:d2:5f:
                    ce:10:b8:d9:4d:aa:cb:62:1d:21:d3:38:60:52:b0:
                    9f:f8:0a:03:04:0c:1d:42:29:96:25:3c:53:e1:ae:
                    cc:41:4c:9a:0c:5a:de:cf:28:ea:c4:3e:6d:f3:a3:
                    ae:99:db:4f:6e:6f:a8:c2:af:97:2e:33:f5:fb:e5:
                    de:9f:3e:14:70:f9:98:d0:3f:a7:50:16:7c:83:0b:
                    16:c1:8d:dc:ed:9b:b7:db:3a:ee:08:62:03:a7:53:
                    5f:85:53:86:c1:13:5a:69:9f:07:36:f4:f3:ab:da:
                    3e:f2:28:c8:27:65:81:66:07:ea:4d:2d:7b:ef:0c:
                    0b:51:0a:67:bb:f8:bc:4c:13:ed:e0:32:bf:33:e8:
                    cc:d2:7c:63:d5:8d:b5:cb:48:97:f8:fb:c4:37:bf:
                    38:4f:57:4d:1f:58:7e:48:c5:c9:ae:b0:02:0b:75:
                    c9:27:55:e6:ce:3e:58:f0:c3:44:d6:e5:23:65:0b:
                    a5:f6:d9:3d:36:46:49:d6:d8:9c:bb:12:6c:b2:d0:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:D2:88:D1:9B:08:A0:30:74:D4:95:25:76:1D:86:CB:02:EC:26
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:85:ec:b2:75:f6:2b:e3:47:1d:bd:07:91:b1:56:ee:37:c8:
         97:94:d2:80:f8:a6:92:60:23:fe:b6:80:96:f8:63:8f:33:f0:
         b9:58:fb:6e:61:bc:4f:77:90:0f:d8:b0:c3:b7:84:04:92:7c:
         4c:7d:82:39:b8:d0:ec:66:fb:a2:c2:e1:e4:df:d7:60:d6:26:
         28:87:9c:45:3b:fd:84:7e:94:a3:81:75:e0:8e:93:67:34:f5:
         42:ff:b6:9f:1f:c2:0c:ba:3d:6b:0d:99:98:03:f5:a6:96:01:
         61:eb:e6:68:dc:04:62:d7:44:4a:92:be:82:4f:90:d2:39:80:
         3f:8b:75:24:fb:9d:3a:cd:41:6c:95:a4:f5:b9:17:36:e2:e0:
         89:04:bd:34:df:9f:7a:ab:24:8c:0f:41:af:65:2f:be:79:22:
         28:4b:39:89:95:85:9b:26:3c:8e:bd:19:a0:21:b1:08:a3:91:
         7d:6b:94:47:fb:88:91:a9:26:f1:a2:ad:de:76:07:4b:e8:3b:
         c4:27:f6:69:b2:73:5c:e7:de:79:50:e4:02:6f:3a:58:02:46:
         f5:3d:38:61:af:ca:e8:67:f7:0f:33:3a:19:98:50:31:75:b7:
         e9:b3:1b:d0:ca:90:dd:22:17:1e:21:ca:f4:27:67:c5:1c:80:
         6f:8d:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:21:31 2026 by rpki-client