Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa
File:                     3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          Lnybd5wziyNrl/buA4T+GqQw26vKdAdgs878VxCJtQY=
Subject key identifier:   EA:F9:E1:77:6B:08:B0:7C:C1:0E:C3:66:86:D2:DE:CB:E3:5A:25:1A
Certificate issuer:       /CN=06EB671A8B5345B79ABBED3482C6BF06D3BB4300
Certificate serial:       394857A7541209A7B20A864F3C69E16A59AA400A
Authority key identifier: 06:EB:67:1A:8B:53:45:B7:9A:BB:ED:34:82:C6:BF:06:D3:BB:43:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa
Signing time:             Fri 30 Jan 2026 06:34:35 +0000
ROA not before:           Fri 30 Jan 2026 06:29:35 +0000
ROA not after:            Fri 29 Jan 2027 06:34:35 +0000
asID:                     198949
IP address blocks:        185.237.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:48:57:a7:54:12:09:a7:b2:0a:86:4f:3c:69:e1:6a:59:aa:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EB671A8B5345B79ABBED3482C6BF06D3BB4300
        Validity
            Not Before: Jan 30 06:29:35 2026 GMT
            Not After : Jan 29 06:34:35 2027 GMT
        Subject: CN=EAF9E1776B08B07CC10EC36686D2DECBE35A251A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:8a:d6:8d:ea:b7:ba:8d:95:49:1d:0d:bb:
                    b1:ef:2d:6c:b7:b6:28:99:bb:9e:ab:29:46:c1:35:
                    10:9a:7a:df:7a:e3:17:ee:7d:10:1c:01:25:f8:14:
                    5c:43:ea:40:53:95:02:7a:fd:05:47:27:46:cc:af:
                    4d:11:40:94:7a:ca:6b:7a:f5:06:d7:0c:76:30:bb:
                    56:9d:58:96:48:78:9c:5e:9a:fb:cb:c8:46:c7:6f:
                    66:88:0c:5a:64:57:c0:32:5f:70:f4:82:ae:fa:b6:
                    b0:66:23:6e:5f:f0:e3:a8:9d:2b:10:73:e2:42:ac:
                    32:f3:d8:49:ea:75:12:f3:1c:ba:53:50:5f:f8:f9:
                    21:1a:17:25:98:a1:28:cf:f1:b0:bd:9f:c8:4e:a3:
                    5c:c2:1a:12:fb:6b:47:1a:30:e1:db:f1:42:e6:5a:
                    26:18:06:9c:bd:b9:7f:9e:7b:b2:ac:c4:f5:47:eb:
                    1c:2d:16:f9:f1:20:4f:29:1a:fa:a5:e5:a9:c5:46:
                    31:89:bc:02:86:b6:27:a6:95:78:cc:bd:69:01:dc:
                    79:aa:48:7c:9a:70:4f:b0:12:6b:b6:ce:ac:8d:67:
                    95:09:b8:8b:11:16:a4:77:81:df:41:a1:7a:57:5b:
                    ea:0b:81:6d:03:06:56:00:25:51:e1:31:ca:03:ba:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:E1:77:6B:08:B0:7C:C1:0E:C3:66:86:D2:DE:CB:E3:5A:25:1A
            X509v3 Authority Key Identifier:
                keyid:06:EB:67:1A:8B:53:45:B7:9A:BB:ED:34:82:C6:BF:06:D3:BB:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06EB671A8B5345B79ABBED3482C6BF06D3BB4300.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:1d:aa:b1:e6:26:49:d7:22:a3:04:11:77:56:d5:98:c6:
