Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234372e302f32342d3234203d3e20323635383430.roa
File:                     3133382e39342e3234372e302f32342d3234203d3e20323635383430.roa (raw, json)
Hash identifier:          v5YwzSVUhIwD6YA3+TBxzmp69Q1KpH1SSGNvds4FnS0=
Subject key identifier:   B9:63:DA:8E:99:C7:B2:82:9A:98:2A:0A:6B:34:65:49:A2:0D:72:64
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       66BC15DE631078ED1C84A222C49C827AA0D4F2E7
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234372e302f32342d3234203d3e20323635383430.roa
Signing time:             Tue 06 Jan 2026 19:34:22 +0000
ROA not before:           Tue 06 Jan 2026 19:29:22 +0000
ROA not after:            Tue 05 Jan 2027 19:34:22 +0000
asID:                     265840
IP address blocks:        138.94.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bc:15:de:63:10:78:ed:1c:84:a2:22:c4:9c:82:7a:a0:d4:f2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Jan  6 19:29:22 2026 GMT
            Not After : Jan  5 19:34:22 2027 GMT
        Subject: CN=B963DA8E99C7B2829A982A0A6B346549A20D7264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:6f:07:f3:bd:7c:55:34:74:33:9c:08:b0:
                    9b:17:80:62:2d:ba:68:9d:18:02:49:9b:4e:ec:41:
                    dc:bd:40:77:b5:d1:03:1f:03:66:c4:c9:16:99:70:
                    55:78:d1:68:a7:c0:f5:96:ea:33:71:8c:3b:da:25:
                    ab:c6:39:85:7a:86:93:53:ae:d2:12:a0:8d:7c:99:
                    f6:ed:e3:d5:29:05:cb:18:0c:8a:72:d3:92:b3:63:
                    5d:0b:ea:7d:54:e8:bf:c5:87:c1:0f:15:01:39:bf:
                    e2:bd:02:a2:c5:6e:f1:ee:ef:9a:ea:2e:64:bc:af:
                    a4:a2:35:a6:02:d7:8d:cf:c9:7c:1e:42:0f:3a:a9:
                    81:df:d1:1e:0c:ae:7a:46:c2:e3:8e:83:2c:c5:6f:
                    56:52:5b:07:d6:bd:3f:09:84:18:ac:f8:20:e9:d0:
                    83:b4:dc:d5:37:3a:39:78:3d:e4:76:f6:c6:75:a3:
                    10:a4:22:7b:57:91:29:b0:f0:37:88:44:06:e4:1c:
                    10:7e:a5:6e:45:1a:5f:69:e1:54:cd:93:70:e5:d5:
                    65:e4:78:64:47:6d:d5:3d:a0:fe:12:0a:19:71:03:
                    92:9c:df:c1:df:44:c7:24:25:37:b4:37:be:07:88:
                    ca:1b:9f:21:b4:e5:9c:99:7f:d2:0a:86:e6:56:b2:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:63:DA:8E:99:C7:B2:82:9A:98:2A:0A:6B:34:65:49:A2:0D:72:64
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234372e302f32342d3234203d3e20323635383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:dc:69:f3:c2:96:aa:4c:b7:ec:b2:b7:fd:9b:0a:45:fc:
         be:ca:71:22:58:ca:45:09:d2:c1:f8:4e:7d:36:4c:03:a6:d0:
         43:96:bd:85:03:2f:03:b5:4d:d9:50:bf:64:fd:98:79:d1:b6:
         9e:b1:cb:c9:ed:68:7d:7c:ef:a3:a8:fa:ca:2f:96:53:b2:e8:
         6d:3c:0c:a8:d1:2b:63:cd:b5:2d:0a:5b:32:b9:b3:d3:74:a3:
         a0:f2:56:07:29:a1:d6:4f:78:3d:ca:29:98:42:aa:1b:e7:2e:
         f6:00:4d:1c:3c:72:8b:8d:c4:52:27:8f:15:72:ed:29:cb:ed:
         85:b9:d3:c8:67:e9:7a:c9:56:f1:ba:81:74:ae:01:a8:5e:13:
         46:5d:7b:25:8f:c2:0d:32:29:a3:2e:41:d1:b6:21:62:ea:91:
         83:1b:4b:52:92:b9:f5:9c:af:d2:11:a1:ad:3e:9a:72:84:56:
         66:31:b5:80:ab:3e:b3:9d:42:bc:65:af:76:4c:28:4c:6b:54:
         03:0b:b8:e7:4a:e2:c6:a5:8a:7a:d7:94:b8:58:4e:60:c7:53:
         5e:5e:3a:6d:21:e7:3a:c1:86:e4:5c:04:e4:b2:09:c7:8c:4f:
         22:bc:51:01:f7:70:38:1b:95:fc:b2:d6:ba:7f:92:b4:6d:f9:
         5e:a5:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:45 2026 by rpki-client