Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa
File:                     3134382e3231332e36342e302f32302d3230203d3e203135323336.roa (raw, json)
Hash identifier:          6oZjmwZ77sBqI6D95r1kazgDtUNWlPQehWmltixScPE=
Subject key identifier:   92:C8:47:9A:91:44:61:4F:6E:A3:C1:D5:51:95:9F:0D:7F:BD:DB:C7
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       4055EB2575385CF9D662EBA57AFAF98AE1BCD31B
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa
Signing time:             Tue 06 Jan 2026 19:19:57 +0000
ROA not before:           Tue 06 Jan 2026 19:14:57 +0000
ROA not after:            Tue 05 Jan 2027 19:19:57 +0000
asID:                     15236
IP address blocks:        148.213.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:55:eb:25:75:38:5c:f9:d6:62:eb:a5:7a:fa:f9:8a:e1:bc:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Jan  6 19:14:57 2026 GMT
            Not After : Jan  5 19:19:57 2027 GMT
        Subject: CN=92C8479A9144614F6EA3C1D551959F0D7FBDDBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:95:74:27:7f:52:2e:36:8b:da:98:31:8f:
                    5b:d8:c2:44:ac:e6:01:31:9b:4e:f4:4b:4b:f3:fa:
                    98:94:9b:bd:15:bf:46:58:8b:5a:10:08:85:14:ad:
                    8b:cf:76:c5:b7:f0:98:08:e9:b9:df:8d:0c:48:a5:
                    f0:1f:fc:93:c3:09:66:eb:fd:29:1e:bc:12:04:76:
                    02:6d:4a:26:1f:a0:e3:85:c5:a8:44:ad:f4:31:61:
                    9e:f9:6d:e2:1b:9e:9e:88:52:e4:00:6b:08:c9:2f:
                    4c:a2:14:e9:54:a7:98:b3:15:ce:a6:3b:1c:f4:00:
                    30:f1:65:3e:4e:f5:ba:42:ef:87:f8:b3:47:ef:91:
                    3e:fb:fa:a4:cb:ef:15:41:ee:f5:8c:7f:e7:d3:aa:
                    dc:90:2c:4b:4a:5f:46:6d:df:c6:ed:14:86:7a:44:
                    27:d0:dc:9c:4e:69:a8:60:c8:b0:5d:50:08:1e:d5:
                    6a:68:6e:df:03:81:7d:65:8e:3f:72:27:3c:b2:92:
                    0b:2e:6e:99:0c:03:34:24:90:17:f2:7f:78:df:9a:
                    b2:13:bd:18:ab:c4:64:c5:44:08:02:80:5f:19:7a:
                    90:a1:62:f8:aa:eb:0c:ce:d9:9b:7d:21:bb:9f:0a:
                    32:d3:75:a6:58:27:eb:6d:6e:fc:46:a0:93:ec:3d:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:47:9A:91:44:61:4F:6E:A3:C1:D5:51:95:9F:0D:7F:BD:DB:C7
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:b2:3d:67:bf:d8:82:1a:0d:58:c2:73:87:ae:f9:72:83:
         ea:27:d3:f4:6d:9f:5f:89:2e:f8:61:d6:73:5d:b4:98:10:15:
         d6:51:ae:f1:a1:0c:d1:11:4a:ea:38:47:e9:a0:6b:10:5c:f2:
         2c:ec:f3:44:2b:06:06:96:7a:ff:b5:19:52:e4:8e:eb:a9:cf:
         4e:fa:b5:e1:ab:65:b2:4b:51:5e:c3:d9:79:52:ee:dd:68:42:
         b7:f0:6e:7e:45:01:7b:b7:6a:51:fe:b4:95:eb:14:e3:62:66:
         65:ec:9b:95:d8:19:c5:b5:cb:cc:4d:66:89:b5:f8:e0:db:9f:
         cc:17:ed:9d:a1:38:70:0f:04:8a:87:5c:5e:5f:e1:03:f9:f5:
         5d:4e:42:5f:c5:e2:5f:66:f0:be:5e:17:0e:8e:92:2e:5a:be:
         2b:02:3f:cb:d3:4d:da:11:de:9e:ee:a7:27:6f:7d:2c:d5:c5:
         a0:c1:cf:fb:c7:dd:82:06:5d:b4:0d:8f:77:2b:2e:d0:e1:dc:
         e0:15:9f:7a:73:9a:86:f9:97:65:df:18:98:ca:14:69:c6:ac:
         c1:97:b0:98:7b:01:d7:11:2b:be:bc:1d:93:48:2b:0b:03:c1:
         08:a6:cd:ac:c8:49:70:92:4f:a6:5e:69:f8:58:97:2d:ec:64:
         3e:0c:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:07:50 2026 by rpki-client