Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3138362e36352e39372e302f32342d3234203d3e20323637373036.roa
File:                     3138362e36352e39372e302f32342d3234203d3e20323637373036.roa (raw, json)
Hash identifier:          pGHk7vYWCZPtRlo8iPYF+vdRtCltCWWIANya0ftgIi4=
Subject key identifier:   D2:E1:21:91:33:F6:A3:9E:B8:A8:A4:4F:E0:31:73:D0:18:E4:72:BA
Certificate issuer:       /CN=3A2E414DFFAF888C3670046DD819856FE5330921
Certificate serial:       2F8A0BE5CACFA9F11816E5E2B0EF2D6038508C28
Authority key identifier: 3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3138362e36352e39372e302f32342d3234203d3e20323637373036.roa
Signing time:             Wed 18 Feb 2026 18:00:12 +0000
ROA not before:           Wed 18 Feb 2026 17:55:12 +0000
ROA not after:            Wed 17 Feb 2027 18:00:12 +0000
asID:                     267706
IP address blocks:        186.65.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8a:0b:e5:ca:cf:a9:f1:18:16:e5:e2:b0:ef:2d:60:38:50:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2E414DFFAF888C3670046DD819856FE5330921
        Validity
            Not Before: Feb 18 17:55:12 2026 GMT
            Not After : Feb 17 18:00:12 2027 GMT
        Subject: CN=D2E1219133F6A39EB8A8A44FE03173D018E472BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:aa:ad:a6:de:e1:ca:f2:62:61:3b:04:9b:
                    91:91:cf:df:23:46:7f:45:55:80:5f:1e:f7:9c:10:
                    5f:03:de:4f:10:a5:fc:89:14:13:e2:be:16:c4:bb:
                    64:53:40:0b:9b:77:51:c9:26:8d:a0:6c:9e:74:e8:
                    90:74:f7:84:af:b8:1f:9a:36:a6:3a:ad:f1:91:fc:
                    c3:d9:e8:c6:42:2b:36:72:96:79:11:54:7e:ef:71:
                    56:d5:fe:cf:7a:b2:7f:3a:fb:9b:1b:73:49:b5:82:
                    4b:cc:5a:a0:98:82:b7:48:a9:03:fd:f8:a0:f2:27:
                    fb:f6:44:d3:7f:c0:52:80:33:f9:69:e9:d2:0c:83:
                    06:df:c0:81:44:1c:eb:c4:e2:47:79:b4:f8:0d:b8:
                    fa:61:aa:c6:26:de:a5:b5:07:0f:35:38:8a:b8:12:
                    16:cb:87:52:31:c6:cd:5a:05:5d:cd:3d:45:c1:86:
                    d2:90:92:0d:12:a2:f9:5d:33:1f:e2:41:cf:6e:5d:
                    93:bd:ef:53:6c:8f:59:95:46:76:b4:f0:78:e8:b3:
                    14:e4:94:b2:1f:2c:c1:73:f3:de:62:8f:e2:13:33:
                    2a:27:df:67:21:e0:4c:e9:aa:9d:f1:2a:bf:1a:8c:
                    f1:70:71:7c:0f:f7:6b:61:ae:51:bb:2b:67:64:98:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:21:91:33:F6:A3:9E:B8:A8:A4:4F:E0:31:73:D0:18:E4:72:BA
            X509v3 Authority Key Identifier:
                keyid:3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3138362e36352e39372e302f32342d3234203d3e20323637373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:11:e4:77:a7:b3:70:46:2d:42:44:00:6d:e9:75:24:8d:2b:
         42:eb:07:4c:fe:be:eb:b7:a6:3d:4a:c4:b8:a3:e4:4a:ae:d7:
         f0:10:4f:76:d6:cf:10:d0:09:10:63:8b:1d:0f:39:27:82:d3:
         df:03:89:9e:71:8e:a3:57:8b:fb:5c:d9:11:4e:13:58:b6:09:
         e2:9d:73:fa:d6:4f:5e:d1:e3:ab:2b:20:36:cc:60:0c:5a:7a:
         7a:2c:db:7a:b1:ec:1b:95:a9:bc:d0:40:d5:7d:a5:e2:09:93:
         fe:74:e2:02:07:bf:f8:04:5c:ac:be:01:49:6f:67:6c:35:73:
         36:8e:49:25:6a:56:55:c0:5f:48:9f:d4:aa:2e:bf:d3:39:23:
         ce:30:d4:82:63:70:8d:11:e3:d7:09:24:84:60:9c:96:44:4d:
         c7:71:2c:ba:d6:68:e0:84:05:af:35:8d:1e:75:0d:a5:d1:bb:
         1c:aa:10:44:a9:f6:69:03:27:bc:55:f5:cb:7d:52:9e:bb:d8:
         05:37:e9:74:83:f3:f0:45:90:aa:b8:e8:c9:f2:b6:64:2b:e9:
         ea:67:85:e6:99:e1:1b:52:b2:81:f8:da:b9:83:2c:ac:ea:81:
         bd:6d:27:5a:3f:bc:fc:9d:f4:40:93:ff:70:d2:bb:eb:91:db:
         18:87:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:00:16 2026 by rpki-client