Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
File:                     3134382e3231332e302e302f31362d3136203d3e203135323336.roa (raw, json)
Hash identifier:          d4PA/zacb+ttvJJX/PsM/Jb+sAKRhif3bdQlt3z15A8=
Subject key identifier:   18:9A:09:D8:06:FF:70:AD:FE:53:EE:38:62:EA:A9:B9:0B:E6:CD:A5
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       2D7BAE44C791C41B136F22CF2C55947269A7483C
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
Signing time:             Tue 06 Jan 2026 19:19:55 +0000
ROA not before:           Tue 06 Jan 2026 19:14:55 +0000
ROA not after:            Tue 05 Jan 2027 19:19:55 +0000
asID:                     15236
IP address blocks:        148.213.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7b:ae:44:c7:91:c4:1b:13:6f:22:cf:2c:55:94:72:69:a7:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Jan  6 19:14:55 2026 GMT
            Not After : Jan  5 19:19:55 2027 GMT
        Subject: CN=189A09D806FF70ADFE53EE3862EAA9B90BE6CDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:99:27:e6:29:f0:e7:81:11:63:d4:61:0e:
                    b6:1b:31:a0:ed:4d:b8:ed:f3:7f:e2:38:83:af:79:
                    50:12:33:cb:41:8a:7c:24:cc:1a:ed:6c:b4:cb:c9:
                    9d:4d:8b:37:aa:a8:59:67:7d:e3:4e:20:1a:7f:c5:
                    92:01:5d:96:2a:93:3e:19:42:91:fe:ec:69:ee:1c:
                    c1:b7:c9:2b:9e:79:58:38:cd:59:fa:8b:98:a8:52:
                    e5:5d:42:c7:23:b8:d9:9e:07:f7:4a:52:89:89:28:
                    e2:b0:98:02:86:42:e1:0e:13:da:65:db:fd:65:d0:
                    f2:86:87:c6:59:0b:96:b5:9e:65:3e:6c:be:c7:9b:
                    c0:55:81:fa:1e:aa:f7:be:a3:6e:6f:8d:4c:dd:3e:
                    ed:0e:e0:13:2d:be:99:eb:78:84:86:f5:bb:77:69:
                    4e:f3:16:26:d9:52:7e:7f:6c:90:fa:aa:e3:d5:ca:
                    b3:65:41:a4:8a:63:00:7a:23:16:83:34:ce:f9:68:
                    ac:b8:f2:25:7f:8f:3c:50:7c:c0:ec:66:bf:8c:83:
                    27:87:51:6e:1d:ce:ec:fd:cd:6e:88:7e:cf:6f:07:
                    96:f3:23:4b:09:eb:5f:3a:f6:b9:14:c1:bd:c8:f1:
                    01:d4:fb:92:53:c1:88:15:6a:27:b0:ce:21:5f:09:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9A:09:D8:06:FF:70:AD:FE:53:EE:38:62:EA:A9:B9:0B:E6:CD:A5
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:76:fe:d2:55:39:66:f2:6d:ee:3f:1f:a3:f3:a1:f4:56:37:
         1b:e7:d8:79:59:81:97:2b:f5:95:03:3e:23:3d:e7:2f:35:82:
         d0:17:c3:6a:00:09:0c:78:86:b3:7c:51:31:81:4c:40:7d:2d:
         2e:b9:9a:39:e2:f8:61:a2:20:8a:9c:12:2b:50:f8:3f:fc:a3:
