Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
File:                     3133312e3136312e38352e302f32342d3234203d3e203237373831.roa (raw, json)
Hash identifier:          H8EltSl6f2Y/tJ1jknoUgw7BS2ybsM+cVJ9AU2wNM5M=
Subject key identifier:   0F:4E:8A:E7:A8:7A:09:E1:5D:A6:0A:06:C7:4B:B0:84:F5:40:17:D6
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       038DF5989BBEF32D5BEE1E4E10EFF28941287D56
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
Signing time:             Mon 16 Feb 2026 05:30:39 +0000
ROA not before:           Mon 16 Feb 2026 05:25:39 +0000
ROA not after:            Mon 15 Feb 2027 05:30:39 +0000
asID:                     27781
IP address blocks:        131.161.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8d:f5:98:9b:be:f3:2d:5b:ee:1e:4e:10:ef:f2:89:41:28:7d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Feb 16 05:25:39 2026 GMT
            Not After : Feb 15 05:30:39 2027 GMT
        Subject: CN=0F4E8AE7A87A09E15DA60A06C74BB084F54017D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:29:a7:99:04:0f:49:4f:8b:cc:1e:53:a4:
                    e5:37:85:62:98:f4:fc:f9:44:90:06:6b:54:98:c1:
                    17:2c:0f:1b:cc:e6:b4:26:21:a6:4e:55:10:f6:d5:
                    d4:7f:18:64:04:3b:12:88:eb:27:d9:10:e8:02:d2:
                    16:ab:8e:80:a7:94:f4:5c:6a:6c:4e:4e:d7:91:d6:
                    2d:a8:a6:c6:0c:01:91:b0:27:a6:a0:39:3d:93:a0:
                    a8:6f:a9:41:ab:1c:8e:2d:5b:5a:08:97:fa:d6:97:
                    ab:eb:65:fc:9f:cc:e9:18:4c:a9:eb:0a:2e:7d:63:
                    b3:2f:86:bc:c2:96:a2:bb:d6:b4:64:3d:0a:42:50:
                    78:75:9f:c4:9f:11:fa:c3:b0:a9:c0:ae:bc:cc:0e:
                    f9:0e:86:97:4b:65:26:4a:6f:b7:1c:c0:9b:b7:1e:
                    41:91:d4:ad:ff:37:43:fe:a0:1e:37:88:da:41:77:
                    7a:82:b0:af:89:99:c7:89:bb:b3:f0:d7:10:dc:e4:
                    d2:c4:80:55:73:c8:39:46:e6:72:9d:5e:fd:62:ea:
                    d1:e0:39:34:93:58:a3:12:1c:36:61:07:8a:35:f5:
                    c1:38:b6:28:61:84:8b:c3:d6:cf:62:e0:e2:e3:86:
                    56:1c:98:ed:c3:9d:a2:23:24:74:39:52:59:5a:95:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:8A:E7:A8:7A:09:E1:5D:A6:0A:06:C7:4B:B0:84:F5:40:17:D6
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:a4:06:3d:c8:41:4f:88:90:00:36:0c:0b:46:38:3d:16:
         ec:1f:2c:df:01:4c:b3:ca:55:ca:74:f1:c7:52:c8:77:b8:51:
         27:21:39:db:32:5c:01:5a:4c:86:ef:d7:f5:dd:87:24:22:37:
         00:31:e4:fb:90:b8:cd:3f:a7:d9:66:62:9a:3c:51:da:96:e9:
         a3:0a:31:36:f7:87:a4:1c:55:3b:a1:d4:b2:59:4a:dc:48:9f:
         bb:7a:7f:ff:af:6c:1d:b1:c2:3f:1f:e3:b5:0e:bc:ac:52:59:
         e9:dd:79:be:c5:85:3b:7d:67:ea:fd:2d:55:24:8a:74:5f:92:
         cc:5d:d0:d7:fb:27:7d:67:70:19:6d:86:32:30:1d:3a:65:07:
         4c:53:61:11:ae:d9:db:2c:7d:95:c1:a8:15:d5:80:c7:7e:3a:
         41:b1:ff:38:b8:fc:18:05:ab:f7:1d:68:f6:25:2b:54:ec:0f:
         a4:95:9b:70:dd:a9:a8:fa:94:7d:ee:e3:5a:da:75:aa:ce:a6:
         7d:a2:68:4c:fd:09:d3:16:43:f6:cb:d8:91:35:55:6d:ab:7f:
         cd:47:e5:82:08:4e:91:7c:b8:28:73:32:90:85:29:75:a7:91:
         cb:6d:1f:94:3f:de:ed:32:95:dd:af:75:44:b5:81:1d:44:3e:
         77:dd:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:58 2026 by rpki-client