Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e36342e302f31382d3138203d3e203238303234.roa
File:                     3136312e35362e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          B2Fw+tdBFs1uKVeaWXdQ0qoAn4niFJTuQC35XW10XnM=
Subject key identifier:   9F:5B:C8:3E:BB:DF:C5:64:9C:F9:21:D6:6D:E8:08:FA:C6:5A:8E:97
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       4D0E433B498CFEEC3597D986BF5154A33527201D
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:10 +0000
ROA not before:           Tue 06 Jan 2026 18:56:10 +0000
ROA not after:            Tue 05 Jan 2027 19:01:10 +0000
asID:                     28024
IP address blocks:        161.56.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:43:3b:49:8c:fe:ec:35:97:d9:86:bf:51:54:a3:35:27:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:10 2026 GMT
            Not After : Jan  5 19:01:10 2027 GMT
        Subject: CN=9F5BC83EBBDFC5649CF921D66DE808FAC65A8E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:7b:e8:48:42:6a:c3:ba:13:98:7e:79:27:
                    8b:7b:cd:88:8c:84:99:52:da:33:52:ff:8a:b3:16:
                    ac:21:34:1d:00:39:47:00:77:99:e3:3b:e6:32:67:
                    49:2b:e2:89:a3:bf:03:03:77:26:1d:d6:dc:79:79:
                    83:c0:8b:d5:42:2d:f1:b6:62:d0:63:10:a8:03:3a:
                    f8:0b:c5:74:dd:b4:bc:4d:c1:12:01:93:14:41:07:
                    3a:a8:d7:76:ca:aa:f3:b1:75:41:2e:1d:d7:12:dd:
                    54:e8:f6:bc:5c:ff:00:d7:2d:24:0c:d4:52:58:b4:
                    7a:34:b6:89:24:17:d8:c0:ee:9a:35:5c:84:db:22:
                    d6:9d:ae:a5:02:91:03:11:40:da:3d:81:68:c9:36:
                    23:b5:f4:9b:e7:c2:1c:b1:da:dc:14:f0:c7:0c:18:
                    1c:53:58:ce:48:ff:0a:8a:45:28:72:97:47:6e:0b:
                    a7:2f:03:03:23:9d:27:1c:b3:6b:48:1d:44:7d:aa:
                    5d:b7:cb:b8:ff:d2:2d:98:cc:84:78:8f:65:d1:0d:
                    9c:6d:40:47:b0:11:e3:de:2f:b9:db:43:cb:da:20:
                    8f:fa:5d:62:5a:92:67:ce:e0:53:b9:76:e2:bb:03:
                    5d:42:83:75:39:6e:b1:2e:98:51:21:96:c9:3e:4f:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:C8:3E:BB:DF:C5:64:9C:F9:21:D6:6D:E8:08:FA:C6:5A:8E:97
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.56.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:fd:96:d6:fc:46:2a:e4:1c:00:5e:84:b1:37:c3:9f:12:
         a3:05:cc:12:e3:b5:d0:8f:ac:02:60:2b:3a:97:c4:f5:33:ce:
         3b:92:ef:09:9f:e4:cb:24:8e:2a:f1:a4:55:63:b2:52:21:ed:
         fc:86:87:2e:96:77:c0:0e:e8:2d:f6:fd:d2:2c:9a:bd:e9:b8:
         84:c0:15:d0:41:b1:b7:a6:db:81:de:94:ca:32:c3:68:eb:99:
         15:e7:34:87:f4:48:6f:7d:e0:dd:95:2f:be:67:54:c8:8f:2f:
         39:ec:39:3d:43:86:95:1c:62:6a:e9:d6:ae:f4:4e:d9:12:87:
         e3:ed:8c:a5:d1:62:b7:20:ae:c2:e0:43:9b:21:94:cf:fb:57:
         e3:28:40:df:fe:12:c8:6f:f2:93:17:7e:1e:41:37:a5:1d:4b:
         bb:54:4a:57:ea:37:a4:5c:3c:77:d8:ee:46:fc:76:ed:b9:b6:
         3e:f3:6f:9d:9c:86:8c:e0:23:07:6b:c2:9f:40:e7:3d:a0:04:
         b8:b3:eb:ef:0a:cf:03:98:8b:00:31:82:4f:13:a5:f9:10:7b:
         4d:5e:1e:f9:58:f8:ad:14:98:67:27:8d:d8:f9:97:ce:e6:7c:
         fb:cf:a7:a2:5e:e4:b1:7e:6e:dd:5f:2f:c8:62:1f:eb:50:34:
         d9:e1:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:37 2026 by rpki-client