         da:9d:eb:fe:c1:65:70:7c:35:4e:8c:60:d0:2e:c0:53:4d:d2:
         65:86:df:b3:0f:d1:9d:0a:34:b6:d1:c6:4b:7b:b1:0e:c8:cf:
         90:f9:16:03:16:0f:27:6a:11:18:ec:45:56:6f:dd:bf:9a:62:
         4c:a7:39:d9:60:8a:de:cf:52:d3:4a:13:d6:2e:e9:3f:1c:e2:
         58:b2:1f:37:e6:d8:1c:67:be:1d:3c:34:2c:80:34:34:e0:fe:
         9f:9b:fa:61:d4:4f:0f:e0:61:a4:5c:34:b5:99:6e:a2:4b:1c:
         01:0f:6c:fb:17:03:4f:b0:cb:01:d7:26:b1:0e:61:37:df:47:
         ae:dc:b1:4a:4a:bf:68:d3:61:90:a1:82:37:0b:0a:e4:06:80:
         94:a3:af:33:e9:76:f1:7b:25:5e:7b:f8:e9:ff:1e:2f:ff:b6:
         14:f5:17:5e:a4:d0:9b:04:8c:9e:09:9e:e0:9a:8a:e9:bc:ce:
         04:78:2f:11
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIULXuuRMeRxBsTbyLPLFWUcmmnSDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZFRENDRUY0QTU2QkMwMUI5MUZGM0NERTg4NDAxQ0M2
RkFFREE4OTAeFw0yNjAxMDYxOTE0NTVaFw0yNzAxMDUxOTE5NTVaMDMxMTAvBgNV
BAMTKDE4OUEwOUQ4MDZGRjcwQURGRTUzRUUzODYyRUFBOUI5MEJFNkNEQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLJkn5inw54ERY9RhDrYbMaDt
Tbjt83/iOIOveVASM8tBinwkzBrtbLTLyZ1NizeqqFlnfeNOIBp/xZIBXZYqkz4Z
QpH+7GnuHMG3ySueeVg4zVn6i5ioUuVdQscjuNmeB/dKUomJKOKwmAKGQuEOE9pl
2/1l0PKGh8ZZC5a1nmU+bL7Hm8BVgfoeqve+o25vjUzdPu0O4BMtvpnreISG9bt3
aU7zFibZUn5/bJD6quPVyrNlQaSKYwB6IxaDNM75aKy48iV/jzxQfMDsZr+MgyeH
UW4dzuz9zW6Ifs9vB5bzI0sJ61869rkUwb3I8QHU+5JTwYgVaiewziFfCXxjAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUGJoJ2Ab/cK3+U+44YuqpuQvmzaUwHwYDVR0j
BBgwFoAUj+3M70pWvAG5H/PN6IQBzG+u2okwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REMwQkEwMDc3Nzk4RTY2QjM0RDhFQjU3NzA4ODNCQjAz
NjIyMDBDODBCNjAyMTlCRUIxNzMxQkYwOUEzNTFBLzAvOEZFRENDRUY0QTU2QkMw
MUI5MUZGM0NERTg4NDAxQ0M2RkFFREE4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkVEQ0NFRjRBNTZCQzAxQjkx
RkYzQ0RFODg0MDFDQzZGQUVEQTg5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRDMEJBMDA3Nzc5OEU2NkIzNEQ4RUI1NzcwODgzQkIwMzYyMjAwQzgw
QjYwMjE5QkVCMTczMUJGMDlBMzUxQS8wLzMxMzQzODJlMzIzMTMzMmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzUzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCU1TANBgkq
hkiG9w0BAQsFAAOCAQEAeHb+0lU5ZvJt7j8fo/Oh9FY3G+fYeVmBlyv1lQM+Iz3n
LzWC0BfDagAJDHiGs3xRMYFMQH0tLrmaOeL4YaIgipwSK1D4P/yj2p3r/sFlcHw1
Toxg0C7AU03SZYbfsw/RnQo0ttHGS3uxDsjPkPkWAxYPJ2oRGOxFVm/dv5piTKc5
2WCK3s9S00oT1i7pPxziWLIfN+bYHGe+HTw0LIA0NOD+n5v6YdRPD+BhpFw0tZlu
okscAQ9s+xcDT7DLAdcmsQ5hN99HrtyxSkq/aNNhkKGCNwsK5AaAlKOvM+l28Xsl
Xnv46f8eL/+2FPUXXqTQmwSMngme4JqK6bzOBHgvEQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:08:24 2026 by rpki-client