Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa
File:                     3136312e35362e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          BsDqmTybrltol/1uBX7zcZptW6821g7LMiZ1t9G+yus=
Subject key identifier:   21:BB:4C:27:19:57:FD:D0:69:E5:30:1B:78:C9:8D:63:83:22:3C:F7
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       37CB97081C9A297837C3F12BD77ED0439D5B3088
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:00 +0000
ROA not before:           Tue 06 Jan 2026 18:56:00 +0000
ROA not after:            Tue 05 Jan 2027 19:01:00 +0000
asID:                     28024
IP address blocks:        161.56.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:97:08:1c:9a:29:78:37:c3:f1:2b:d7:7e:d0:43:9d:5b:30:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:00 2026 GMT
            Not After : Jan  5 19:01:00 2027 GMT
        Subject: CN=21BB4C271957FDD069E5301B78C98D6383223CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:79:9f:84:47:4c:a5:74:02:7b:5f:bc:ad:
                    58:fc:b3:60:58:a9:58:25:3b:b3:30:25:66:24:4e:
                    8f:c9:90:7d:aa:6d:9e:7f:52:44:9b:34:a3:38:d5:
                    e0:b7:7e:ff:06:e5:a2:99:53:51:ba:03:a7:76:d1:
                    31:11:60:4b:c2:53:ae:30:e4:9a:20:aa:86:83:d1:
                    de:67:f9:93:95:aa:62:46:61:38:65:39:c9:d0:c8:
                    a6:40:9d:8f:bd:25:56:eb:3b:12:6b:9f:c2:02:c6:
                    32:ea:05:46:6a:5a:ae:ae:d1:04:db:4a:8d:9e:64:
                    0b:1b:15:18:d9:36:49:28:84:ff:20:d4:db:57:25:
                    2b:14:b4:fa:ce:e3:33:66:0c:5d:51:bc:91:bf:ae:
                    81:0b:5f:b2:db:c4:23:f6:16:bd:ef:83:4b:4d:37:
                    16:6c:c2:56:66:5d:c1:20:6d:c0:9e:72:95:55:9e:
                    5d:50:e8:7a:4f:68:cf:9f:ba:ad:86:89:4b:63:8a:
                    1b:7d:08:15:e4:b8:14:24:5e:9d:49:50:96:49:ca:
                    43:24:68:70:d0:46:dc:c9:fc:6f:d6:2a:be:f4:9d:
                    12:31:2c:8e:53:bb:a4:e1:5f:7a:e7:84:eb:84:b6:
                    2d:83:7e:76:b3:df:50:3f:6c:02:43:ca:f6:46:05:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:4C:27:19:57:FD:D0:69:E5:30:1B:78:C9:8D:63:83:22:3C:F7
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.56.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:f0:ec:e8:38:09:39:0c:01:5a:f2:90:46:01:e2:da:b0:
         67:cb:82:0f:b8:ac:97:f3:0e:30:b9:ca:eb:d9:95:f7:0c:4a:
         e0:c1:96:ab:7f:0a:1b:50:a7:60:3d:a0:8d:0b:44:94:6b:14:
         a9:d9:75:fb:28:54:32:5d:7d:bf:bd:29:ec:87:ce:fa:1a:60:
         6a:a8:d1:6f:2a:17:e2:06:c2:c5:be:b6:b0:cc:c0:19:60:53:
         9b:fc:6a:3f:78:87:f1:4f:f0:a7:45:c9:32:8a:07:0c:4f:83:
         f1:42:e6:8c:69:a5:61:88:c7:e7:04:e7:0f:c2:27:87:40:e8:
         00:d0:63:6e:73:90:33:7d:fb:f3:e9:46:db:d3:72:6d:1e:4e:
         0c:2f:89:ba:98:ff:e4:bf:0c:de:51:3b:f8:11:42:cd:4d:73:
         84:37:dd:f7:fa:a2:d7:77:64:8e:8b:fe:6f:93:93:d1:f4:31:
         32:d9:d8:d7:5c:9f:86:b8:23:b6:df:2d:a8:44:05:ae:50:90:
         06:76:3a:b7:f1:4d:1b:83:c1:3f:47:df:6f:bb:ed:91:3f:9a:
         38:8c:a8:b6:3d:7f:1b:c9:f4:2d:98:be:1f:14:38:0f:63:73:
         0e:5a:c7:89:96:9d:fc:95:91:54:1d:70:6a:54:b2:1f:09:7b:
         3e:d2:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:59 2026 by rpki-client