Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
File:                     3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa (raw, json)
Hash identifier:          /Cx1YkvsEhR6G/KZBQB+HKNkZ5e8oVBKpDX0Q/NB60U=
Subject key identifier:   53:97:F9:CF:DE:67:36:58:58:9F:02:29:C2:51:30:59:4E:CC:8F:02
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       047D5A316CA44E156676C964EC6F32206FCA7443
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
Signing time:             Tue 06 Jan 2026 19:19:55 +0000
ROA not before:           Tue 06 Jan 2026 19:14:55 +0000
ROA not after:            Tue 05 Jan 2027 19:19:55 +0000
asID:                     15236
IP address blocks:        148.213.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:5a:31:6c:a4:4e:15:66:76:c9:64:ec:6f:32:20:6f:ca:74:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Jan  6 19:14:55 2026 GMT
            Not After : Jan  5 19:19:55 2027 GMT
        Subject: CN=5397F9CFDE673658589F0229C25130594ECC8F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:31:a3:37:71:f3:9a:c9:c6:9b:a8:d1:56:
                    9a:33:54:8d:f3:7d:38:ac:5a:ed:4a:bf:5c:65:2f:
                    97:4b:38:af:89:06:99:fe:21:10:e0:b2:92:f2:93:
                    0f:57:cd:21:14:53:de:c1:79:e4:39:87:8b:c9:96:
                    08:d7:2f:9d:f9:bc:5d:22:7d:9b:63:ee:0a:10:c2:
                    72:3e:dc:1d:02:4a:ed:e2:15:d2:08:eb:4c:4a:70:
                    62:0e:05:49:d8:82:e2:80:2d:07:ec:16:f0:56:52:
                    fa:1d:cc:b3:8c:f0:45:29:47:74:33:89:39:6d:b0:
                    21:17:c3:b1:db:6f:7e:e0:44:fe:c3:4a:8b:f0:db:
                    94:f2:50:80:b0:7e:33:b1:cd:0e:d6:9e:cd:b1:b2:
                    01:56:2c:ff:ce:50:cb:24:29:ae:41:91:ba:b7:e9:
                    61:a1:a0:47:fb:81:ed:6d:61:be:da:6d:75:26:49:
                    0b:7e:71:3a:55:b2:39:ac:1a:3f:81:67:c9:47:84:
                    ca:54:d4:71:95:c0:aa:8f:f6:1e:e2:18:f7:01:66:
                    1d:b2:b2:6e:af:3f:06:d8:ba:97:5c:1d:e2:2b:28:
                    f2:29:7a:ef:3f:66:d0:78:2c:90:79:8d:4e:4c:32:
                    6c:4f:b3:7d:55:65:c4:53:16:12:43:97:2b:6a:ce:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:97:F9:CF:DE:67:36:58:58:9F:02:29:C2:51:30:59:4E:CC:8F:02
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:84:fe:8d:08:d3:82:a0:df:38:af:e8:53:f1:c7:e7:e3:
         bd:57:85:3d:ea:3f:37:90:27:5f:d2:44:fc:d4:45:33:51:06:
         dd:34:01:6a:59:c0:a7:f8:70:b7:0e:81:24:f4:7c:f6:9d:39:
         fe:6c:57:07:0a:f5:9b:94:49:29:7d:d4:8b:ba:33:4b:49:bc:
