Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136392e302f32342d3234203d3e20323637383538.roa
File:                     3137302e3234342e3136392e302f32342d3234203d3e20323637383538.roa (raw, json)
Hash identifier:          9CvzCvv5LPAee9ToH0Zk77WqYdozywTlclNfWQeO1zI=
Subject key identifier:   12:4C:D1:F7:5E:CB:14:95:61:D4:8A:AE:FD:33:6C:D5:B2:E5:6C:DC
Certificate issuer:       /CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Certificate serial:       1F6EDAC37E7FD3F83AA9E68A23FE3F7EAB738E78
Authority key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136392e302f32342d3234203d3e20323637383538.roa
Signing time:             Tue 06 Jan 2026 19:08:21 +0000
ROA not before:           Tue 06 Jan 2026 19:03:21 +0000
ROA not after:            Tue 05 Jan 2027 19:08:21 +0000
asID:                     267858
IP address blocks:        170.244.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6e:da:c3:7e:7f:d3:f8:3a:a9:e6:8a:23:fe:3f:7e:ab:73:8e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
        Validity
            Not Before: Jan  6 19:03:21 2026 GMT
            Not After : Jan  5 19:08:21 2027 GMT
        Subject: CN=124CD1F75ECB149561D48AAEFD336CD5B2E56CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:9c:07:73:6a:ac:e1:6f:71:6a:a3:c6:ac:
                    19:3f:a8:dd:ce:48:ef:83:3e:ef:4c:d7:d4:62:8e:
                    02:17:d8:26:b4:26:c3:09:7f:f9:43:57:e8:a1:a1:
                    4b:13:96:55:c3:ee:f9:7e:ea:31:d8:99:0f:f0:25:
                    56:c8:e2:09:b5:24:57:8c:58:2a:c9:60:66:53:9b:
                    21:5f:13:7f:46:17:a9:55:62:bc:f7:15:ea:90:5c:
                    4a:8c:b1:61:f2:12:cf:67:c0:5d:fc:2f:d0:32:aa:
                    2e:dd:c4:82:87:a2:59:c4:e3:1c:0e:a0:67:01:1c:
                    9b:52:af:9b:96:04:9e:23:cb:00:d1:b7:1e:89:8c:
                    85:f6:cb:11:d5:c4:7a:80:2d:de:9c:18:44:52:cf:
                    50:56:9e:d0:a0:8f:41:f2:b0:16:17:b5:81:be:c6:
                    5b:fd:62:a3:9c:97:24:bf:8d:4b:48:9e:70:dd:31:
                    7d:99:aa:48:2f:19:55:51:15:a5:aa:7c:ec:db:0d:
                    bb:86:0d:bc:9d:a2:94:03:12:c5:ea:aa:04:8a:27:
                    09:2f:cf:f9:f2:34:ee:45:70:47:64:ea:54:a2:64:
                    4f:8b:f5:96:69:87:77:9a:14:b3:3a:4e:aa:43:ee:
                    07:0e:21:53:e3:fd:11:f1:01:18:d8:f1:fe:85:33:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:D1:F7:5E:CB:14:95:61:D4:8A:AE:FD:33:6C:D5:B2:E5:6C:DC
            X509v3 Authority Key Identifier:
                keyid:5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136392e302f32342d3234203d3e20323637383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:bd:79:2f:dd:dd:e2:65:a0:15:ce:83:c5:b3:b2:ee:b3:69:
         26:e0:4f:59:17:82:b6:ca:69:6a:a0:4f:0a:6a:9d:b4:9a:af:
         f0:db:51:e6:47:57:bc:ec:d8:a4:a8:08:fc:7b:3f:45:ce:d6:
         2a:80:20:d9:ad:d1:24:5a:be:3d:ed:b2:78:b6:b2:2b:97:17:
         96:7c:54:47:57:be:dd:71:4a:20:e0:ad:db:d1:ab:5c:49:02:
         0a:06:40:6f:08:27:e1:85:0f:5f:ca:ee:8d:ed:d0:d9:7f:a1:
         9e:4c:b3:a1:41:7f:34:42:55:06:44:2a:27:b1:d8:c1:df:3a:
         39:79:11:d2:02:d6:e0:58:01:b7:de:ed:54:e9:92:4c:92:b7:
         25:66:d6:82:6e:aa:56:55:f9:21:03:39:05:5c:52:6d:c7:8d:
         84:0e:56:2f:ee:ba:86:81:0d:17:5b:5c:c9:46:b4:3e:24:50:
         39:c5:c8:70:ab:2c:ab:aa:00:65:6a:a6:62:8a:6b:39:81:5b:
         11:ce:fd:50:02:d9:fc:fc:f5:00:11:78:ce:21:e8:97:63:b6:
         85:21:e6:c7:10:67:93:ad:ea:7e:f4:bc:01:d1:03:37:f8:17:
         f5:7a:c7:5f:91:52:ef:a8:66:aa:30:33:1a:3f:9e:7c:f9:3e:
         a2:f9:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:17 2026 by rpki-client