Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa
File:                     3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa (raw, json)
Hash identifier:          Vt6vlQBd7SAaxWXy5jCia55poWdQ03M3HVaMYjHt5pw=
Subject key identifier:   69:75:26:B9:35:B3:D9:05:D8:C1:3E:3E:10:66:F7:08:A4:89:95:75
Certificate issuer:       /CN=2B13EDB8862C4C138896CE298686EA7A81F6F832
Certificate serial:       55A472B97101134FAE5BADCA51B7C679EC45DD98
Authority key identifier: 2B:13:ED:B8:86:2C:4C:13:88:96:CE:29:86:86:EA:7A:81:F6:F8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa
Signing time:             Wed 14 Jan 2026 01:00:26 +0000
ROA not before:           Wed 14 Jan 2026 00:55:26 +0000
ROA not after:            Wed 13 Jan 2027 01:00:26 +0000
asID:                     273035
IP address blocks:        168.232.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:72:b9:71:01:13:4f:ae:5b:ad:ca:51:b7:c6:79:ec:45:dd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B13EDB8862C4C138896CE298686EA7A81F6F832
        Validity
            Not Before: Jan 14 00:55:26 2026 GMT
            Not After : Jan 13 01:00:26 2027 GMT
        Subject: CN=697526B935B3D905D8C13E3E1066F708A4899575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:54:f8:4b:42:ea:1c:51:02:17:14:5e:a8:
                    a5:41:e8:b8:98:a5:23:a9:0e:e0:4f:2c:7b:21:3f:
                    73:57:af:13:71:2b:fa:6b:c5:2d:fb:94:ee:4d:4d:
                    dc:07:ff:2e:b8:40:91:46:46:8c:14:4b:a3:9d:0f:
                    07:73:f5:7b:36:12:8c:c0:a5:26:1c:58:01:69:77:
                    e3:d2:e9:64:25:1e:8d:e4:c2:f2:45:06:26:34:77:
                    57:df:cc:05:8e:04:12:94:07:d4:15:2f:e0:58:63:
                    60:2f:cb:d7:55:1f:1e:e6:0f:c7:60:07:ba:a0:3f:
                    82:3f:65:c6:ee:f4:ad:2b:5f:af:41:28:99:74:aa:
                    ce:a3:db:4a:ca:b6:e7:51:12:89:41:03:68:cc:b1:
                    ba:19:50:3f:5e:32:a6:17:40:95:8e:93:ea:68:60:
                    be:71:8a:88:77:38:60:b5:8b:e1:16:75:d8:14:64:
                    90:be:ca:7a:88:4a:53:b9:4d:18:42:73:3a:2f:6e:
                    b5:5f:a4:83:db:cd:7d:1a:6a:ee:0c:ce:65:3e:17:
                    35:f8:f1:bb:a9:84:b7:fe:36:d0:4e:b2:cd:2b:58:
                    22:12:7d:b5:90:bb:8d:fe:a9:a0:1f:4a:ad:6a:ef:
                    09:44:ff:89:5a:83:5d:80:02:16:05:77:3a:57:6c:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:26:B9:35:B3:D9:05:D8:C1:3E:3E:10:66:F7:08:A4:89:95:75
            X509v3 Authority Key Identifier:
                keyid:2B:13:ED:B8:86:2C:4C:13:88:96:CE:29:86:86:EA:7A:81:F6:F8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:c6:a4:73:0e:df:f7:e4:4a:14:4b:96:e8:74:94:97:70:
         1c:4c:ec:83:fa:7f:8e:75:f1:b5:12:75:22:dd:63:e4:33:eb:
         e2:1f:ee:3e:fc:9f:73:41:96:ba:72:eb:e3:06:5d:5f:26:6f:
         9c:bf:c2:60:12:ef:c7:84:a2:e6:2a:0b:59:25:f4:9d:3d:eb:
         18:10:94:9e:9e:2c:90:8d:20:b0:d1:80:b9:39:a2:50:8f:49:
         d1:1e:58:18:15:89:a3:85:0b:64:94:ad:ff:8e:a7:e9:c1:96:
         40:68:0a:1a:e5:35:7d:66:59:fc:af:0f:bc:a7:0d:ca:61:27:
         c5:5a:9d:bb:21:2f:74:fc:19:63:e7:57:a2:7a:be:f8:20:1d:
         a9:d6:b2:3c:1a:41:63:86:4f:f7:f3:e0:62:ea:ba:db:33:06:
         b5:4f:39:79:b0:38:1a:bf:6d:12:bd:c5:70:28:6e:1d:f2:08:
         30:38:52:bc:a7:ce:4f:8f:36:5f:dc:9b:61:38:57:1d:3d:f5:
         69:db:63:44:08:cf:13:f4:69:75:f1:c9:6e:7a:fa:ad:88:d2:
         1a:61:bd:8f:bc:b2:24:d2:ec:80:a3:65:91:0a:4d:92:db:61:
         0a:71:e1:8b:26:0d:3f:5c:c9:5d:af:bf:41:f4:70:4f:2d:01:
         5e:53:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:21:45 2026 by rpki-client