Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa
File:                     3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa (raw, json)
Hash identifier:          rlQLnggvNGC2CQkcVSAel1s61Nt/9lvTyF/RSUbT19I=
Subject key identifier:   0A:0B:5B:E3:05:51:88:60:6F:42:8D:68:7B:4D:A0:6B:3A:41:0F:75
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       17C959063A9B5A0D91D299B556A2A1253B11DD48
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa
Signing time:             Tue 06 Jan 2026 19:18:50 +0000
ROA not before:           Tue 06 Jan 2026 19:13:50 +0000
ROA not after:            Tue 05 Jan 2027 19:18:50 +0000
asID:                     265762
IP address blocks:        128.201.161.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:59:06:3a:9b:5a:0d:91:d2:99:b5:56:a2:a1:25:3b:11:dd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Jan  6 19:13:50 2026 GMT
            Not After : Jan  5 19:18:50 2027 GMT
        Subject: CN=0A0B5BE3055188606F428D687B4DA06B3A410F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:c1:19:f7:d7:5d:40:a0:8a:d9:7c:08:05:
                    6e:b3:cf:66:de:6d:12:57:d2:77:82:25:3c:a9:bd:
                    38:20:cc:44:79:6d:39:56:e8:c0:15:b6:27:3a:b3:
                    7d:a8:b7:67:e0:5c:e1:52:27:46:a9:ba:2e:dc:3e:
                    08:b5:29:6a:f3:f2:94:b8:81:cc:5c:2d:ee:aa:4d:
                    e8:34:17:14:a7:d2:33:c2:9b:ff:82:df:dd:32:5a:
                    57:4c:2d:80:6b:4a:5e:90:8e:a4:a9:40:02:c5:33:
                    e3:b1:81:aa:22:6c:52:1b:ba:fd:af:3c:bd:1a:8a:
                    71:b4:08:22:8c:e7:0a:f7:62:07:a6:f5:e7:9b:10:
                    7c:50:64:9a:70:22:43:a1:5d:8f:85:17:92:72:72:
                    1b:40:51:31:64:18:41:95:20:88:08:cc:56:d9:73:
                    a8:9e:c9:30:b7:fa:3d:e6:62:3a:81:7a:d0:1d:32:
                    ac:a5:4d:6a:d1:d2:bf:f8:48:96:f1:a4:a7:63:10:
                    88:9e:95:82:43:1f:7d:74:ba:e4:24:fa:f6:c4:08:
                    e8:a3:2e:89:3f:1d:94:8b:45:f6:0a:64:ef:d6:db:
                    13:0d:60:62:52:06:39:d3:ad:dd:d3:78:05:60:a0:
                    c3:a4:d1:c5:c3:ce:29:10:4a:09:99:f2:49:79:25:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:5B:E3:05:51:88:60:6F:42:8D:68:7B:4D:A0:6B:3A:41:0F:75
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:ad:7f:d9:28:60:6b:15:80:61:f8:07:0c:69:8d:ad:6c:
         ef:53:d9:12:54:30:98:ab:bc:92:d8:f1:5d:7e:7d:74:06:1a:
         5d:cf:eb:c0:87:8b:df:59:04:8f:ba:ec:f1:e5:a8:23:4b:fc:
         85:62:92:55:d4:6e:b7:0b:2d:31:2f:55:97:c4:9b:1a:0a:89:
         b6:c1:83:cb:a7:8d:95:a4:33:64:15:f7:94:ae:8d:0b:2d:35:
         3b:3d:ce:ff:f2:6c:78:cb:ba:ec:b4:b9:58:44:ac:75:a3:73:
         f4:9f:f4:ed:fc:8f:73:d7:2f:1d:51:ff:df:f3:5d:fb:e4:bd:
         6d:37:12:13:ba:af:90:fa:4b:fd:48:e4:8b:5a:c7:41:73:35:
         93:8f:66:53:53:b4:d2:e3:84:0d:d0:39:e5:d7:ce:de:68:f5:
         cd:47:11:a8:49:5d:ea:01:d7:4c:21:1d:17:9e:38:6c:62:f9:
         75:37:0d:17:38:23:47:8a:c3:92:cc:64:34:07:40:1d:ac:d5:
         16:ee:b7:9e:08:ec:c7:21:36:3c:a0:f7:85:1c:0a:1d:16:5d:
         f0:d0:d9:bd:09:5b:13:bc:0a:37:d8:b9:5c:d1:66:e3:c7:f3:
         03:ee:8d:9f:b9:82:f8:de:48:c9:12:75:86:bf:18:64:65:e9:
         5f:dd:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:17 2026 by rpki-client