Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa
File:                     3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa (raw, json)
Hash identifier:          fsfyHhkwLVn6J51Spbf1UT8ej/1lCc6Y+5Rt/+YV554=
Subject key identifier:   7E:14:DB:65:80:76:94:69:CE:87:F5:D3:8A:CA:A5:BE:38:90:A8:A1
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       1D218576C7076C48347E55F571FE483C30CB41E6
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa
Signing time:             Tue 06 Jan 2026 19:33:04 +0000
ROA not before:           Tue 06 Jan 2026 19:28:04 +0000
ROA not after:            Tue 05 Jan 2027 19:33:04 +0000
asID:                     52320
IP address blocks:        209.127.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:21:85:76:c7:07:6c:48:34:7e:55:f5:71:fe:48:3c:30:cb:41:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Jan  6 19:28:04 2026 GMT
            Not After : Jan  5 19:33:04 2027 GMT
        Subject: CN=7E14DB6580769469CE87F5D38ACAA5BE3890A8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:63:2e:92:4a:f3:d3:b4:e5:79:f9:9b:09:
                    d3:91:c3:95:6c:0e:f7:89:b8:61:0f:ea:00:27:b6:
                    f7:8f:ab:d1:95:e6:75:f3:40:1b:e4:a9:7f:e6:7d:
                    41:9c:fb:ef:3c:c5:4b:95:6c:0f:81:a7:2a:4d:e2:
                    af:fd:98:bd:cf:56:d0:51:f7:6e:35:f6:14:75:0d:
                    b4:c4:77:f6:0d:30:16:25:a8:00:0e:8f:e7:c5:74:
                    bc:ab:a3:e0:0f:22:11:19:1e:a1:f3:3e:3f:bb:e3:
                    85:54:d9:0d:9a:01:52:ad:03:5c:f7:4b:50:61:cf:
                    ea:5c:80:45:45:32:b9:b1:34:6b:fc:85:49:a1:5d:
                    f1:5d:1d:ed:db:5c:c4:19:23:0a:19:34:7b:a4:55:
                    35:8e:7b:4f:c7:49:3a:79:3a:ba:23:6d:af:78:fc:
                    8a:a4:45:b0:a7:74:9c:2b:4d:90:a0:14:c1:86:a6:
                    69:90:c6:37:da:30:8c:b0:88:d1:29:28:e3:38:ba:
                    3b:d5:c5:7f:6d:46:43:49:c0:c4:61:7b:dd:2c:45:
                    c8:74:06:8c:eb:57:8a:b2:8a:d7:bb:b7:5c:a3:0c:
                    41:17:81:f2:f8:e1:06:7f:be:24:c3:35:af:8a:55:
                    df:ff:22:0c:cd:46:86:5e:e5:3c:4a:03:0a:39:89:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:DB:65:80:76:94:69:CE:87:F5:D3:8A:CA:A5:BE:38:90:A8:A1
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:c6:1f:c6:5b:60:13:16:31:c2:65:c8:4c:87:d8:a2:8a:
         15:4b:3a:23:71:18:8f:ee:30:bd:a9:94:6f:6f:77:82:af:ad:
         30:05:de:87:cc:66:35:e4:31:5d:42:50:3f:e1:b0:0b:8b:1a:
         c3:6d:69:a4:a5:32:8f:73:d5:37:fb:26:95:ae:97:27:5c:36:
         df:5b:e8:42:e9:1f:c2:b6:dd:f2:1e:a4:92:2e:00:d0:ab:c5:
         96:3f:4e:fa:26:ad:37:58:88:99:c1:af:ba:8e:e4:8e:57:80:
         3a:d2:e2:72:4d:30:74:6a:ac:98:9c:44:a6:30:43:98:df:d4:
         15:fe:8d:31:34:b9:7e:83:f6:5a:19:df:8c:cc:6b:a3:a4:01:
         69:bd:ce:0f:b7:01:9b:e2:4c:ce:dc:2b:1f:a9:5b:e3:d0:49:
         89:da:5d:bf:dd:0b:9b:39:ac:27:c5:43:1b:10:89:bc:68:78:
         7b:b1:90:dc:b5:95:22:44:4d:95:db:d9:4b:82:e1:00:12:23:
         ad:03:7e:78:1b:63:63:53:f6:ca:9c:17:fa:02:91:f4:c9:b7:
         8e:03:86:dc:1b:a4:f1:40:9e:29:d3:98:d3:8b:f3:a9:a5:bb:
         60:f7:1d:2d:08:d7:09:4f:fc:4e:d8:98:78:42:95:3a:4c:51:
         5c:5a:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:14:14 2026 by rpki-client