Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e33342e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          5jH7HKrldiCrlDDMiw8pj/W5PFCEVbDFPyro+jWSu/w=
Subject key identifier:   0A:69:98:46:B1:3B:EC:06:0E:1B:79:94:6F:A1:B6:84:BC:CF:25:76
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       66DF2EED0AB2DE1B2F475440E11C7D8BDA159A87
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa
Signing time:             Fri 13 Feb 2026 02:30:16 +0000
ROA not before:           Fri 13 Feb 2026 02:25:16 +0000
ROA not after:            Fri 12 Feb 2027 02:30:16 +0000
asID:                     267797
IP address blocks:        165.98.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:2e:ed:0a:b2:de:1b:2f:47:54:40:e1:1c:7d:8b:da:15:9a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Feb 13 02:25:16 2026 GMT
            Not After : Feb 12 02:30:16 2027 GMT
        Subject: CN=0A699846B13BEC060E1B79946FA1B684BCCF2576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:24:cc:26:6f:ea:43:08:e8:56:07:16:66:
                    86:33:0e:31:13:b6:10:52:71:eb:c0:ee:d4:42:02:
                    ef:f7:ef:38:db:ba:83:aa:c6:1c:fd:bc:14:a9:14:
                    b9:c8:41:f5:aa:ac:ce:01:1c:75:ff:87:53:06:f9:
                    8d:fd:f8:cb:be:73:2a:1f:5a:c4:b6:90:a7:bb:7e:
                    14:4c:98:05:d8:ce:f2:b0:5b:c5:16:57:ca:af:e8:
                    cf:3d:c0:96:02:c4:8b:d9:7a:69:12:19:54:7e:43:
                    e8:19:47:ca:0f:a9:c0:2a:e1:d0:2c:fa:45:b4:05:
                    28:be:0f:e2:2b:43:3c:ac:e0:89:ff:d7:9a:ab:72:
                    9b:8b:5e:de:da:35:f0:4e:76:fc:b4:98:df:be:f1:
                    a9:7b:0f:65:9f:9b:97:e7:c6:07:2f:bb:f3:3a:e7:
                    ec:9e:07:33:d8:e9:89:d0:b3:d4:5f:f9:85:c2:74:
                    87:c2:77:3e:4d:83:76:b2:77:46:e4:85:c3:67:c8:
                    8d:57:60:c8:09:38:ee:08:21:2f:70:e0:88:2d:dc:
                    51:62:c6:08:f5:8a:c9:f8:71:ca:b4:09:b4:fd:d9:
                    db:96:f8:dc:93:1a:71:65:0a:9c:31:11:b6:7a:8b:
                    56:f5:df:37:5e:e2:4b:d4:ea:99:51:28:b1:92:1b:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:98:46:B1:3B:EC:06:0E:1B:79:94:6F:A1:B6:84:BC:CF:25:76
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33342e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:0f:da:44:c2:72:c9:44:84:4c:45:07:3f:6c:fb:88:1f:
         28:7d:2f:56:95:84:2a:cf:36:c1:4d:34:57:0f:3c:a0:49:67:
         4d:c4:5e:b2:ed:71:93:e1:03:d0:0c:9b:b7:52:38:e6:b5:07:
         73:0d:ea:19:2c:23:63:74:42:0d:d9:30:ed:31:64:35:e6:70:
         88:62:93:3a:da:14:ce:99:69:78:3b:d6:6a:2c:0c:7c:a9:af:
         14:4d:67:61:86:3d:66:91:12:c2:3c:a0:81:13:9c:e2:1f:6a:
         c1:f2:69:8d:5e:f5:e3:cb:1f:0b:f7:47:ad:1e:6c:7c:bd:6d:
         2e:22:33:22:72:5e:56:c2:14:53:4c:10:80:ff:d0:d7:f2:6d:
         e9:3e:95:00:4f:dc:d0:ca:0a:5a:0b:62:ad:72:55:80:3f:e7:
         7b:51:12:72:ca:99:92:59:7f:f8:ac:a8:b7:eb:e1:4a:24:56:
         51:b8:e3:64:7f:c6:de:c2:5e:f7:e2:5d:00:19:f2:a2:75:fb:
         bd:32:1c:57:b9:74:ac:43:3a:ab:b2:70:f8:e8:2c:4a:d3:6f:
         fa:c1:eb:51:f0:78:8d:db:f2:2e:02:3d:be:b4:e5:72:31:f0:
         10:c8:ec:28:62:8d:28:92:59:55:25:3f:88:b8:c8:82:e9:46:
         7c:82:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:28 2026 by rpki-client