Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa
File:                     3134362e38332e39302e302f32342d3234203d3e203236363130.roa (raw, json)
Hash identifier:          GcpUkrSjdeW7BonlJ9Z/ua1oleew0jmwn3DXRdN3Mh0=
Subject key identifier:   AB:2C:12:D7:3B:64:BA:E7:24:9B:01:85:78:07:EF:22:FC:F7:78:62
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       108B18084B080065AEFA66879A88BD88A1C2ED23
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa
Signing time:             Tue 06 Jan 2026 19:07:08 +0000
ROA not before:           Tue 06 Jan 2026 19:02:08 +0000
ROA not after:            Tue 05 Jan 2027 19:07:08 +0000
asID:                     26610
IP address blocks:        146.83.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8b:18:08:4b:08:00:65:ae:fa:66:87:9a:88:bd:88:a1:c2:ed:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Jan  6 19:02:08 2026 GMT
            Not After : Jan  5 19:07:08 2027 GMT
        Subject: CN=AB2C12D73B64BAE7249B01857807EF22FCF77862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:57:92:8f:55:67:9c:da:66:f2:18:49:a3:
                    8d:2e:e9:d3:2a:73:80:6c:b8:cf:43:96:cf:97:7f:
                    d3:20:a7:07:79:b9:f1:c8:a8:75:47:7e:0d:cd:7a:
                    dd:01:db:36:fb:9b:1a:e4:f2:fa:14:9a:c9:60:12:
                    5e:5b:e7:14:f9:8d:d7:1a:4b:bf:30:fc:fd:2b:14:
                    99:f4:ff:4a:03:bf:9c:0c:99:f2:90:94:e8:ad:ec:
                    fb:cd:7f:7f:1d:11:bd:54:fa:69:18:f0:3c:08:42:
                    69:3c:bb:cb:e7:a1:a9:ff:39:20:be:68:52:47:38:
                    92:7a:85:e4:89:1e:3c:6f:0a:1d:a4:8a:ad:7c:bd:
                    92:ed:e8:56:9d:02:f3:40:e3:25:bb:87:4d:3f:fc:
                    77:d0:da:4e:32:31:b7:a5:a6:30:60:1a:7b:56:e1:
                    84:04:6d:b7:4a:5b:e5:76:d9:9a:e8:e9:cb:f8:ee:
                    f1:5f:8c:48:8a:76:06:e3:dc:2b:3d:83:14:65:c1:
                    50:6e:91:97:8a:5d:19:b8:7c:ed:76:8b:a6:8e:5e:
                    be:97:d1:cd:05:b1:f9:7a:f2:46:24:b4:25:94:e0:
                    1e:e5:df:d0:d0:e4:4e:0a:ac:d4:db:48:e4:66:13:
                    cd:3a:9b:99:ed:fc:60:1f:71:f6:cd:93:71:83:f8:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:12:D7:3B:64:BA:E7:24:9B:01:85:78:07:EF:22:FC:F7:78:62
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:47:a3:c0:9d:84:53:30:f2:4b:14:58:e6:5b:52:ac:88:
         c6:cb:3e:e8:db:ff:13:27:49:45:21:5f:a5:eb:e7:44:c2:d6:
         52:35:b6:58:9c:56:ed:5a:30:1c:05:cb:86:ff:9b:00:c4:9f:
         66:f2:d3:c8:37:02:a4:a8:1d:f2:dd:ca:cb:32:cd:3a:ec:1b:
         76:2b:32:61:90:d5:2a:c9:60:e6:5c:89:0c:1d:7e:f6:e0:c3:
         07:c7:70:16:46:78:5c:04:e6:3f:24:3a:71:e4:96:c9:28:1f:
         86:16:06:b7:9c:71:68:60:91:d1:09:74:9f:2c:f4:10:ab:23:
         22:bf:0b:2d:67:c4:7f:ba:55:2a:da:dd:b5:b1:f7:78:c9:37:
         e1:ad:af:99:1b:a2:6e:05:8e:b8:9f:80:6f:47:13:57:1f:99:
         89:0a:e9:58:73:24:c8:45:44:b9:f0:2a:e2:14:c9:92:c3:e5:
         f1:1f:06:8a:c4:ee:fc:b5:e1:80:c2:f1:f0:bd:a9:ed:94:ed:
         05:90:a4:16:89:04:7d:bc:43:64:07:cd:7c:b2:cf:0e:ac:9b:
         59:73:eb:bd:07:aa:a0:58:a7:3b:ae:77:ee:ae:9b:d4:b4:3d:
         b1:c1:da:ed:7e:cd:8b:93:1e:a5:ce:c2:3e:67:a7:fc:d0:d3:
         fd:ea:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:11:34 2026 by rpki-client