Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32322d3232203d3e20323635363838.roa
File:                     3138312e3137342e3232382e302f32322d3232203d3e20323635363838.roa (raw, json)
Hash identifier:          HqPe2ylORwaF336hlscMiy2MZEG1tkAUlAAu9Ax8I+M=
Subject key identifier:   59:49:1C:45:34:F2:4B:09:A5:46:6E:D0:BE:E3:59:B7:45:F7:99:39
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       2328236899FF3857A71E93CBFA4CE93AC01C5F35
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32322d3232203d3e20323635363838.roa
Signing time:             Fri 06 Feb 2026 16:29:23 +0000
ROA not before:           Fri 06 Feb 2026 16:24:23 +0000
ROA not after:            Fri 05 Feb 2027 16:29:23 +0000
asID:                     265688
IP address blocks:        181.174.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:23:68:99:ff:38:57:a7:1e:93:cb:fa:4c:e9:3a:c0:1c:5f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Feb  6 16:24:23 2026 GMT
            Not After : Feb  5 16:29:23 2027 GMT
        Subject: CN=59491C4534F24B09A5466ED0BEE359B745F79939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:a5:ec:a9:bc:51:3f:90:ff:ad:5d:b6:64:
                    83:b8:99:52:e4:8c:b7:a9:54:62:26:99:d0:ac:e1:
                    55:48:1b:ce:1d:8b:d2:09:66:2b:90:32:d6:4a:6f:
                    15:91:49:e1:85:99:48:91:74:dc:e0:d9:89:2f:44:
                    0b:a6:d0:1d:59:e8:81:40:e7:bb:24:c5:72:1a:c3:
                    af:59:46:17:ab:93:8b:a4:37:87:87:b2:5f:b0:e2:
                    f8:2e:3f:8a:b1:e4:42:f8:25:c1:8a:6f:47:fb:75:
                    14:7f:d0:e2:e1:21:03:a3:e6:79:4d:d9:22:29:79:
                    dc:2e:5a:39:6d:c0:ba:2d:2e:b6:22:3a:a1:b4:44:
                    12:ba:6a:83:30:23:3e:b0:6f:8b:26:50:a2:c1:89:
                    79:85:f5:0d:f7:4d:c9:29:e4:44:bd:81:79:04:01:
                    da:21:f6:a7:c2:5a:e6:b8:6a:69:12:d7:ed:8b:48:
                    f1:90:93:b0:f4:5d:f0:ed:9d:10:b8:2c:84:fd:dc:
                    ef:71:76:f5:73:90:aa:11:c1:a2:86:0d:8b:bd:b7:
                    a3:93:34:2b:b3:7f:2e:0b:e1:b6:fe:20:71:90:ce:
                    d7:4a:2c:7a:f8:4d:a7:79:d9:dd:0a:b2:39:3b:35:
                    a2:de:6b:07:e5:5f:71:63:03:0a:c8:92:a5:be:31:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:1C:45:34:F2:4B:09:A5:46:6E:D0:BE:E3:59:B7:45:F7:99:39
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32322d3232203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:c4:cb:ef:9b:9a:59:95:d6:6a:c2:51:ea:8c:c9:41:aa:
         b6:39:c0:bf:f8:d8:5c:59:cb:2f:a0:8d:d3:93:31:85:48:11:
         3a:46:91:4a:6c:35:d2:52:d8:de:93:ab:f2:a1:25:69:bf:cf:
         db:28:6a:04:6e:ca:ad:76:c4:d0:8d:1f:2b:8a:ac:05:f6:fb:
         78:76:a1:9e:91:58:d6:91:8a:89:81:74:1d:6f:cf:0c:df:37:
         e4:e9:1a:fa:25:38:0e:2e:54:6e:43:43:dd:fa:6d:0b:62:88:
         7b:c5:eb:b4:6b:42:8f:f8:b1:db:88:cf:46:8a:5a:c1:05:c6:
         fa:25:f7:f0:60:e3:79:d1:cd:95:32:60:7b:ce:35:5a:76:00:
         dc:6d:44:26:37:08:ff:93:db:89:f5:60:15:3e:f6:f1:86:8a:
         23:16:2f:62:3a:3e:91:cf:a1:23:34:68:8e:b5:61:e1:f5:3d:
         8e:d5:b0:07:1d:70:95:24:f1:98:57:41:38:48:6d:17:00:d5:
         9d:e2:56:69:49:89:83:b4:44:74:73:1e:9c:6b:3e:70:2d:2f:
         26:c9:d8:d1:80:05:f2:e0:ee:86:ed:94:a2:b8:bf:09:f6:e1:
         3a:21:b0:ad:7a:78:5a:d2:08:e1:f0:49:bd:d7:47:26:ce:ab:
         5b:0a:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 22:51:04 2026 by rpki-client