         22:9d:98:bf:7b:c2:10:40:9b:44:96:08:58:69:6f:87:a5:b4:
         9d:7c:cb:63:97:73:ae:69:27:03:2e:5c:28:f3:d1:94:68:a7:
         67:b1:fc:6d:4a:eb:c2:b9:74:d0:75:ec:8e:6a:62:46:c5:25:
         f4:70:4c:a6:d7:40:eb:90:59:61:ae:f7:4f:14:47:42:ba:4c:
         37:07:fc:d9:3d:33:56:cc:28:b5:6e:62:58:ff:38:03:20:8a:
         97:36:8b:ac:a5:ff:6a:ae:1e:65:8c:86:2b:83:fd:0e:57:8b:
         77:df:7b:6f:4b:a6:df:24:6a:7c:71:4d:22:97:2d:d8:6b:43:
         8d:f0:bd:81:8d:89:2d:9f:59:af:4d:5e:86:b0:7b:92:e9:60:
         80:89:c0:86:49:52:f6:75:33:93:59:67:aa:f4:8f:4f:b6:d0:
         9d:8c:d9:9f:f0:a2:2e:81:8a:0f:80:51:7a:18:e2:1f:41:3c:
         13:79:17:5e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBH1aMWykThVmdslk7G8yIG/KdEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZFRENDRUY0QTU2QkMwMUI5MUZGM0NERTg4NDAxQ0M2
RkFFREE4OTAeFw0yNjAxMDYxOTE0NTVaFw0yNzAxMDUxOTE5NTVaMDMxMTAvBgNV
BAMTKDUzOTdGOUNGREU2NzM2NTg1ODlGMDIyOUMyNTEzMDU5NEVDQzhGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xTGjN3HzmsnGm6jRVpozVI3z
fTisWu1Kv1xlL5dLOK+JBpn+IRDgspLykw9XzSEUU97BeeQ5h4vJlgjXL535vF0i
fZtj7goQwnI+3B0CSu3iFdII60xKcGIOBUnYguKALQfsFvBWUvodzLOM8EUpR3Qz
iTltsCEXw7Hbb37gRP7DSovw25TyUICwfjOxzQ7Wns2xsgFWLP/OUMskKa5Bkbq3
6WGhoEf7ge1tYb7abXUmSQt+cTpVsjmsGj+BZ8lHhMpU1HGVwKqP9h7iGPcBZh2y
sm6vPwbYupdcHeIrKPIpeu8/ZtB4LJB5jU5MMmxPs31VZcRTFhJDlytqztVvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUU5f5z95nNlhYnwIpwlEwWU7MjwIwHwYDVR0j
BBgwFoAUj+3M70pWvAG5H/PN6IQBzG+u2okwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REMwQkEwMDc3Nzk4RTY2QjM0RDhFQjU3NzA4ODNCQjAz
NjIyMDBDODBCNjAyMTlCRUIxNzMxQkYwOUEzNTFBLzAvOEZFRENDRUY0QTU2QkMw
MUI5MUZGM0NERTg4NDAxQ0M2RkFFREE4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkVEQ0NFRjRBNTZCQzAxQjkx
RkYzQ0RFODg0MDFDQzZGQUVEQTg5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRDMEJBMDA3Nzc5OEU2NkIzNEQ4RUI1NzcwODgzQkIwMzYyMjAwQzgw
QjYwMjE5QkVCMTczMUJGMDlBMzUxQS8wLzMxMzQzODJlMzIzMTMzMmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMTM1MzIzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlNWA
MA0GCSqGSIb3DQEBCwUAA4IBAQBLEYT+jQjTgqDfOK/oU/HH5+O9V4U96j83kCdf
0kT81EUzUQbdNAFqWcCn+HC3DoEk9Hz2nTn+bFcHCvWblEkpfdSLujNLSbwinZi/
e8IQQJtElghYaW+HpbSdfMtjl3OuaScDLlwo89GUaKdnsfxtSuvCuXTQdeyOamJG
xSX0cEym10DrkFlhrvdPFEdCukw3B/zZPTNWzCi1bmJY/zgDIIqXNouspf9qrh5l
jIYrg/0OV4t333tvS6bfJGp8cU0ily3Ya0ON8L2BjYktn1mvTV6GsHuS6WCAicCG
SVL2dTOTWWeq9I9PttCdjNmf8KIugYoPgFF6GOIfQTwTeRde
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:06 2026 by rpki-client