Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
File:                     3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa (raw, json)
Hash identifier:          23NqrxuJgtI4mmpakMprUoTvHIRwn1pXK0x39yu/mbc=
Subject key identifier:   1C:43:C9:EF:05:35:AB:B9:BB:76:E7:43:F1:0A:19:70:B5:78:0D:0B
Certificate issuer:       /CN=071E98A75F67AF0AC72FFE00A1889291589B7570
Certificate serial:       3004AFB5F6AFC9C4ADB94C03CF87D3F637B5A5E6
Authority key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
Signing time:             Tue 06 Jan 2026 20:48:28 +0000
ROA not before:           Tue 06 Jan 2026 20:43:28 +0000
ROA not after:            Tue 05 Jan 2027 20:48:28 +0000
asID:                     262934
IP address blocks:        191.102.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:04:af:b5:f6:af:c9:c4:ad:b9:4c:03:cf:87:d3:f6:37:b5:a5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071E98A75F67AF0AC72FFE00A1889291589B7570
        Validity
            Not Before: Jan  6 20:43:28 2026 GMT
            Not After : Jan  5 20:48:28 2027 GMT
        Subject: CN=1C43C9EF0535ABB9BB76E743F10A1970B5780D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:d3:2b:0f:a3:cc:1c:1f:70:c3:90:d3:f4:
                    f4:e9:23:73:14:85:31:5e:4f:f5:01:76:17:25:78:
                    1c:69:fb:46:e3:07:ca:c0:76:2d:79:39:42:99:c1:
                    62:1e:e3:9c:bd:fc:5d:b4:45:78:54:88:e1:f6:39:
                    9d:58:b3:69:0a:ac:d6:da:65:5e:a3:77:8e:28:ed:
                    9e:7b:5b:8d:78:c8:1c:1a:4b:ab:bd:1b:14:b0:96:
                    f8:62:50:e6:15:50:cb:b1:60:a7:84:dc:06:0d:31:
                    e2:38:04:c2:e6:c4:a7:39:db:53:9f:5c:6c:0e:ce:
                    c4:fa:75:2d:a7:ff:22:28:6b:1d:af:c2:cd:99:c5:
                    ad:3d:18:73:f0:d8:05:53:16:05:ef:ff:33:01:7e:
                    98:f9:b3:82:03:59:a4:14:02:52:48:48:fe:0f:26:
                    16:48:2d:c4:ef:c5:f6:07:2a:5d:59:99:6a:ba:f1:
                    d4:be:f5:0d:fd:05:de:91:48:ba:c8:ab:4d:60:69:
                    6b:fb:48:48:79:48:8e:e6:b4:f3:93:2a:da:0b:b3:
                    10:cb:69:9d:7e:9c:ea:7d:50:1a:f7:be:81:53:01:
                    ad:67:9b:f0:64:78:c7:cb:d3:20:73:c5:d8:fc:b2:
                    7d:85:7a:30:31:74:c2:20:b3:87:73:3a:5f:7a:bb:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:43:C9:EF:05:35:AB:B9:BB:76:E7:43:F1:0A:19:70:B5:78:0D:0B
            X509v3 Authority Key Identifier:
                keyid:07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:82:10:87:f3:ef:d1:34:b0:0f:9d:9a:b5:f0:f7:6d:54:
         d8:62:9c:ba:08:9d:00:d5:4f:bb:6a:27:a9:be:98:d6:4b:35:
