Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa
File:                     36342e32382e3133362e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier:          BrYf8P2SV8RWVbTQOg6qtBBbUk2+OwQKqHXZ/7xQiSU=
Subject key identifier:   1C:AF:B1:67:7D:44:52:87:B1:87:51:3D:D0:FC:09:AE:D4:9A:53:94
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       47A73895C37E2E172E706B4F91CE5407C4E470E8
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa
Signing time:             Tue 06 Jan 2026 19:24:07 +0000
ROA not before:           Tue 06 Jan 2026 19:19:07 +0000
ROA not after:            Tue 05 Jan 2027 19:24:07 +0000
asID:                     28067
IP address blocks:        64.28.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a7:38:95:c3:7e:2e:17:2e:70:6b:4f:91:ce:54:07:c4:e4:70:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Jan  6 19:19:07 2026 GMT
            Not After : Jan  5 19:24:07 2027 GMT
        Subject: CN=1CAFB1677D445287B187513DD0FC09AED49A5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:fd:79:a0:e8:25:27:36:e9:a9:d3:92:e5:
                    e2:b3:96:51:e4:bd:03:1b:cf:f5:89:32:10:71:6d:
                    e0:0c:e0:4c:ad:77:50:16:a8:a1:11:c0:a6:cd:2a:
                    fd:ee:64:22:9b:73:99:07:e5:5a:cd:00:2b:5a:1b:
                    6a:bf:96:12:7d:c8:38:f8:e1:19:f8:5b:b2:4a:77:
                    d8:ca:8f:8e:40:dd:d4:4e:46:f1:03:5a:39:ae:20:
                    9a:3c:60:f3:a3:30:6a:6a:9f:af:85:eb:2a:ec:80:
                    25:ca:6c:28:40:a3:84:e3:be:4b:88:78:00:d8:23:
                    b8:15:8b:3d:d4:2a:85:8c:53:5b:40:4e:47:39:5e:
                    e2:6c:12:45:76:ce:a8:04:6f:16:10:66:c7:df:11:
                    0e:52:fd:61:1a:b3:e8:cc:d8:31:e2:a3:eb:dd:41:
                    33:02:2b:75:50:4c:67:33:1e:06:8e:0c:36:e8:6a:
                    b3:29:88:4f:2d:fd:f8:d6:8e:0e:a2:90:b0:41:bb:
                    3b:a9:85:76:2e:14:8a:d3:08:df:0c:cd:c4:ac:49:
                    80:2a:88:6e:2c:24:fe:dc:ab:e6:24:e1:41:92:9c:
                    81:43:e6:90:de:fd:75:5b:6c:84:da:13:e6:56:04:
                    3e:66:d6:5e:e7:5b:3f:9c:6c:a2:88:eb:82:e5:d9:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:B1:67:7D:44:52:87:B1:87:51:3D:D0:FC:09:AE:D4:9A:53:94
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:74:b0:3b:2c:d2:44:16:7b:a1:79:f1:81:2a:23:40:67:eb:
         c6:cb:31:28:53:12:0e:55:26:f6:99:aa:b1:3d:c0:63:8c:10:
         a8:0f:0d:bb:a4:9f:85:6d:3a:27:2a:b3:9c:af:1b:74:c6:09:
         3b:6d:6b:70:70:f8:85:a8:bf:c3:37:06:c6:6e:19:15:7c:37:
         52:38:a8:d6:af:dd:19:82:82:38:21:01:9f:82:db:3f:f8:04:
         88:d5:1d:a7:be:70:b0:03:4f:f8:7f:a1:19:da:9a:c6:79:6e:
         d5:a1:d0:ea:ac:a5:84:cc:0c:50:cf:74:83:f5:84:a6:b3:bc:
         22:32:9f:d2:2e:4c:f4:66:ff:e8:e4:4e:fd:7a:19:26:8f:f5:
         57:52:0a:4e:7e:e5:48:cd:a9:d2:f7:e6:8a:b2:94:5f:11:56:
         7d:e8:62:6c:c3:b4:e8:c7:00:e3:cf:12:19:7d:c0:07:40:d5:
         6e:1c:01:a3:65:8e:57:d6:02:a2:53:3f:1a:a8:a5:3a:9b:3b:
         5c:6c:ff:e7:e0:ac:71:94:fa:1f:1e:e9:b7:53:ea:cb:e2:99:
         56:31:51:6f:d1:6d:ed:c6:b3:8c:b0:df:ed:91:f4:12:e0:2a:
         73:91:7f:c0:41:65:09:a5:e2:88:66:2b:8e:2f:0e:2a:79:5f:
         45:8d:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:20:56 2026 by rpki-client