Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39372e302f32342d3234203d3e20323635363933.roa
File:                     3134332e3133372e39372e302f32342d3234203d3e20323635363933.roa (raw, json)
Hash identifier:          lyIp9YzNNMCP6NwahLJCj3yrdNXQYZe/9lh3T6NKUZw=
Subject key identifier:   7F:D9:71:D8:92:E3:78:28:C7:A8:4E:CB:78:1B:F8:75:CD:08:0A:72
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       039A48C6E391C986C38EF14458B6C3DAFEEF30FF
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39372e302f32342d3234203d3e20323635363933.roa
Signing time:             Thu 05 Feb 2026 16:00:01 +0000
ROA not before:           Thu 05 Feb 2026 15:55:01 +0000
ROA not after:            Thu 04 Feb 2027 16:00:01 +0000
asID:                     265693
IP address blocks:        143.137.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:48:c6:e3:91:c9:86:c3:8e:f1:44:58:b6:c3:da:fe:ef:30:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Feb  5 15:55:01 2026 GMT
            Not After : Feb  4 16:00:01 2027 GMT
        Subject: CN=7FD971D892E37828C7A84ECB781BF875CD080A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:56:be:c2:ac:71:7b:f6:a2:ac:52:16:c2:
                    72:41:a1:da:db:32:39:aa:36:36:3b:e5:de:4c:9d:
                    26:5f:34:42:8c:02:3d:1e:38:cd:4d:03:2a:6a:06:
                    66:2a:ab:b4:71:45:27:2b:ff:f5:39:36:62:2e:09:
                    17:53:ac:94:8e:21:0c:8b:ee:14:6e:a9:cd:23:4a:
                    b8:2d:d3:ed:f6:01:63:d3:ec:41:53:1d:11:ce:4f:
                    d1:2d:89:2c:46:6f:a2:3d:38:27:55:2e:82:0d:f3:
                    e0:65:f5:5d:87:40:e9:ae:91:12:5d:58:1f:0d:4e:
                    e6:a7:11:01:99:86:fb:23:35:2b:c4:97:22:5d:13:
                    14:54:c4:47:39:aa:77:9c:cd:28:0f:38:05:24:a8:
                    f7:f2:53:4c:7a:a4:4c:7f:b9:a9:87:b3:97:86:78:
                    90:16:a4:6d:c1:5a:c8:e1:d8:51:83:68:1f:cb:8c:
                    10:61:6b:b4:b8:f6:3a:77:b7:8a:97:84:12:03:85:
                    3b:8d:9f:4c:4e:98:6c:16:3c:f3:5c:ab:e4:24:f6:
                    1b:8f:2c:73:28:5d:7f:4c:84:5c:f8:3e:d2:d4:f7:
                    1c:1e:01:69:65:87:c1:34:46:fe:0b:a0:14:30:01:
                    f1:7c:fc:ee:f6:b7:c2:2f:4b:0a:14:a9:a9:51:92:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:71:D8:92:E3:78:28:C7:A8:4E:CB:78:1B:F8:75:CD:08:0A:72
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39372e302f32342d3234203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:2f:c1:58:8c:54:35:a8:00:ca:05:60:73:20:67:3c:da:
         f4:e2:dd:4b:d7:ca:ba:27:8c:9f:3f:7f:96:70:ff:76:f9:5e:
