Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa
File:                     3133382e39342e3234362e302f32342d3234203d3e203136393036.roa (raw, json)
Hash identifier:          Um3qZGt1tF8yCwNMdL6x3Vy1nGY1B4joJCHKTkiVJw0=
Subject key identifier:   AA:56:63:CB:7F:C0:89:3F:E3:6C:41:F1:0E:FB:66:1F:E2:CE:AF:91
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       55B39B9314C0E400012A30C128238FC8F95319C6
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa
Signing time:             Tue 06 Jan 2026 19:34:22 +0000
ROA not before:           Tue 06 Jan 2026 19:29:22 +0000
ROA not after:            Tue 05 Jan 2027 19:34:22 +0000
asID:                     16906
IP address blocks:        138.94.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b3:9b:93:14:c0:e4:00:01:2a:30:c1:28:23:8f:c8:f9:53:19:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Jan  6 19:29:22 2026 GMT
            Not After : Jan  5 19:34:22 2027 GMT
        Subject: CN=AA5663CB7FC0893FE36C41F10EFB661FE2CEAF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:10:ea:db:75:65:b6:c3:31:90:33:b1:63:
                    aa:e0:15:bd:9a:49:6f:86:a1:43:03:56:78:4f:c4:
                    4b:b9:22:25:7e:4a:35:7d:e2:db:40:c0:a0:c0:0e:
                    4e:d6:f3:a0:ec:13:89:5e:c7:89:7d:b7:f4:e3:10:
                    59:14:da:d9:d3:27:1e:9d:d9:0f:f7:2b:d0:31:77:
                    9f:73:80:7e:44:53:9a:0b:24:c5:66:4b:88:ca:54:
                    33:13:5d:81:00:b3:40:b3:c3:6d:85:9b:24:70:fb:
                    d1:b8:89:9a:45:be:5f:56:cb:69:f3:9e:cc:42:1f:
                    8a:f8:22:1d:0e:8d:98:a7:0a:4b:8b:3d:52:aa:d3:
                    55:83:f4:aa:31:41:ba:04:dd:55:4c:a3:84:19:09:
                    ef:11:28:43:80:df:ba:51:f5:4a:7b:d1:e8:e5:37:
                    71:86:65:72:57:fe:db:a6:ff:91:28:89:57:82:51:
                    b0:9a:67:dc:a8:a9:07:9e:a5:63:34:88:6c:cd:c1:
                    de:a9:73:20:b2:62:c4:a4:45:66:fc:88:1e:08:71:
                    68:33:f7:55:e6:40:f2:84:33:e9:71:40:79:35:76:
                    e0:9f:c7:71:f9:4a:2d:cc:ad:8b:8f:3a:5c:da:ee:
                    ba:60:b7:ee:3e:83:73:0a:90:09:9f:c7:bf:45:9c:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:56:63:CB:7F:C0:89:3F:E3:6C:41:F1:0E:FB:66:1F:E2:CE:AF:91
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:a0:4f:34:c2:35:66:f4:83:63:39:48:fd:eb:70:9a:ae:
         24:66:f7:4a:eb:09:b7:a5:21:32:e9:63:39:52:4c:9f:a9:77:
         65:b5:bd:58:e2:11:98:3b:a4:60:6c:35:2b:8d:25:14:a1:33:
         19:54:b4:b1:65:4f:ba:df:ab:9b:56:c0:73:20:a5:34:da:af:
         af:97:90:c1:8f:ae:14:7d:4c:53:02:16:6b:ae:72:c9:3e:18:
         e4:e2:b3:66:c4:d3:d1:cd:30:3c:06:b5:e4:40:86:6a:21:94:
         04:c4:cc:6f:20:2a:cb:f3:d4:a9:04:d5:88:6b:ce:e7:6a:63:
         c9:13:67:68:fe:52:76:81:a2:8a:53:f4:00:84:01:4c:37:23:
         63:5f:9c:01:d8:8b:84:05:11:1e:d8:e2:af:74:58:b8:5e:80:
         26:79:70:71:1a:a5:fc:c1:c1:91:f7:cb:50:08:07:cc:01:48:
         fd:c6:f7:b8:73:3f:14:e1:6c:ac:54:77:c2:79:99:73:55:d6:
         c4:d1:be:ea:69:1b:7f:84:7f:ec:6f:b8:08:ac:a0:59:3a:26:
         22:4d:90:ea:a5:1d:f1:42:89:97:a2:e1:b4:56:92:fc:72:21:
         a6:f7:a2:bb:45:47:94:93:6f:b2:88:7a:08:cb:7d:0c:e2:03:
         93:9b:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:21:45 2026 by rpki-client