Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135362e302f32332d3234203d3e20323635373635.roa
File:                     3133382e3230342e3135362e302f32332d3234203d3e20323635373635.roa (raw, json)
Hash identifier:          RNFq3c1IRqVXsAjt+S9BsQlYVJRcxNr57OObbe8QT24=
Subject key identifier:   76:A9:3E:9F:68:6C:5E:84:8F:8D:99:77:8E:1B:AA:CC:EA:AC:F1:A3
Certificate issuer:       /CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
Certificate serial:       43225531E454FEFF7D6185965A50B3FF6F768789
Authority key identifier: 6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135362e302f32332d3234203d3e20323635373635.roa
Signing time:             Mon 26 Jan 2026 15:20:00 +0000
ROA not before:           Mon 26 Jan 2026 15:15:00 +0000
ROA not after:            Mon 25 Jan 2027 15:20:00 +0000
asID:                     265765
IP address blocks:        138.204.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:55:31:e4:54:fe:ff:7d:61:85:96:5a:50:b3:ff:6f:76:87:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
        Validity
            Not Before: Jan 26 15:15:00 2026 GMT
            Not After : Jan 25 15:20:00 2027 GMT
        Subject: CN=76A93E9F686C5E848F8D99778E1BAACCEAACF1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:c1:43:fb:14:c0:ed:f5:0f:5f:0b:d2:81:
                    26:13:60:25:40:40:ee:a5:6c:a5:9d:38:90:09:84:
                    e0:8d:fd:3d:a2:a7:c4:c3:a4:df:3c:93:a3:b7:e5:
                    6e:5d:76:43:4c:b0:42:61:67:7d:68:49:29:ae:2c:
                    09:10:ec:77:5e:da:38:71:fe:73:93:83:7f:58:08:
                    ec:cc:1b:df:fd:8e:76:5a:69:75:64:67:fd:8d:15:
                    31:a1:a8:99:c9:c3:62:95:e0:03:96:d7:0a:9d:0d:
                    69:bd:73:ca:8a:e3:e3:2c:06:60:0b:61:ab:df:f3:
                    cd:2c:2c:88:00:73:f9:47:a9:7b:a7:40:ca:3f:cf:
                    16:51:bd:0f:66:3d:67:d4:20:09:49:c1:ba:71:c9:
                    e3:c8:bf:31:ec:d1:9a:85:5a:ba:a5:18:99:be:c3:
                    4b:c3:d8:62:9c:a4:c7:ab:34:f5:48:74:fd:e6:c9:
                    88:6a:7b:23:04:d3:36:b8:9d:21:92:a1:a1:8b:4d:
                    54:82:26:27:a1:3a:61:0d:ba:8d:95:0f:53:4d:4e:
                    aa:2e:86:49:9f:54:ad:8e:48:2a:18:5e:a1:43:e9:
                    89:0a:88:16:0b:fc:52:6f:47:23:16:75:e4:ff:21:
                    d0:1e:4d:38:94:56:2b:ba:20:d9:5f:6b:16:a9:0f:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:3E:9F:68:6C:5E:84:8F:8D:99:77:8E:1B:AA:CC:EA:AC:F1:A3
            X509v3 Authority Key Identifier:
                keyid:6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135362e302f32332d3234203d3e20323635373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:b9:5a:45:27:73:ad:e8:dd:c5:35:98:d8:fd:00:1f:05:
         16:43:59:ef:ee:cd:58:29:9e:5f:38:2c:eb:5c:d1:5a:c0:a8:
         21:e1:05:a4:6f:e5:94:fa:4d:1e:e2:69:1d:72:45:eb:a7:7f:
         e7:cc:60:a8:c3:b5:90:c4:f7:a6:93:a3:7f:12:56:26:71:78:
         ec:0f:c9:b0:b5:77:42:cf:f5:2c:57:7c:9d:0a:ae:00:db:04:
         a7:5e:97:73:40:cf:62:3c:e6:a0:7a:4a:dc:4c:57:92:21:c4:
         1f:02:70:03:9f:17:ee:7e:41:94:d1:e2:d4:33:fa:14:97:85:
         f1:9b:a7:94:f4:d8:79:e0:d3:97:f7:14:49:fd:ab:22:b9:dd:
         4e:15:dc:1f:d3:4e:65:d1:94:55:6a:b1:1c:aa:8c:e9:cc:71:
         8c:ed:db:5b:e4:88:8b:05:9e:c3:ff:1b:b8:db:2e:24:70:6c:
         11:4f:21:46:eb:66:af:b8:0b:d2:b2:17:45:1b:d5:3a:c1:59:
         36:25:44:e0:d7:52:0c:30:6e:2a:d8:7f:72:a1:c7:c8:1a:95:
         cd:e7:31:c1:23:b5:4a:db:bf:ab:c6:3b:83:f0:75:c4:b7:be:
         62:0d:61:a3:ec:8a:33:b8:90:2b:f8:0b:f7:98:bb:93:61:72:
         57:b4:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 02:04:51 2026 by rpki-client