Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
File:                     3138372e36322e39322e302f32322d3234203d3e20323639393039.roa (raw, json)
Hash identifier:          HOt0ixXsxm47cw5jfAcdEWaTWdTTBvmIU1uHCtGEGgk=
Subject key identifier:   21:A3:8B:C3:DB:8F:02:7B:AB:01:B6:A2:F2:41:31:04:D3:46:CE:03
Certificate issuer:       /CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
Certificate serial:       18910DC646D1ED7412E01A0712F6BB2A4CA291AC
Authority key identifier: 39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
Signing time:             Tue 06 Jan 2026 19:39:44 +0000
ROA not before:           Tue 06 Jan 2026 19:34:44 +0000
ROA not after:            Tue 05 Jan 2027 19:39:44 +0000
asID:                     269909
IP address blocks:        187.62.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 20:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:0d:c6:46:d1:ed:74:12:e0:1a:07:12:f6:bb:2a:4c:a2:91:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
        Validity
            Not Before: Jan  6 19:34:44 2026 GMT
            Not After : Jan  5 19:39:44 2027 GMT
        Subject: CN=21A38BC3DB8F027BAB01B6A2F2413104D346CE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:20:8e:11:a8:e5:19:0f:28:c3:eb:c6:c2:
                    87:11:b6:51:a6:1a:72:d4:2a:a3:15:60:17:f5:98:
                    b1:c2:00:02:24:cb:71:42:7a:71:c2:2a:58:2b:59:
                    f4:f0:8f:49:b5:33:27:9e:af:c2:89:b2:f4:6b:c3:
                    3b:94:2b:a3:f0:d1:1a:85:2a:6f:35:49:88:11:04:
                    c1:91:cf:39:c5:d1:3b:e2:b0:ad:55:4b:80:ff:69:
                    b8:5e:01:2a:14:fd:cb:2c:d4:5e:a3:f8:db:29:f7:
                    f3:e5:fb:8c:60:c1:f2:3e:83:30:36:2d:bd:98:b8:
                    41:f6:85:b5:33:37:3b:19:e5:10:b3:8f:89:a0:57:
                    8c:70:93:68:38:8f:04:cf:c4:a2:a6:c0:a7:2f:f6:
                    79:36:0f:d1:66:71:33:dd:b9:59:95:f9:83:1f:11:
                    8c:4e:c1:17:f8:f8:ca:1c:bc:50:24:f0:8c:83:9a:
                    5f:5a:ab:c6:7b:d4:c8:42:4a:b1:fb:54:4f:fe:58:
                    5e:3f:8a:4b:c0:9c:fc:1f:c1:9d:64:17:39:af:9b:
                    54:c5:6f:11:da:4e:ea:78:aa:f6:a3:54:55:25:2f:
                    aa:98:e1:a6:83:8e:60:d5:3a:85:32:92:e4:46:0b:
                    58:83:c7:85:96:e1:d0:a9:b8:eb:53:b0:16:5d:74:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A3:8B:C3:DB:8F:02:7B:AB:01:B6:A2:F2:41:31:04:D3:46:CE:03
            X509v3 Authority Key Identifier:
                keyid:39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:f4:87:d8:f8:23:10:79:54:87:02:b2:6f:8b:fd:86:f5:
         81:84:5e:ca:d3:08:37:c4:c4:f5:03:e6:ab:ef:f5:8f:f2:72:
         42:03:c1:66:9e:d0:31:05:8d:e3:88:c3:42:37:e0:a1:c9:a2:
         77:c9:6e:1b:bd:ed:09:04:9c:51:a6:a2:96:af:9a:ad:80:2b:
         e3:e6:57:5a:f2:cb:7f:bd:25:62:4c:ef:85:65:a8:55:a4:3c:
         d4:3d:71:c8:9d:1d:81:6e:5b:6d:e6:30:12:63:24:40:e5:5c:
         aa:0c:f1:d5:bc:61:47:11:a0:45:ce:50:e3:52:01:30:ce:22:
         29:23:2d:30:81:23:29:16:e2:a9:2d:20:58:d0:4b:fe:32:77:
         f6:f2:64:d2:fc:ee:10:86:df:c4:82:99:50:5c:67:bd:e9:04:
         4e:94:52:88:db:a8:43:07:07:36:2d:69:8a:e1:76:33:cb:ca:
         89:cc:e6:28:93:10:b6:5c:c6:46:87:71:7a:cd:c3:00:69:93:
         22:f2:66:3b:e5:81:80:ac:68:d8:89:c5:77:f1:f4:af:06:e5:
         1c:cd:d6:6e:23:d5:f9:2c:60:8c:8b:fd:7c:ae:78:12:bc:5c:
         b5:e8:ba:f6:64:f9:f4:3b:cd:99:63:15:59:92:1b:d2:e5:93:
         30:4a:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:51 2026 by rpki-client