Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136332e302f32342d3234203d3e20323635373632.roa
File:                     3132382e3230312e3136332e302f32342d3234203d3e20323635373632.roa (raw, json)
Hash identifier:          iR0HCUqc//w7UL9J/lFCdfT0SsazcQ+S9q2HmGqmxLM=
Subject key identifier:   41:6E:81:2E:C1:1F:BF:A4:96:38:B6:3A:90:89:22:02:43:67:DD:B4
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       4FFA0D884D6C5B367EA3403BA3D4604D69C9C0DA
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136332e302f32342d3234203d3e20323635373632.roa
Signing time:             Tue 06 Jan 2026 19:18:49 +0000
ROA not before:           Tue 06 Jan 2026 19:13:49 +0000
ROA not after:            Tue 05 Jan 2027 19:18:49 +0000
asID:                     265762
IP address blocks:        128.201.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fa:0d:88:4d:6c:5b:36:7e:a3:40:3b:a3:d4:60:4d:69:c9:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Jan  6 19:13:49 2026 GMT
            Not After : Jan  5 19:18:49 2027 GMT
        Subject: CN=416E812EC11FBFA49638B63A908922024367DDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:65:dd:2e:ac:c5:59:0a:18:ab:14:e3:be:27:
                    91:64:8f:f6:02:5b:dc:28:a3:05:e5:5a:ff:bd:45:
                    28:59:3c:90:74:d1:f7:17:06:36:55:7d:46:1a:ba:
                    63:98:69:aa:0e:8c:ba:74:7a:ce:37:75:c1:20:3b:
                    00:a1:53:e2:d6:97:03:0c:5e:c5:39:d3:0e:a5:0b:
                    e1:07:0e:9a:c2:c7:bc:75:d3:ef:29:dd:33:17:47:
                    e6:ad:6f:99:62:bd:99:7e:16:4c:c7:e2:64:8e:bb:
                    4c:f6:fb:cd:ad:29:5f:13:a9:35:59:b2:49:b8:87:
                    c0:e8:96:75:7d:44:90:5a:7e:b3:30:f8:9e:5f:28:
                    ff:b5:69:8a:3a:c3:40:0b:33:2c:0c:94:c6:43:d6:
                    67:c0:33:2d:89:da:81:81:1d:42:c1:99:05:42:cf:
                    97:59:3f:0d:34:98:10:d3:2f:4f:b2:f0:3a:c7:e9:
                    a0:a1:1f:16:3b:ba:44:cb:d3:d4:bd:d2:75:eb:31:
                    ef:ad:16:17:ca:15:05:95:cb:63:60:48:2f:3e:94:
                    30:66:28:b8:36:54:0b:78:67:d4:8b:74:71:e0:b5:
                    85:77:74:c5:d3:97:f7:b8:81:08:71:3d:ef:fb:4e:
                    ca:2f:c9:20:9d:c5:2f:ff:6e:e7:c4:11:b1:54:87:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:81:2E:C1:1F:BF:A4:96:38:B6:3A:90:89:22:02:43:67:DD:B4
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136332e302f32342d3234203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:82:0e:f8:c8:ff:8c:f0:58:a1:95:79:6d:a2:b4:c2:46:22:
         3f:f1:46:af:e3:6d:f0:f7:0b:60:7c:69:0e:90:6a:d5:0c:c6:
         c8:5d:02:09:36:28:06:5b:f8:87:be:a5:1e:a0:10:3f:cd:57:
         61:98:51:2f:b4:99:9f:af:d0:ab:5f:f8:3b:f4:70:0e:7f:11:
         a0:9b:26:12:aa:15:38:73:9b:7d:46:60:0a:9c:d5:ab:2e:ef:
         c8:70:39:b0:4c:4b:2b:5b:c6:ca:05:86:26:94:84:73:64:eb:
         a1:c2:b1:3a:58:96:af:67:88:05:e3:ba:b2:5f:e8:46:e6:74:
         5e:6d:19:9e:4f:50:72:4e:12:fc:57:e3:ba:8b:ee:c6:0a:1f:
         35:7a:e5:53:f1:e3:57:9e:04:62:9f:90:00:a2:a4:23:da:4a:
         7f:8b:a1:26:e4:b6:f3:f7:1f:05:36:2b:ed:ae:77:24:c7:2d:
         46:de:e5:12:9d:96:de:61:72:c3:75:d2:e8:56:4e:98:8d:e6:
         38:a3:4c:33:51:2c:7f:f1:ef:ef:9f:80:aa:6f:37:fb:e4:71:
         70:d9:d6:8e:28:93:a0:01:13:6d:db:48:a8:a7:eb:1b:32:4e:
         f5:86:1a:ac:c3:69:32:58:2a:8d:45:1f:36:1d:79:80:0c:95:
         c7:62:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:42 2026 by rpki-client