         17:d9:2e:3d:fb:88:e1:65:40:78:07:e4:d1:a5:d7:0f:e3:0d:
         cf:5b:d2:a4:25:ea:e8:46:f2:99:fc:f3:8a:0f:43:3b:fc:3d:
         17:a6:27:9a:cb:24:be:28:6b:e2:5c:14:e9:c9:bd:6e:22:6f:
         1c:71:36:69:28:05:31:45:c6:3e:c7:b7:2d:04:db:2c:62:69:
         6a:d9:83:36:50:ab:fd:17:e9:34:26:ea:36:04:93:d3:3e:9d:
         b3:91:a9:6b:78:dc:e1:27:a6:c7:c0:b0:3c:af:8a:c9:2d:aa:
         69:5d:8b:a3:12:c7:8a:34:91:04:ac:b6:26:b5:7b:50:2c:23:
         1c:91:4f:b6:14:13:69:c8:17:2c:d8:cb:df:a8:70:cf:1b:a2:
         ec:03:e8:94:d5:a5:f3:dd:d2:0c:38:86:95:07:1a:8d:03:8a:
         1e:0c:ae:e7:2a:8a:7c:72:b2:ab:88:24:18:1f:fc:30:e3:1b:
         de:c9:ab:c5:bb:6d:9c:c6:fd:20:d0:3f:8c:ab:1a:bf:65:57:
         92:bd:7c:b8:dd:b9:1b:c4:50:ac:fb:8e:30:aa:59:8f:02:2b:
         31:0e:4e:38:36:7f:9e:fd:ba:7e:87:fd:f7:b8:e0:4d:f6:af:
         ea:7e:24:94
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOUhXp1QSCaeyCoZPPGnhalmqQAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZFQjY3MUE4QjUzNDVCNzlBQkJFRDM0ODJDNkJGMDZE
M0JCNDMwMDAeFw0yNjAxMzAwNjI5MzVaFw0yNzAxMjkwNjM0MzVaMDMxMTAvBgNV
BAMTKEVBRjlFMTc3NkIwOEIwN0NDMTBFQzM2Njg2RDJERUNCRTM1QTI1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaorWjeq3uo2VSR0Nu7HvLWy3
tiiZu56rKUbBNRCaet964xfufRAcASX4FFxD6kBTlQJ6/QVHJ0bMr00RQJR6ymt6
9QbXDHYwu1adWJZIeJxemvvLyEbHb2aIDFpkV8AyX3D0gq76trBmI25f8OOonSsQ
c+JCrDLz2EnqdRLzHLpTUF/4+SEaFyWYoSjP8bC9n8hOo1zCGhL7a0caMOHb8ULm
WiYYBpy9uX+ee7KsxPVH6xwtFvnxIE8pGvql5anFRjGJvAKGtiemlXjMvWkB3Hmq
SHyacE+wEmu2zqyNZ5UJuIsRFqR3gd9BoXpXW+oLgW0DBlYAJVHhMcoDupyxAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6vnhd2sIsHzBDsNmhtLey+NaJRowHwYDVR0j
BBgwFoAUButnGotTRbeau+00gsa/BtO7QwAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDY5RDU3QzVCMTY3MzNBQzM1OTdEOEZCRTY5MjBBMUUy
QkIyOEMwQzJGODAwNzcwNTE3MjQ5RDAxNTBFOTUyLzAvMDZFQjY3MUE4QjUzNDVC
NzlBQkJFRDM0ODJDNkJGMDZEM0JCNDMwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNkVCNjcxQThCNTM0NUI3OUFC
QkVEMzQ4MkM2QkYwNkQzQkI0MzAwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ2OUQ1N0M1QjE2NzMzQUMzNTk3RDhGQkU2OTIwQTFFMkJCMjhDMEMy
RjgwMDc3MDUxNzI0OUQwMTUwRTk1Mi8wLzMxMzgzNTJlMzIzMzM3MmUzMjMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5
7egwDQYJKoZIhvcNAQELBQADggEBACqIHaqx5iZJ1yKjBBF3VtWYxhfZLj37iOFl
QHgH5NGl1w/jDc9b0qQl6uhG8pn884oPQzv8PRemJ5rLJL4oa+JcFOnJvW4ibxxx
NmkoBTFFxj7Hty0E2yxiaWrZgzZQq/0X6TQm6jYEk9M+nbORqWt43OEnpsfAsDyv
isktqmldi6MSx4o0kQSstia1e1AsIxyRT7YUE2nIFyzYy9+ocM8bouwD6JTVpfPd
0gw4hpUHGo0Dih4MrucqinxysquIJBgf/DDjG97Jq8W7bZzG/SDQP4yrGr9lV5K9
fLjduRvEUKz7jjCqWY8CKzEOTjg2f579un6H/fe44E32r+p+JJQ=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:00:22 2026 by rpki-client