Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39382e302f32342d3234203d3e20323635363933.roa
File:                     3134332e3133372e39382e302f32342d3234203d3e20323635363933.roa (raw, json)
Hash identifier:          ljeYjTNKLEFoOIsBokaIJlt0P9gQv19i5ce5S31+gsA=
Subject key identifier:   6A:18:EB:02:46:B4:D4:64:DA:DE:3F:80:99:28:65:4C:CA:00:A8:0B
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       7BC5938E89678AE07B4B97479DE4E74D6CC60A2D
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39382e302f32342d3234203d3e20323635363933.roa
Signing time:             Thu 05 Feb 2026 16:00:00 +0000
ROA not before:           Thu 05 Feb 2026 15:55:00 +0000
ROA not after:            Thu 04 Feb 2027 16:00:00 +0000
asID:                     265693
IP address blocks:        143.137.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c5:93:8e:89:67:8a:e0:7b:4b:97:47:9d:e4:e7:4d:6c:c6:0a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Feb  5 15:55:00 2026 GMT
            Not After : Feb  4 16:00:00 2027 GMT
        Subject: CN=6A18EB0246B4D464DADE3F809928654CCA00A80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:e3:c2:f8:3f:a6:dd:f6:1d:00:ae:93:34:
                    61:94:23:a6:eb:1a:e2:e4:e1:c4:14:23:d6:24:e4:
                    76:f5:9d:00:1a:0f:47:82:c3:be:31:ff:64:fb:82:
                    18:a2:00:9f:33:de:64:a8:56:64:ee:6b:aa:d0:95:
                    b8:be:2d:b9:63:9d:04:3d:3d:80:65:23:2d:e4:eb:
                    e6:ad:f5:f4:96:73:a1:b4:09:70:5b:24:1d:24:23:
                    77:8d:2f:41:68:db:39:28:17:cf:28:5e:ca:c0:7d:
                    8c:f2:b8:87:f6:99:ce:d4:a0:22:c7:1f:de:b8:ed:
                    fb:a9:20:02:bd:9c:ff:cb:bb:a2:46:31:9b:6e:35:
                    29:31:06:b4:cc:ce:3f:ab:2b:e8:b8:e3:2f:bb:f7:
                    ff:61:c7:b6:7c:29:8c:62:2b:91:63:d3:46:ff:f0:
                    cc:2a:32:d4:df:2b:9b:bf:79:f2:6e:f8:61:d0:b7:
                    17:b7:f4:12:f7:32:df:88:7f:25:31:f6:c2:3b:8a:
                    f9:06:60:ea:46:46:e4:6e:db:ff:42:39:a2:6f:b5:
                    19:f7:7b:b0:52:d3:ea:9f:fc:85:66:b8:9c:ab:96:
                    7e:fb:84:0f:de:92:31:cc:c7:6f:de:bb:87:01:8d:
                    b2:31:bd:69:c8:c0:2f:e9:91:20:92:d0:57:79:be:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:EB:02:46:B4:D4:64:DA:DE:3F:80:99:28:65:4C:CA:00:A8:0B
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39382e302f32342d3234203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:41:e4:7f:41:b6:ee:6d:15:76:9d:ab:a7:f9:b1:a7:07:
         8c:c9:4f:52:c7:0b:b2:b9:ef:4f:92:de:0b:4f:17:64:c4:96:
         17:c7:97:ae:3e:8a:58:e7:e0:b5:45:9a:c7:12:5c:ae:81:78:
         71:aa:cb:b2:85:af:e2:25:a1:8a:45:7a:62:97:60:f7:eb:79:
         c7:2c:68:4e:44:9a:85:f2:08:a1:a7:a3:f7:8a:f6:75:bd:3d:
         27:85:9f:31:d6:b1:30:fb:d9:4e:4f:6b:1e:1e:c8:48:e4:bd:
         32:cd:2f:9c:fe:b1:02:0c:44:6c:ca:19:c7:b3:f2:64:37:4e:
         48:23:ff:fd:08:53:ad:de:27:79:bd:9d:46:86:d9:1f:b1:b3:
         6f:8a:49:6d:81:de:ca:ae:f1:f3:87:5a:7c:79:28:48:19:b7:
         9f:a5:9a:d1:29:73:1e:85:b5:3a:d2:2d:73:b5:6d:ec:9d:46:
         eb:8e:56:aa:e6:4b:05:57:98:f8:32:8b:88:11:38:12:fd:a3:
         3b:c5:30:07:8b:d1:17:30:a7:94:5c:30:81:66:ea:ad:79:4e:
         54:78:92:a9:9e:db:36:05:87:4b:8d:3e:c1:94:d3:ab:a4:14:
         9f:70:76:6a:e3:5b:01:b3:a2:1a:58:46:8b:0b:15:8f:53:1e:
         07:bc:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:03 2026 by rpki-client