Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
File:                     3136382e3132312e38342e302f32322d3234203d3e203532333938.roa (raw, json)
Hash identifier:          rz31+YR2Z+0HV9mDz+iibmduBUyWJskJyyyVQ3Pvj18=
Subject key identifier:   6F:0D:1A:EF:4F:40:A1:37:D9:49:19:91:5A:C8:16:34:BF:60:F5:F8
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       0F5A3AB482151F76AA29A39C936307558B5693F1
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
Signing time:             Tue 06 Jan 2026 19:04:39 +0000
ROA not before:           Tue 06 Jan 2026 18:59:39 +0000
ROA not after:            Tue 05 Jan 2027 19:04:39 +0000
asID:                     52398
IP address blocks:        168.121.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
                          rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:3a:b4:82:15:1f:76:aa:29:a3:9c:93:63:07:55:8b:56:93:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Jan  6 18:59:39 2026 GMT
            Not After : Jan  5 19:04:39 2027 GMT
        Subject: CN=6F0D1AEF4F40A137D94919915AC81634BF60F5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:3a:78:fd:50:cb:e8:11:1d:96:58:a5:55:
                    b3:b6:7e:75:f8:d1:07:b9:1f:9b:a0:68:e0:f7:80:
                    45:ca:a5:b6:2c:04:a5:f3:3b:e1:45:0f:9c:52:e2:
                    9f:79:bf:4f:eb:05:39:60:37:73:44:0c:45:68:20:
                    d5:a1:28:78:95:99:0f:9a:8d:37:9f:72:6c:eb:4c:
                    58:9b:15:94:97:ca:66:2e:04:57:8e:1f:02:a3:fb:
                    fd:9a:66:95:3c:c4:f3:8a:d0:75:d6:a5:6a:3d:64:
                    76:a2:1f:95:c2:22:fe:17:b0:79:0d:fa:5c:0c:1a:
                    da:f1:97:d6:c5:75:ff:4c:33:ff:f8:82:ff:99:84:
                    1b:32:b8:a6:93:68:8e:a2:e4:bf:4a:d0:ca:ba:41:
                    0f:23:c1:0e:92:6c:f3:cc:fe:5b:44:f6:be:65:b7:
                    80:38:7e:8b:aa:35:b3:de:de:be:d3:be:dd:b5:79:
                    62:8d:19:fd:9c:c7:fc:1a:72:c1:59:7a:68:a2:79:
                    d2:a8:08:bf:30:54:c0:3d:9a:31:fd:dd:27:ba:89:
                    9d:e6:89:e4:46:ab:fa:0c:be:b4:4a:aa:9b:d8:6a:
                    d1:40:1a:b1:22:73:42:d3:98:9c:96:e2:1c:ff:3f:
                    8e:68:88:6b:02:18:d0:67:f9:c6:54:15:ab:ed:f2:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:1A:EF:4F:40:A1:37:D9:49:19:91:5A:C8:16:34:BF:60:F5:F8
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:70:4c:db:f6:11:3c:89:79:8f:43:ed:88:e0:76:16:45:
         22:cf:fc:c9:df:40:ae:ec:16:af:f9:74:db:61:23:cb:a1:d4:
         30:96:5e:e8:98:3d:70:3b:ee:b8:40:ba:c8:c1:95:87:b9:e7:
         d6:ea:4a:dc:5c:09:03:79:14:12:1d:66:17:d9:66:31:fa:fa:
         71:20:c8:dc:60:a6:2e:fe:fe:a7:2e:cc:b7:26:04:1d:56:d6:
         ef:16:17:00:6f:4c:13:ff:77:3d:3d:97:49:af:72:a8:7c:21:
         da:fa:4b:0a:1f:34:df:d0:51:ad:f6:eb:67:02:ce:93:73:39:
         66:4e:7f:7f:54:a0:9d:11:15:06:cd:37:be:ea:49:da:78:b7:
         75:d5:49:77:31:37:76:3a:cc:dd:4a:d1:32:b5:86:cb:15:ca:
         1a:7c:da:d8:69:dd:84:fe:ae:bf:d3:64:95:6f:ab:18:e5:c8:
         93:dd:5a:d3:9d:a4:92:7b:35:07:2d:5d:bd:d0:b5:44:9f:4d:
         b5:e6:c9:ef:be:75:9a:da:37:8f:6d:2e:99:27:e5:f3:4c:94:
         bc:19:72:bd:2e:9f:73:4d:7b:4c:06:ba:86:ac:b5:1e:d1:d7:
         84:83:12:76:4b:13:71:a2:2c:f4:1a:cf:d9:5f:db:8f:a5:32:
         ea:dd:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:38:33 2026 by rpki-client