Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          O/HLAabmh4Zlw4kKxD8AgbX/7wJp9LmkPhIy9xJTUTE=
Subject key identifier:   42:CC:6E:A5:14:D8:92:7B:2E:57:46:B1:A2:36:C2:E4:71:D4:24:D9
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       37AD249C77A90ED2B4A8A853054AA67FC993D9AE
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:00 +0000
ROA not before:           Tue 06 Jan 2026 18:56:00 +0000
ROA not after:            Tue 05 Jan 2027 19:01:00 +0000
asID:                     28024
IP address blocks:        161.138.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:24:9c:77:a9:0e:d2:b4:a8:a8:53:05:4a:a6:7f:c9:93:d9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:00 2026 GMT
            Not After : Jan  5 19:01:00 2027 GMT
        Subject: CN=42CC6EA514D8927B2E5746B1A236C2E471D424D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:3b:9f:55:89:cc:16:ff:cf:4b:b2:48:3b:
                    f2:bb:10:08:1b:91:b5:d3:3f:50:85:ae:2f:83:0f:
                    65:3c:27:83:89:5f:c5:43:a4:64:5b:73:87:26:42:
                    ec:45:78:09:a8:95:1e:91:2f:40:d8:1c:84:bc:c5:
                    25:d0:c3:2f:04:f6:a4:27:b8:c4:9e:c8:20:5f:d4:
                    bf:05:e5:cd:8c:de:22:8a:ee:d8:55:d7:9a:27:50:
                    77:43:30:d1:9d:65:7b:0d:c4:d3:95:7a:e4:4d:9b:
                    2e:61:23:83:7a:cf:b2:8b:0d:ff:67:44:2c:0b:1d:
                    3f:9c:b8:f1:e6:2f:6a:f8:de:32:06:f9:2b:04:bc:
                    1f:07:10:6b:47:4f:8b:cd:15:90:a6:34:8e:be:eb:
                    66:b2:c4:23:bd:1b:ab:8c:a5:21:53:b6:d9:6b:08:
                    ff:d5:56:61:1e:0b:ce:fd:91:b6:9a:60:70:67:f5:
                    12:b5:dd:64:eb:d8:18:0e:4b:ce:24:cf:7a:1c:eb:
                    1a:4a:f0:23:9f:da:04:4b:cc:87:a6:49:2e:3e:06:
                    6f:fa:0b:ec:1c:a2:f5:3e:a5:b6:3e:33:bf:b5:21:
                    14:0c:40:70:97:d7:4a:20:7f:e1:a2:bf:b4:99:a4:
                    06:1f:17:54:83:a5:4b:a1:5d:2b:ba:27:03:0e:16:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CC:6E:A5:14:D8:92:7B:2E:57:46:B1:A2:36:C2:E4:71:D4:24:D9
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:bb:2f:33:51:56:43:ef:51:b8:8b:6c:93:41:c8:13:46:
         73:c3:ce:e6:dd:c8:96:27:2e:61:c3:86:f5:7b:55:26:64:12:
         53:63:fa:46:0f:5e:b4:5f:4a:a6:57:9a:63:04:ee:dc:3f:7f:
         66:3b:75:38:6e:23:3b:28:82:b1:f5:4d:1f:db:e3:5f:6c:a4:
         45:89:fb:e3:f2:48:66:ea:f7:9b:6e:ab:1b:66:48:6e:1f:9e:
         f1:fc:6a:72:05:8f:d2:2a:0e:49:05:e2:c3:bb:68:cf:af:77:
         b9:11:1d:33:18:9f:f5:b0:ff:c9:41:92:e3:e4:97:a4:a1:8f:
         52:26:38:ce:16:67:d5:e7:4e:01:27:00:e1:b5:e3:bf:f4:62:
         cf:20:f5:ed:98:a5:45:37:df:ba:2c:58:0d:0d:4e:aa:1a:20:
         ad:5e:1e:0f:2b:1c:4e:d9:bf:ed:56:c8:ef:74:18:3d:5d:19:
         40:19:b4:93:9e:27:82:ed:bf:1d:8b:a3:59:70:b1:73:9b:54:
         40:1d:6e:0d:7c:b4:84:86:75:c2:cc:df:24:5c:42:19:f0:d3:
         99:25:a9:ba:ea:8e:73:3e:14:9b:1f:4f:e4:0a:ab:ce:da:8d:
         bb:b7:92:b6:e2:52:49:6a:6d:8d:1b:13:9e:de:a7:34:19:b4:
         34:59:e7:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN60knHepDtK0qKhTBUqmf8mT2a4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNjAxMDYxODU2MDBaFw0yNzAxMDUxOTAxMDBaMDMxMTAvBgNV
BAMTKDQyQ0M2RUE1MTREODkyN0IyRTU3NDZCMUEyMzZDMkU0NzFENDI0RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvjufVYnMFv/PS7JIO/K7EAgb
kbXTP1CFri+DD2U8J4OJX8VDpGRbc4cmQuxFeAmolR6RL0DYHIS8xSXQwy8E9qQn
uMSeyCBf1L8F5c2M3iKK7thV15onUHdDMNGdZXsNxNOVeuRNmy5hI4N6z7KLDf9n
RCwLHT+cuPHmL2r43jIG+SsEvB8HEGtHT4vNFZCmNI6+62ayxCO9G6uMpSFTttlr
CP/VVmEeC879kbaaYHBn9RK13WTr2BgOS84kz3oc6xpK8COf2gRLzIemSS4+Bm/6
C+wcovU+pbY+M7+1IRQMQHCX10ogf+Giv7SZpAYfF1SDpUuhXSu6JwMOFqfLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQsxupRTYknsuV0axojbC5HHUJNkwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzYzMTJlMzEzMzM4MmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzIzODMwMzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBqGKQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmX27LzNRVkPvUbiLbJNByBNGc8PO5t3IlicuYcOG
9XtVJmQSU2P6Rg9etF9KpleaYwTu3D9/Zjt1OG4jOyiCsfVNH9vjX2ykRYn74/JI
Zur3m26rG2ZIbh+e8fxqcgWP0ioOSQXiw7toz693uREdMxif9bD/yUGS4+SXpKGP
UiY4zhZn1edOAScA4bXjv/RizyD17ZilRTffuixYDQ1OqhogrV4eDyscTtm/7VbI
73QYPV0ZQBm0k54ngu2/HYujWXCxc5tUQB1uDXy0hIZ1wszfJFxCGfDTmSWpuuqO
cz4Umx9P5AqrztqNu7eStuJSSWptjRsTnt6nNBm0NFnncw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:14 2026 by rpki-client