Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa
File:                     3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa (raw, json)
Hash identifier:          21ZKv6MNH35HnZ3Eth4YYzRk/+yAW4ZN+TAkDGTSrbE=
Subject key identifier:   47:3A:A2:87:9A:5A:A2:43:D5:67:C2:6E:C9:77:1A:34:50:7A:E3:43
Certificate issuer:       /CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Certificate serial:       27E70BCC757988A186ED6352B94E7394CC2459C0
Authority key identifier: 39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa
Signing time:             Tue 06 Jan 2026 19:33:17 +0000
ROA not before:           Tue 06 Jan 2026 19:28:17 +0000
ROA not after:            Tue 05 Jan 2027 19:33:17 +0000
asID:                     264673
IP address blocks:        168.181.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e7:0b:cc:75:79:88:a1:86:ed:63:52:b9:4e:73:94:cc:24:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
        Validity
            Not Before: Jan  6 19:28:17 2026 GMT
            Not After : Jan  5 19:33:17 2027 GMT
        Subject: CN=473AA2879A5AA243D567C26EC9771A34507AE343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:46:9e:57:50:85:9a:0d:15:0f:a0:dd:b0:
                    c7:ac:d9:0d:6b:c0:bd:85:80:5a:06:cd:18:2b:49:
                    87:7e:63:3b:fe:cd:19:fa:33:b0:04:22:57:dd:ca:
                    87:d8:63:77:fc:0f:f8:92:84:b1:c9:73:15:9c:bb:
                    ce:96:a1:8d:bf:8b:91:15:28:8c:fe:d6:63:f6:3b:
                    e9:f8:e6:c1:5d:bc:8a:50:9c:b6:64:f7:0f:11:d1:
                    16:f5:36:1d:05:7b:72:53:5a:c9:f4:bc:13:44:c4:
                    7d:a8:9e:ed:e0:4d:52:1c:31:0c:73:3d:cc:9b:6e:
                    7c:d0:7a:cf:36:bb:de:d8:19:e2:70:ed:01:97:f1:
                    ac:8f:ad:58:d1:89:aa:89:06:6e:1e:2d:7b:67:e1:
                    d7:46:42:de:60:a0:15:fe:d3:0e:65:a0:cd:f6:8e:
                    87:61:cd:8a:a1:2b:9c:13:ab:d2:0e:37:ed:c0:7a:
                    5d:7e:b4:e0:f1:8d:6a:bf:53:c1:43:51:25:85:da:
                    43:22:3e:4e:7e:bb:55:18:d3:75:2a:70:eb:d8:ae:
                    c9:2a:4c:0b:f6:47:db:fb:c2:4f:fb:c9:e7:94:ad:
                    c6:73:a2:cd:b1:b1:8f:45:7a:07:27:2d:ec:c7:3b:
                    a7:ff:cb:81:43:67:53:0a:e3:53:68:e9:54:4d:40:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:A2:87:9A:5A:A2:43:D5:67:C2:6E:C9:77:1A:34:50:7A:E3:43
            X509v3 Authority Key Identifier:
                keyid:39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:f9:87:d6:df:2a:d4:11:43:1d:55:71:13:0c:7c:5c:07:
         34:f1:d5:f5:57:f8:49:d1:b9:fc:55:49:84:02:00:6c:c7:26:
         2f:9a:06:29:84:20:10:28:76:f1:f7:75:3c:16:4c:e8:2a:7f:
         64:bc:90:91:d8:e4:2f:46:13:75:8f:f2:ec:2d:4b:f9:59:ef:
         36:53:13:99:8c:74:09:aa:77:75:81:29:e0:68:26:e2:a6:67:
         66:06:25:e3:28:8d:a5:e3:b8:89:dc:07:64:eb:1f:df:be:59:
         de:34:12:45:ab:8f:65:b3:b5:ab:4e:5b:ac:d9:bb:93:47:00:
         31:2c:74:77:d3:53:19:d4:ac:9f:05:5b:f7:12:2c:c6:71:fb:
         d9:e1:c1:12:9b:eb:f6:29:12:fb:6e:60:c1:b1:f9:2c:a0:63:
         65:a2:aa:6f:af:b9:e8:97:60:96:ea:45:4b:11:32:74:18:23:
         cd:50:ec:45:eb:4f:6d:12:4f:79:87:c1:db:ad:87:c4:14:0e:
         50:82:fa:27:3f:00:41:85:9a:04:5e:15:27:70:26:65:4b:e3:
         43:c8:52:10:13:66:89:ec:c2:d9:88:90:f0:53:53:bc:a5:f9:
         4d:23:3d:26:af:af:5d:97:57:9a:98:47:01:7c:14:c6:9f:f0:
         4d:a0:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:28:59 2026 by rpki-client