Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
File:                     3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa (raw, json)
Hash identifier:          CYS+oSWy6dzVwnrFMZm6qqn0+vY7bDi3Sb2Mj3VGPdQ=
Subject key identifier:   9D:BB:37:B3:7C:31:7D:68:03:75:3B:C3:23:28:39:30:37:F1:75:84
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       6EA2880A6E9F403AF458E746DE48D0C1B091822C
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
Signing time:             Tue 06 Jan 2026 19:18:49 +0000
ROA not before:           Tue 06 Jan 2026 19:13:49 +0000
ROA not after:            Tue 05 Jan 2027 19:18:49 +0000
asID:                     265762
IP address blocks:        128.201.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a2:88:0a:6e:9f:40:3a:f4:58:e7:46:de:48:d0:c1:b0:91:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Jan  6 19:13:49 2026 GMT
            Not After : Jan  5 19:18:49 2027 GMT
        Subject: CN=9DBB37B37C317D6803753BC32328393037F17584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:65:ca:de:24:11:2b:51:23:c1:71:8e:b9:
                    e5:43:21:a4:48:7e:4c:71:40:45:42:f2:03:d5:2c:
                    2d:8e:0b:13:66:18:57:9b:42:8b:69:88:a1:4e:8f:
                    e0:e6:23:16:c4:3c:c6:1d:3d:44:d4:76:d1:d3:f2:
                    67:85:46:3f:60:dc:3f:65:05:96:13:35:ea:61:0d:
                    aa:17:cd:c5:f8:31:fe:66:30:58:81:c7:bb:2c:0a:
                    ea:dc:04:db:f9:2c:9c:00:57:6c:89:fa:0f:b8:00:
                    f6:36:c0:d5:a3:1c:ad:04:1d:5a:03:9a:ac:b1:0f:
                    72:05:6e:77:2f:18:a0:2a:8b:87:b4:bc:7e:2f:b3:
                    72:64:48:fc:12:77:03:3e:ed:9f:56:42:45:96:0e:
                    73:c1:82:d3:b6:d8:96:b1:98:f8:f8:38:f6:96:a0:
                    11:2d:21:65:75:4a:5c:d8:48:7f:33:a5:29:bc:81:
                    39:8c:c2:c6:45:12:39:60:ff:da:75:f9:ac:a6:d2:
                    1b:21:14:65:6a:9c:75:d3:2c:00:ab:86:59:10:8a:
                    f4:28:9c:2c:5c:7f:02:7e:08:95:60:21:04:43:6a:
                    98:13:bf:e1:52:ed:a7:39:03:0d:cb:15:4a:60:79:
                    58:98:3e:7b:da:52:1c:b6:ec:aa:e7:18:96:36:75:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:37:B3:7C:31:7D:68:03:75:3B:C3:23:28:39:30:37:F1:75:84
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:ab:93:d5:89:c0:54:78:db:b8:3c:01:a8:84:86:d5:d5:
         ac:dc:80:8a:07:f3:1f:76:e9:33:72:19:ec:65:17:a9:60:fd:
         56:72:ac:1f:f6:95:59:d4:d0:38:2a:0b:07:f4:8f:7a:53:61:
         57:b8:f1:04:c8:f3:6a:6a:b3:26:da:94:b5:df:de:f6:8e:f2:
         38:b1:41:2d:28:bc:6c:ef:56:74:a2:9d:71:a7:a3:0e:89:f7:
         69:0b:98:c3:58:55:b7:6e:1b:2b:4c:09:3f:dc:92:a9:56:1a:
         07:0a:74:68:7c:f2:04:ea:6f:cd:ba:74:48:e8:04:dd:a8:b7:
         a1:14:cc:74:d1:fa:ad:90:82:61:43:cf:f2:cb:f5:f9:c9:75:
         a2:5e:02:86:18:f7:af:cc:95:97:b8:e2:7a:af:4d:f2:67:78:
         53:fd:1f:16:c4:25:fb:51:18:c9:88:87:a2:1d:40:a6:66:f8:
         11:a9:d6:61:58:f4:c0:eb:0e:88:1c:49:89:d4:e3:eb:41:8b:
         fc:89:ee:ac:59:17:9f:ff:ac:27:54:ac:99:2e:4f:ae:52:c5:
         7d:36:c8:b1:bf:29:d1:cc:fe:ff:e1:84:08:46:0e:1d:f9:f1:
         97:bf:eb:f0:62:2d:a0:69:75:28:88:6c:14:0d:74:75:71:de:
         8e:0c:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:42 2026 by rpki-client