         e2:46:94:fa:6e:c0:39:42:e2:cf:30:63:33:b9:c5:f5:7b:f5:
         18:0c:6f:fd:e4:61:fb:f7:35:05:e7:c1:01:ad:69:32:21:d3:
         97:08:ce:52:39:6b:97:ca:16:99:0b:e4:9d:49:09:7f:ed:5e:
         e2:9b:2a:d9:6f:2c:ff:5a:d9:6a:f5:48:d2:b0:e1:2f:ba:83:
         4b:61:fb:a1:bc:cc:9d:f6:cc:ed:7a:31:92:0e:e6:f1:63:9d:
         3f:a9:d7:0c:da:32:64:b1:49:d2:95:e6:b1:55:65:4e:65:d9:
         a0:ea:f8:e5:86:3d:84:b6:c0:ce:b2:8e:5d:d8:07:07:dd:a7:
         c1:a7:f9:a9:30:35:22:49:52:f1:4b:cf:83:90:ed:95:99:da:
         2b:75:8e:6f:97:79:52:50:d4:34:1f:e0:31:97:57:49:1d:9f:
         2b:db:80:5b:4f:2e:40:59:36:d7:75:33:df:4a:13:36:7c:18:
         02:5b:16:ac:cc:39:f9:9e:2f:e8:7f:02:33:56:ec:8d:8f:a5:
         bb:9f:e4:c7:bd:3d:92:66:3b:1b:d4:81:0d:48:55:2d:92:b8:
         de:f5:8e:63
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMASvtfavycStuUwDz4fT9je1peYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcxRTk4QTc1RjY3QUYwQUM3MkZGRTAwQTE4ODkyOTE1
ODlCNzU3MDAeFw0yNjAxMDYyMDQzMjhaFw0yNzAxMDUyMDQ4MjhaMDMxMTAvBgNV
BAMTKDFDNDNDOUVGMDUzNUFCQjlCQjc2RTc0M0YxMEExOTcwQjU3ODBEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoctMrD6PMHB9ww5DT9PTpI3MU
hTFeT/UBdhcleBxp+0bjB8rAdi15OUKZwWIe45y9/F20RXhUiOH2OZ1Ys2kKrNba
ZV6jd44o7Z57W414yBwaS6u9GxSwlvhiUOYVUMuxYKeE3AYNMeI4BMLmxKc521Of
XGwOzsT6dS2n/yIoax2vws2Zxa09GHPw2AVTFgXv/zMBfpj5s4IDWaQUAlJISP4P
JhZILcTvxfYHKl1ZmWq68dS+9Q39Bd6RSLrIq01gaWv7SEh5SI7mtPOTKtoLsxDL
aZ1+nOp9UBr3voFTAa1nm/BkeMfL0yBzxdj8sn2FejAxdMIgs4dzOl96uzWDAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUHEPJ7wU1q7m7dudD8QoZcLV4DQswHwYDVR0j
BBgwFoAUBx6Yp19nrwrHL/4AoYiSkVibdXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTdBNzY2RkYxMkQwQzkyRTE4OEFBMEI2OURBRDc1RkUy
MzdBMkRGMUZCOEIwN0U1MDIwMjdBQTQ5MjNEQjIwLzAvMDcxRTk4QTc1RjY3QUYw
QUM3MkZGRTAwQTE4ODkyOTE1ODlCNzU3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzFFOThBNzVGNjdBRjBBQzcy
RkZFMDBBMTg4OTI5MTU4OUI3NTcwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E3QTc2NkZGMTJEMEM5MkUxODhBQTBCNjlEQUQ3NUZFMjM3QTJERjFG
QjhCMDdFNTAyMDI3QUE0OTIzREIyMC8wLzMxMzkzMTJlMzEzMDMyMmUzMjM0Mzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzOTMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO/
ZvgwDQYJKoZIhvcNAQELBQADggEBAJ3cghCH8+/RNLAPnZq18PdtVNhinLoInQDV
T7tqJ6m+mNZLNeJGlPpuwDlC4s8wYzO5xfV79RgMb/3kYfv3NQXnwQGtaTIh05cI
zlI5a5fKFpkL5J1JCX/tXuKbKtlvLP9a2Wr1SNKw4S+6g0th+6G8zJ32zO16MZIO
5vFjnT+p1wzaMmSxSdKV5rFVZU5l2aDq+OWGPYS2wM6yjl3YBwfdp8Gn+akwNSJJ
UvFLz4OQ7ZWZ2it1jm+XeVJQ1DQf4DGXV0kdnyvbgFtPLkBZNtd1M99KEzZ8GAJb
FqzMOfmeL+h/AjNW7I2Ppbuf5Me9PZJmOxvUgQ1IVS2SuN71jmM=
-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:41 2026 by rpki-client