Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/3135372e3235332e302e302f31362d3234203d3e2033363033.roa
File:                     3135372e3235332e302e302f31362d3234203d3e2033363033.roa (raw, json)
Hash identifier:          TJ/+v/97faU6NiKl/paGEJX4Ta3kEGrNhPt4QHaxWFY=
Subject key identifier:   F5:61:98:45:98:25:A2:EB:AC:FB:A4:EF:F3:CC:39:E2:E6:90:52:E6
Certificate issuer:       /CN=B0292ED2ED57841F24F3EF9EECC9946356474634
Certificate serial:       46E0D09A2E9CA3E2E2641A53A42C86836D1690EE
Authority key identifier: B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/3135372e3235332e302e302f31362d3234203d3e2033363033.roa
Signing time:             Tue 06 Jan 2026 20:48:51 +0000
ROA not before:           Tue 06 Jan 2026 20:43:51 +0000
ROA not after:            Tue 05 Jan 2027 20:48:51 +0000
asID:                     3603
IP address blocks:        157.253.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e0:d0:9a:2e:9c:a3:e2:e2:64:1a:53:a4:2c:86:83:6d:16:90:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0292ED2ED57841F24F3EF9EECC9946356474634
        Validity
            Not Before: Jan  6 20:43:51 2026 GMT
            Not After : Jan  5 20:48:51 2027 GMT
        Subject: CN=F56198459825A2EBACFBA4EFF3CC39E2E69052E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:e5:47:7c:9e:29:d1:fd:56:9d:27:d7:ca:
                    38:dd:9c:39:5b:9a:20:21:b6:77:ca:bd:66:0c:ee:
                    b9:89:6b:c1:f5:22:88:f1:c2:65:e9:ae:1d:88:cc:
                    94:22:90:e1:25:f6:06:42:d5:12:74:6c:18:e0:84:
                    d5:34:58:bf:5c:a5:02:4b:72:7c:54:f8:bd:f3:7f:
                    d9:78:30:dd:02:4f:25:9b:0d:98:9a:25:f8:93:00:
                    63:48:42:48:cb:ab:4c:cb:29:29:2b:34:60:21:d3:
                    f9:93:18:1d:de:a6:e7:3f:15:7a:f3:28:a9:78:21:
                    4e:f0:dd:cd:a9:13:ba:26:d4:5f:79:fa:c6:55:c9:
                    31:5a:1b:45:db:46:55:6e:8f:f4:c4:d7:a5:c9:43:
                    d3:f7:14:f1:13:e4:60:4b:23:d2:da:fe:a0:27:a8:
                    85:04:03:8f:23:e2:c1:3d:fb:85:27:b6:15:60:49:
                    93:68:55:37:49:3e:b2:19:eb:36:3c:d5:b1:27:8a:
                    cc:4d:3d:30:60:6b:d8:6a:27:a8:a6:48:63:86:c7:
                    bd:6a:11:56:0d:25:8b:57:de:97:c8:2f:4b:c9:14:
                    46:e9:f3:b2:a4:31:95:14:b3:21:1b:02:fc:59:42:
                    b0:66:43:d5:e4:8d:79:b3:32:d7:86:df:dc:64:bf:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:98:45:98:25:A2:EB:AC:FB:A4:EF:F3:CC:39:E2:E6:90:52:E6
            X509v3 Authority Key Identifier:
                keyid:B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/3135372e3235332e302e302f31362d3234203d3e2033363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.253.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:42:7c:85:7e:d1:f4:ca:cd:43:53:3e:4c:96:2a:e2:82:
         64:08:a9:0c:2a:09:fc:88:dd:57:f6:13:6f:61:ce:ab:68:40:
         6b:08:80:92:2a:12:4e:d8:49:41:79:ad:15:7d:06:ff:09:cf:
         fe:3a:f9:16:03:01:31:69:e2:91:34:c0:20:c7:3e:b6:49:cd:
         4f:6b:b7:5e:99:44:30:2c:de:6b:98:a9:35:9c:e0:40:44:38:
         4c:31:8b:11:91:20:df:a3:ca:65:34:8f:39:3f:32:76:2a:a3:
         8b:1a:73:0c:be:81:bd:61:af:0e:e6:2f:ac:91:24:61:55:be:
         48:9a:4e:8e:35:e1:cc:ca:77:69:6b:fa:de:3c:69:82:c3:bc:
         0d:40:0f:5e:87:a0:93:7d:9b:ef:5c:61:f0:70:69:f2:bf:0a:
         c4:b1:1b:3c:5e:8d:0e:18:5a:d0:9d:29:c6:28:e3:bd:7d:4c:
         1f:1f:7b:3f:77:5c:cc:8f:a2:39:89:d5:62:94:5c:55:ec:54:
         1a:4d:79:a8:c4:f8:1a:82:26:b3:5a:93:c4:59:43:95:c7:f5:
         92:fc:0f:2f:e4:88:10:a6:b3:a2:df:d2:57:3b:9c:30:a2:92:
         fb:73:78:75:4e:60:6a:1b:2f:15:e3:9c:33:8f:2a:39:5c:d4:
         f2:4e:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:06:52 2026 by rpki-client