Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa
File:                     3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa (raw, json)
Hash identifier:          /CZsFxX53sAAzH2EvKNcLDmxlpqnTih6BxdvrJPMUaI=
Subject key identifier:   9F:62:90:1F:77:E9:30:A4:F4:24:A3:23:C3:8A:68:ED:E9:14:73:DC
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       10E338DCDC8A1F0C3531140A0A5C5669C46DB876
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa
Signing time:             Tue 06 Jan 2026 19:19:57 +0000
ROA not before:           Tue 06 Jan 2026 19:14:57 +0000
ROA not after:            Tue 05 Jan 2027 19:19:57 +0000
asID:                     15236
IP address blocks:        148.213.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:38:dc:dc:8a:1f:0c:35:31:14:0a:0a:5c:56:69:c4:6d:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Jan  6 19:14:57 2026 GMT
            Not After : Jan  5 19:19:57 2027 GMT
        Subject: CN=9F62901F77E930A4F424A323C38A68EDE91473DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:c5:7c:a9:32:9e:37:3f:e4:77:08:91:c7:
                    a8:46:a8:e7:c6:94:ae:64:ee:76:ee:48:0c:d9:82:
                    ff:c4:b6:03:2b:10:0f:fc:0f:62:67:0b:af:93:b4:
                    21:af:86:b7:85:e2:df:87:bc:ea:0d:91:87:23:c6:
                    90:44:f5:a4:19:ba:86:43:6f:c0:4f:8a:83:5a:f9:
                    1f:85:ac:c5:4e:3d:23:20:d5:36:c3:8e:e5:c6:fb:
                    73:d1:d2:69:b3:28:fd:b1:0b:4c:c4:73:2d:20:ed:
                    c4:03:3b:aa:d0:2a:34:38:86:2c:f1:d4:b7:c4:4b:
                    1d:bd:48:48:d7:54:98:36:92:da:a5:3c:1e:55:df:
                    12:0b:e1:db:b4:9a:39:c1:bb:ee:4a:cb:84:03:f5:
                    8b:da:0a:5c:fa:a1:cc:10:c4:9a:ce:4b:b9:7f:08:
                    48:23:28:c3:0e:96:c1:2b:ba:61:af:63:a0:2c:16:
                    3d:6a:e7:d0:92:85:d3:63:ad:8f:41:bd:a2:91:05:
                    d8:63:3c:15:79:aa:00:8e:43:33:36:da:19:73:84:
                    7e:c9:ac:13:01:6d:29:ca:ce:b8:72:49:c6:19:00:
                    97:ed:5a:ad:cc:ad:ab:96:ef:b5:94:fb:c6:a5:22:
                    a0:79:0b:fb:d9:26:7d:42:fe:82:39:3f:be:81:1b:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:90:1F:77:E9:30:A4:F4:24:A3:23:C3:8A:68:ED:E9:14:73:DC
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:e2:d6:51:3a:76:7d:3d:02:a7:27:45:60:fb:03:2a:89:
         7b:e6:5d:40:88:7d:a6:b4:d5:13:da:aa:af:1c:91:07:05:6a:
         91:78:5f:7e:0d:e0:3a:f2:a1:fd:a2:d8:47:00:e0:3a:f4:95:
         93:a8:24:e2:01:bf:3e:a0:ea:30:8c:fd:a2:f4:1e:59:39:b3:
         e6:f6:38:12:a5:d7:a0:46:9b:06:5e:de:d5:6f:35:ed:a4:7b:
         f8:a5:79:13:5a:7a:48:4f:f4:91:fd:58:d0:e2:57:e3:b6:46:
         e4:8e:47:d3:83:de:06:e0:4c:39:7b:48:24:b1:a0:58:24:b0:
         0b:38:ab:3a:a8:da:6f:d7:46:5d:f1:93:d9:6c:2e:72:aa:81:
         83:a8:9c:e8:cc:a1:41:96:44:08:02:e9:51:48:92:04:e5:84:
         ca:56:cf:ad:93:a3:b3:f9:96:5b:16:77:78:5c:98:df:16:3d:
         00:21:70:df:bd:f2:02:41:91:e1:53:a7:3a:c0:3f:fe:85:d4:
         04:11:53:7a:02:ef:7d:42:c2:e8:cd:20:1f:9e:16:3b:5d:f0:
         e5:81:99:bc:ee:a9:0b:4e:99:df:43:a7:18:1b:45:1a:fe:75:
         71:63:7c:ae:cf:c7:a6:46:75:79:5c:a8:1e:db:ca:62:a3:7d:
         b5:db:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:22 2026 by rpki-client