Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa
File:                     3133312e3136312e38342e302f32322d3232203d3e203237373831.roa (raw, json)
Hash identifier:          ZnettFw7bFGh8J0WLhXPUJLB+1dJFfQYVWOJZ6FGE84=
Subject key identifier:   2D:40:22:5B:09:79:4E:9A:CA:DC:59:CD:0B:1A:F1:1E:78:1D:1C:59
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       23A2DC7D35567F0D5FCC92A6694EAC9E4767F9BE
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa
Signing time:             Mon 16 Feb 2026 05:30:39 +0000
ROA not before:           Mon 16 Feb 2026 05:25:39 +0000
ROA not after:            Mon 15 Feb 2027 05:30:39 +0000
asID:                     27781
IP address blocks:        131.161.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a2:dc:7d:35:56:7f:0d:5f:cc:92:a6:69:4e:ac:9e:47:67:f9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Feb 16 05:25:39 2026 GMT
            Not After : Feb 15 05:30:39 2027 GMT
        Subject: CN=2D40225B09794E9ACADC59CD0B1AF11E781D1C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2f:dc:90:98:3f:8d:13:de:ba:e6:d2:e8:54:
                    e7:4b:ba:d9:b1:2b:d7:15:32:60:71:d9:32:62:15:
                    d7:4e:fd:a5:81:fa:0c:21:eb:fe:fb:9c:b9:8f:48:
                    0d:40:b5:e7:34:53:11:29:23:99:39:79:b4:92:51:
                    fb:ae:56:5e:21:9a:c5:28:c0:fd:aa:52:5e:4f:05:
                    b9:92:1c:3b:3f:8a:a0:43:97:d5:23:5d:87:0c:e1:
                    cb:ff:bc:6e:94:07:f9:75:86:a0:ca:f7:fe:f1:c5:
                    18:3b:0b:0d:22:7b:97:a9:f2:c7:49:0b:e4:e0:1e:
                    cb:ae:24:ab:93:07:36:2c:97:89:86:e2:4c:7a:c0:
                    aa:88:31:c3:58:09:c9:bc:b4:78:ea:ff:25:ed:72:
                    7a:2e:0c:8d:e6:93:26:e3:92:e6:7b:aa:e9:df:26:
                    11:58:f5:16:ef:e3:ba:71:86:28:5b:42:e3:f6:0e:
                    df:9d:6f:57:67:49:13:3c:38:a6:e7:8e:7e:7c:7f:
                    3f:4b:15:6e:0d:dc:d3:91:ee:1a:a0:99:c1:32:b1:
                    a7:f0:3c:f6:0e:c9:5d:52:ba:6c:e7:88:21:b2:dc:
                    a9:97:b1:bb:51:62:1d:ca:27:03:1e:70:61:55:a5:
                    b6:f5:fb:8f:a6:ff:d9:7f:bd:cb:66:e8:d9:e2:34:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:22:5B:09:79:4E:9A:CA:DC:59:CD:0B:1A:F1:1E:78:1D:1C:59
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32322d3232203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:89:44:80:ab:5c:7d:b8:8f:d9:2d:15:b7:88:67:41:d3:
         92:9e:49:16:09:f9:ca:5e:b4:52:26:5d:24:69:b6:c1:c8:65:
         e4:ed:cb:0a:61:46:7e:5d:3b:18:cd:24:29:08:50:81:6d:eb:
         e7:c7:c8:0e:1f:5e:9e:ff:49:e6:1d:30:35:8f:26:2d:52:43:
         c2:2e:1e:91:0f:6f:8c:34:29:6e:2a:77:cd:b9:f5:e1:d6:ca:
         58:e3:f5:48:c5:da:55:62:61:10:8b:5c:23:35:0a:72:96:f9:
         5d:65:c1:33:63:df:c6:5f:e1:92:2f:bc:84:6c:1c:b0:e3:21:
         7f:8e:fa:89:a3:df:5b:bf:06:ec:75:48:c1:04:c4:26:86:ee:
         55:c1:80:b2:05:6a:40:36:8f:7a:e5:00:b3:78:77:ca:60:30:
         65:e4:3a:5c:ff:89:53:f3:d7:a3:2c:6f:63:75:91:61:0c:2f:
         31:ac:58:2d:8c:60:c6:17:34:cb:47:90:35:30:56:bb:5f:04:
         2e:4a:d3:6d:7c:00:1a:c4:bd:1c:f5:68:55:ab:68:4d:93:47:
         1b:43:61:c3:f4:30:51:58:db:bc:0e:0d:cc:34:7e:6a:46:fa:
         74:dd:28:f8:41:64:76:50:27:4b:5b:51:8c:fb:f2:e6:5e:d4:
         5f:1b:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:35 2026 by rpki-client