         1d:11:44:e1:af:f5:82:54:e1:4a:99:87:37:8a:dd:04:63:2d:
         c1:14:b4:12:58:2b:a3:95:3c:ab:88:72:c4:64:03:c8:29:96:
         a2:8f:a5:32:77:a4:da:df:59:7b:1a:f6:02:9f:19:d4:2c:fe:
         cd:74:ab:88:cb:75:54:f6:7e:07:aa:15:9b:20:0c:97:88:30:
         6c:ca:7d:65:86:f4:90:b5:7c:12:4e:70:49:71:02:55:42:86:
         8c:02:75:e2:fd:a0:97:f7:dd:78:8e:c5:b0:7d:2a:f0:8b:41:
         20:85:3a:f9:f1:5b:c7:26:27:00:bc:dc:d6:2c:dc:ba:28:f5:
         5f:90:dc:69:e9:08:9e:9c:2d:67:93:c7:89:f8:f6:34:55:a0:
         2f:c4:3f:22:5c:34:a9:95:ae:64:9c:a2:a0:d8:4c:2a:20:f2:
         ee:44:0e:b3:c5:75:cb:e6:19:a7:ef:48:15:f6:61:2c:12:57:
         15:b2:64:94:5f:a4:a4:93:7c:31:d8:44:19:40:ea:93:ed:4a:
         87:79:27:8d:86:67:74:de:e2:0e:c5:d4:28:5b:03:0e:a7:cd:
         19:2e:cf:0a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA5pIxuORyYbDjvFEWLbD2v7vMP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4Rjk0Q0NGNkVGREU0NDA0MzNBNkNBMEE0RjQyNUEz
Qzc0QTFBNDAeFw0yNjAyMDUxNTU1MDFaFw0yNzAyMDQxNjAwMDFaMDMxMTAvBgNV
BAMTKDdGRDk3MUQ4OTJFMzc4MjhDN0E4NEVDQjc4MUJGODc1Q0QwODBBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9la+wqxxe/airFIWwnJBodrb
MjmqNjY75d5MnSZfNEKMAj0eOM1NAypqBmYqq7RxRScr//U5NmIuCRdTrJSOIQyL
7hRuqc0jSrgt0+32AWPT7EFTHRHOT9EtiSxGb6I9OCdVLoIN8+Bl9V2HQOmukRJd
WB8NTuanEQGZhvsjNSvElyJdExRUxEc5qneczSgPOAUkqPfyU0x6pEx/uamHs5eG
eJAWpG3BWsjh2FGDaB/LjBBha7S49jp3t4qXhBIDhTuNn0xOmGwWPPNcq+Qk9huP
LHMoXX9MhFz4PtLU9xweAWllh8E0Rv4LoBQwAfF8/O72t8IvSwoUqalRkueNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUf9lx2JLjeCjHqE7LeBv4dc0ICnIwHwYDVR0j
BBgwFoAUvI+UzPbv3kQEM6bKCk9CWjx0oaQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEIzRTlDNzJCNTc3NUJCNjZDOEMxNjdDNDQ1OTVEQzlF
NkVFOUFEREEyNEU2QjlFOEU5ODU1QTI2QTJDNTlGLzAvQkM4Rjk0Q0NGNkVGREU0
NDA0MzNBNkNBMEE0RjQyNUEzQzc0QTFBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzhGOTRDQ0Y2RUZERTQ0MDQz
M0E2Q0EwQTRGNDI1QTNDNzRBMUE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRCM0U5QzcyQjU3NzVCQjY2QzhDMTY3QzQ0NTk1REM5RTZFRTlBRERB
MjRFNkI5RThFOTg1NUEyNkEyQzU5Ri8wLzMxMzQzMzJlMzEzMzM3MmUzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzOTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj4lh
MA0GCSqGSIb3DQEBCwUAA4IBAQAROy/BWIxUNagAygVgcyBnPNr04t1L18q6J4yf
P3+WcP92+V4dEUThr/WCVOFKmYc3it0EYy3BFLQSWCujlTyriHLEZAPIKZaij6Uy
d6Ta31l7GvYCnxnULP7NdKuIy3VU9n4HqhWbIAyXiDBsyn1lhvSQtXwSTnBJcQJV
QoaMAnXi/aCX9914jsWwfSrwi0EghTr58VvHJicAvNzWLNy6KPVfkNxp6QienC1n
k8eJ+PY0VaAvxD8iXDSpla5knKKg2EwqIPLuRA6zxXXL5hmn70gV9mEsElcVsmSU
X6Skk3wx2EQZQOqT7UqHeSeNhmd03uIOxdQoWwMOp80ZLs8K
-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:04 2026 by rpki-client