Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3139322e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          NaBBiFNzx/nZHCASuXrETl47q0k2mnpXAIlOpkoQiuE=
Subject key identifier:   35:36:B6:8E:AA:C6:B4:B3:BE:7C:05:25:33:39:C7:31:59:2A:0B:9B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       241497081B09E91C8B3AB867C09ED9CC734118AC
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:00:58 +0000
ROA not before:           Tue 06 Jan 2026 18:55:58 +0000
ROA not after:            Tue 05 Jan 2027 19:00:58 +0000
asID:                     28024
IP address blocks:        161.138.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:97:08:1b:09:e9:1c:8b:3a:b8:67:c0:9e:d9:cc:73:41:18:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:55:58 2026 GMT
            Not After : Jan  5 19:00:58 2027 GMT
        Subject: CN=3536B68EAAC6B4B3BE7C05253339C731592A0B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:83:a9:fa:83:0d:8c:86:3b:9b:0f:a3:9e:
                    e0:db:9b:5c:78:0b:b3:e0:86:da:45:4b:d0:d3:40:
                    4d:84:54:18:10:45:0e:c6:6c:05:17:5a:c0:16:02:
                    7b:d3:f1:eb:9d:e5:6d:46:be:2d:f1:dd:5e:09:05:
                    6d:f6:61:52:48:68:8b:32:6a:f6:f3:00:e4:4a:f1:
                    7a:6b:05:11:28:f9:74:9c:d3:0a:fc:59:88:37:52:
                    7e:32:c3:14:15:4e:37:2b:ac:02:23:1b:e9:13:9a:
                    db:1b:e6:d5:6c:d6:ff:62:05:5e:38:d8:14:be:a4:
                    a5:10:eb:3e:81:d5:02:98:4c:01:c5:e9:fa:27:0e:
                    a3:62:52:24:a4:03:3d:8f:32:f9:49:86:b8:17:c3:
                    bf:cf:e7:a5:72:de:84:c6:46:db:f7:46:a4:5d:d9:
                    9c:f1:30:41:6d:60:62:13:fc:7a:89:c6:c0:5f:a1:
                    d9:fc:ac:42:0d:e3:69:44:a3:9a:a0:70:1f:c7:f1:
                    9a:f7:e0:27:8d:26:0e:ed:f1:00:aa:3f:a3:ca:a8:
                    74:09:5c:5b:ae:35:05:50:d9:29:1b:3c:49:ac:ac:
                    71:37:6a:85:36:ff:af:67:02:46:07:01:e1:fe:6a:
                    92:d1:e3:57:1b:91:03:bf:40:5a:eb:30:18:49:72:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:B6:8E:AA:C6:B4:B3:BE:7C:05:25:33:39:C7:31:59:2A:0B:9B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:6d:6e:1e:5c:2f:87:ef:3d:a4:7c:31:b0:f6:2e:85:23:
         81:22:6e:cf:82:81:00:1e:60:0c:1d:a3:7a:6e:ee:de:3c:10:
         9a:21:16:b8:ae:ab:1a:ba:6f:7f:6b:be:12:e9:37:3a:b5:20:
         cc:0a:f9:c7:2a:e3:88:56:66:a2:ff:fe:4f:48:6f:59:2b:b0:
         eb:d1:50:d6:dc:07:6c:07:84:4b:6f:bc:c1:ca:91:64:a7:b1:
         24:b4:0e:b0:9d:42:16:12:64:83:71:c1:57:a9:46:d9:45:20:
         85:9f:c4:f7:9e:b3:1f:f1:7a:9a:18:91:2a:49:2d:33:a0:8a:
         54:43:75:be:01:20:5b:11:3a:da:42:6f:74:77:d7:34:a3:b5:
         f8:c6:2f:5c:c7:2c:7a:ce:28:3e:02:fe:80:20:3e:8d:68:72:
         7c:3f:dd:18:bc:74:d1:55:26:f8:34:b2:2e:3a:82:17:24:e9:
         ac:5f:77:fb:ee:5f:09:88:68:fd:dc:d8:4b:f8:5c:c1:ca:ab:
         af:55:6f:b8:02:a2:8e:a1:e9:06:e3:c0:98:b4:03:a4:2a:c0:
         db:b8:69:e4:7d:20:7d:44:fe:7b:60:a7:b9:fc:27:be:54:a4:
         e7:3d:04:c1:01:e5:e9:49:2d:45:a9:19:aa:e8:66:4e:ae:67:
         d1:eb:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:46 2026 by rpki-client