Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          3QsVAnNoG2Vs/P5fz+jclvaz1r7RlxmQS821UL4BmhY=
Subject key identifier:   48:C9:74:32:61:7D:2E:6A:C6:52:9F:FC:2F:26:AD:C0:D0:2C:4F:7F
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       2B3968F60C30087AA8B821923964A85BBD8EC0B8
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:47 +0000
ROA not before:           Sun 01 Feb 2026 04:23:47 +0000
ROA not after:            Sun 31 Jan 2027 04:28:47 +0000
asID:                     52369
IP address blocks:        190.184.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:39:68:f6:0c:30:08:7a:a8:b8:21:92:39:64:a8:5b:bd:8e:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:47 2026 GMT
            Not After : Jan 31 04:28:47 2027 GMT
        Subject: CN=48C97432617D2E6AC6529FFC2F26ADC0D02C4F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:55:93:fa:23:3e:1c:20:e7:f6:c7:f7:60:
                    dd:9a:d1:f6:c7:af:b4:24:c6:2e:77:f7:05:e6:30:
                    2b:b5:2c:39:9d:7c:04:0c:cd:b7:dc:96:a3:63:55:
                    df:b6:b3:b4:df:02:e3:c0:9e:da:f3:f3:3c:b7:1d:
                    38:b1:c9:e5:73:9c:7f:14:ab:aa:7d:ec:34:34:99:
                    26:dd:81:6a:b0:14:9f:24:21:3b:f7:d1:80:b1:82:
                    49:f9:af:d5:15:15:68:29:03:af:a7:9f:6c:16:97:
                    22:c3:d9:17:39:88:2f:50:e6:bc:ea:ec:a9:32:b8:
                    27:a8:2c:e5:86:e9:04:42:94:52:ec:3f:3d:6e:3c:
                    e5:8d:e7:10:d1:b2:82:3d:c2:1b:98:df:0f:6d:cb:
                    74:cc:4e:70:28:b4:1a:c0:be:c3:fd:92:4d:0f:5b:
                    6b:65:13:b8:a3:00:ec:74:59:5f:c7:10:37:f3:cc:
                    4f:cb:eb:2a:32:dc:c5:8f:09:f4:cf:1f:8f:16:1e:
                    fb:1d:8c:a8:c6:98:58:9a:a9:54:4a:f2:b2:6a:11:
                    c0:54:16:e6:2d:62:8c:72:0e:cd:53:25:ba:46:86:
                    95:32:f4:0e:16:65:4e:64:22:78:07:11:e5:91:85:
                    72:4e:b1:e3:1c:3d:0b:87:db:43:f7:a4:86:8a:d3:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:74:32:61:7D:2E:6A:C6:52:9F:FC:2F:26:AD:C0:D0:2C:4F:7F
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:93:81:83:d6:0b:06:d0:75:53:c1:63:52:18:c2:c2:54:
         55:3f:e8:77:72:cb:21:f7:48:77:95:d2:3a:12:3e:84:35:0b:
         ab:de:a0:1c:7b:6c:90:7a:3a:9e:c4:cb:05:ef:e2:f9:a7:80:
         68:66:9f:e5:ad:00:a5:bb:39:2f:d6:25:3e:bd:00:2f:0a:2c:
         57:8c:79:b7:e2:b9:25:f7:16:8f:aa:52:2d:1c:02:37:ff:e0:
         5b:ee:c9:9a:e4:20:f2:29:ef:42:6e:09:0f:c2:24:84:10:ab:
         27:97:9c:6e:8b:8b:61:13:c9:6b:0f:21:8a:13:c5:0c:73:52:
         4e:1a:23:4a:5f:92:67:66:5b:a3:b6:56:75:c6:16:bb:84:91:
         4d:11:b2:a7:f4:f2:d8:14:80:16:8a:ff:f2:b5:49:fe:72:8f:
         52:d9:08:05:c5:93:4b:2c:88:c1:5c:ba:75:2e:1b:a1:5a:78:
         1e:f9:56:32:4c:a7:32:f3:40:a1:19:64:81:7f:fa:56:9f:b2:
         05:f9:0b:01:3b:f5:09:3e:de:9a:1e:0c:e6:b6:6b:e4:43:ad:
         2b:af:81:a5:25:5a:94:02:12:38:85:b2:7f:5c:67:bf:af:3c:
         14:d5:95:2c:1c:1b:be:b6:9d:2b:c1:c8:33:cc:de:fb:6f:fa:
         8c:08:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:57 2026 by rpki-client