Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39392e302f32342d3234203d3e20323635363933.roa
File:                     3134332e3133372e39392e302f32342d3234203d3e20323635363933.roa (raw, json)
Hash identifier:          Hup/efjuB1g9fEmwJ29cwBmO1PgQbHx2Kd1pGWN8igU=
Subject key identifier:   11:7D:E1:D0:A3:98:F7:E1:E8:55:0E:E2:AD:5A:3E:5E:87:F1:1B:A0
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       43B4683A01DDB3A1AD1275FD054B9120E313D2F4
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39392e302f32342d3234203d3e20323635363933.roa
Signing time:             Thu 05 Feb 2026 16:00:00 +0000
ROA not before:           Thu 05 Feb 2026 15:55:00 +0000
ROA not after:            Thu 04 Feb 2027 16:00:00 +0000
asID:                     265693
IP address blocks:        143.137.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b4:68:3a:01:dd:b3:a1:ad:12:75:fd:05:4b:91:20:e3:13:d2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Feb  5 15:55:00 2026 GMT
            Not After : Feb  4 16:00:00 2027 GMT
        Subject: CN=117DE1D0A398F7E1E8550EE2AD5A3E5E87F11BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:65:b8:04:35:c5:c6:2c:f7:48:f6:da:4c:
                    f9:f1:f4:df:2e:da:b3:93:61:db:da:05:5e:7e:d2:
                    01:66:83:e2:45:2e:d4:99:7d:d9:14:36:b4:41:1c:
                    d2:22:af:dc:3e:4b:2b:fa:8e:36:6d:8b:77:c0:7e:
                    cd:dc:14:ab:d0:88:7d:34:07:42:93:7e:ee:6c:13:
                    a7:7a:2e:5c:a0:a2:df:7a:01:71:cf:28:b8:66:c3:
                    1a:74:1e:e9:12:f8:f4:bb:70:82:e3:04:48:c4:11:
                    de:19:f7:b0:f3:16:42:f2:8b:42:50:4a:d4:af:da:
                    a0:99:30:a2:47:f9:32:3d:8c:77:96:f9:7c:6b:24:
                    c8:f5:d5:04:44:01:18:e6:72:e3:47:42:16:0e:59:
                    a1:75:06:12:46:4a:d2:45:79:e2:84:59:34:13:04:
                    c0:a0:a8:7b:b1:eb:ce:ce:32:74:31:0c:96:73:86:
                    d4:44:82:75:db:56:fa:ba:25:00:84:41:5e:09:2c:
                    e2:ff:be:c6:17:1d:3a:5c:0d:03:3a:b6:81:38:42:
                    54:6e:da:5c:29:53:50:97:c1:2d:fa:02:d0:05:e8:
                    e8:15:00:ee:b7:5a:3a:13:96:21:bb:04:a2:68:ff:
                    02:06:6d:bb:c0:c6:b7:2e:3e:ac:6c:6d:1d:4d:31:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:E1:D0:A3:98:F7:E1:E8:55:0E:E2:AD:5A:3E:5E:87:F1:1B:A0
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39392e302f32342d3234203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:d4:b7:b5:cc:ba:fb:44:60:8e:73:13:e8:63:b2:af:f5:
         46:1f:ae:1e:35:cb:ea:4e:7f:3e:46:4e:0f:37:16:b7:f2:f8:
         4d:2c:11:ef:da:bc:d0:a3:a8:32:3b:2f:5d:d1:10:1f:82:ad:
         aa:18:c2:77:ff:2b:bb:88:58:ea:99:59:41:4c:1d:b5:2b:0f:
         8f:83:21:eb:72:a1:3f:76:72:8d:c6:1d:73:1e:39:a3:4c:cd:
         43:3a:5b:0e:25:02:81:80:d7:a7:d3:61:40:46:b9:4c:71:93:
         48:69:5a:a1:c7:8c:ee:a6:24:bf:fe:a9:10:f0:f8:07:f8:d8:
         02:57:fb:d1:cc:31:7e:06:cd:bd:54:fc:e9:e9:7e:6a:95:82:
         34:3d:0e:62:f5:c8:9e:58:6d:28:46:d6:33:47:13:bb:84:29:
         ec:79:0f:22:f4:31:07:ef:2d:e0:e1:7c:8e:63:f0:6b:3a:d7:
         c0:64:86:c2:09:3f:28:df:2b:bd:da:a7:ba:a5:9d:7d:04:8f:
         46:61:0f:26:a1:e9:2e:0d:f0:e6:cd:2a:e9:6c:f6:93:85:63:
         40:b0:c8:f7:c2:51:45:dc:84:d8:d5:d5:93:c5:f1:69:e6:bd:
         4a:09:9d:2c:24:2e:9e:f6:f9:24:fb:69:85:de:50:e0:da:fc:
         ea:2f:f6:6a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ7RoOgHds6GtEnX9BUuRIOMT0vQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4Rjk0Q0NGNkVGREU0NDA0MzNBNkNBMEE0RjQyNUEz
Qzc0QTFBNDAeFw0yNjAyMDUxNTU1MDBaFw0yNzAyMDQxNjAwMDBaMDMxMTAvBgNV
BAMTKDExN0RFMUQwQTM5OEY3RTFFODU1MEVFMkFENUEzRTVFODdGMTFCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QmW4BDXFxiz3SPbaTPnx9N8u
2rOTYdvaBV5+0gFmg+JFLtSZfdkUNrRBHNIir9w+Syv6jjZti3fAfs3cFKvQiH00
B0KTfu5sE6d6Llygot96AXHPKLhmwxp0HukS+PS7cILjBEjEEd4Z97DzFkLyi0JQ
StSv2qCZMKJH+TI9jHeW+XxrJMj11QREARjmcuNHQhYOWaF1BhJGStJFeeKEWTQT
BMCgqHux687OMnQxDJZzhtREgnXbVvq6JQCEQV4JLOL/vsYXHTpcDQM6toE4QlRu
2lwpU1CXwS36AtAF6OgVAO63WjoTliG7BKJo/wIGbbvAxrcuPqxsbR1NMZPTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEX3h0KOY9+HoVQ7irVo+XofxG6AwHwYDVR0j
BBgwFoAUvI+UzPbv3kQEM6bKCk9CWjx0oaQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEIzRTlDNzJCNTc3NUJCNjZDOEMxNjdDNDQ1OTVEQzlF
NkVFOUFEREEyNEU2QjlFOEU5ODU1QTI2QTJDNTlGLzAvQkM4Rjk0Q0NGNkVGREU0
NDA0MzNBNkNBMEE0RjQyNUEzQzc0QTFBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzhGOTRDQ0Y2RUZERTQ0MDQz
M0E2Q0EwQTRGNDI1QTNDNzRBMUE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRCM0U5QzcyQjU3NzVCQjY2QzhDMTY3QzQ0NTk1REM5RTZFRTlBRERB
MjRFNkI5RThFOTg1NUEyNkEyQzU5Ri8wLzMxMzQzMzJlMzEzMzM3MmUzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzOTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj4lj
MA0GCSqGSIb3DQEBCwUAA4IBAQB7SNS3tcy6+0RgjnMT6GOyr/VGH64eNcvqTn8+
Rk4PNxa38vhNLBHv2rzQo6gyOy9d0RAfgq2qGMJ3/yu7iFjqmVlBTB21Kw+PgyHr
cqE/dnKNxh1zHjmjTM1DOlsOJQKBgNen02FARrlMcZNIaVqhx4zupiS//qkQ8PgH
+NgCV/vRzDF+Bs29VPzp6X5qlYI0PQ5i9cieWG0oRtYzRxO7hCnseQ8i9DEH7y3g
4XyOY/BrOtfAZIbCCT8o3yu92qe6pZ19BI9GYQ8moekuDfDmzSrpbPaThWNAsMj3
wlFF3ITY1dWTxfFp5r1KCZ0sJC6e9vkk+2mF3lDg2vzqL/Zq
-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:03 2026 by rpki-client