Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e38312e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          kshdCAEy9hZ/8OdEpt8SeiFDwvUVD9gU37lE0Su/1z8=
Subject key identifier:   E9:84:8E:1E:BD:50:8D:0E:36:06:76:05:F1:C0:10:94:EC:F7:F4:C8
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       36BA0A670EF1A0CBE1C09F0E5E5240D30F7DB2DC
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa
Signing time:             Wed 18 Feb 2026 21:31:11 +0000
ROA not before:           Wed 18 Feb 2026 21:26:11 +0000
ROA not after:            Wed 17 Feb 2027 21:31:11 +0000
asID:                     267797
IP address blocks:        165.98.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:0a:67:0e:f1:a0:cb:e1:c0:9f:0e:5e:52:40:d3:0f:7d:b2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Feb 18 21:26:11 2026 GMT
            Not After : Feb 17 21:31:11 2027 GMT
        Subject: CN=E9848E1EBD508D0E36067605F1C01094ECF7F4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:64:13:27:dd:98:e4:cc:32:96:00:01:7e:
                    09:6d:ef:aa:50:43:0d:32:f2:3f:68:3f:b0:5a:d7:
                    ce:ac:d6:78:ac:1e:9b:cc:b2:2b:a3:d6:d1:6b:2d:
                    8b:f0:f7:80:dc:79:e3:c4:84:cf:83:d5:af:f1:e8:
                    38:46:73:f1:49:56:b9:a6:05:13:ac:61:cb:fd:98:
                    0f:fe:c3:29:fd:15:01:91:18:f6:cd:29:35:32:9f:
                    ae:e1:39:6e:73:e7:f9:59:f8:ef:2f:c7:b4:cd:80:
                    2f:40:72:b5:56:06:2c:ac:f6:b4:60:c8:8e:e3:f2:
                    12:b0:de:77:af:92:6f:0f:56:da:08:3c:82:88:7d:
                    be:29:ed:f4:37:26:27:8d:c3:f3:45:54:3a:59:8f:
                    ac:39:68:51:33:75:63:4e:16:8f:b6:4d:40:a5:31:
                    f6:88:57:6b:d8:b1:79:5c:d5:ff:20:de:8f:63:e8:
                    5f:d1:a0:c2:bf:51:3f:95:37:36:41:80:81:40:a6:
                    3c:1d:f1:a5:74:ee:ed:53:bf:03:75:ef:8f:de:e9:
                    1d:20:74:40:16:06:c0:04:41:9e:68:8d:cb:72:4b:
                    02:0f:8c:a8:df:ea:ba:18:d9:93:d3:56:bd:60:fa:
                    ed:39:0e:62:1d:f1:0c:d7:bd:f0:6f:cf:d8:0a:b5:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:8E:1E:BD:50:8D:0E:36:06:76:05:F1:C0:10:94:EC:F7:F4:C8
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38312e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:f0:f0:1d:de:c2:8e:b9:1c:72:1a:16:22:00:73:66:ed:
         c6:ce:14:48:7d:97:9d:11:c4:f1:48:7d:39:5d:d4:78:84:cd:
         c1:14:99:9f:1a:77:d3:3b:18:1f:a0:21:09:92:85:a8:2c:4c:
         6e:0f:3a:b2:90:5e:5a:d8:78:66:7d:a5:e4:3a:c4:97:3d:64:
         6b:f0:de:17:ea:5c:66:6d:3c:d6:de:c0:74:0f:5d:84:7a:25:
         f8:97:d1:1c:b5:fa:79:5b:02:77:5e:4d:01:0a:a9:20:29:74:
         a9:10:42:5c:ad:24:ac:33:b9:8d:ae:62:33:39:21:67:73:f8:
         dd:0f:7c:6d:8b:28:e7:33:b8:0f:9f:22:8c:70:48:c0:89:b1:
         15:f5:8f:1a:0c:dc:42:cb:e3:24:a0:55:45:21:53:f6:51:32:
         49:bb:6a:79:ee:23:74:09:ad:84:dd:c9:d8:f0:ff:ed:7f:4a:
         1f:d2:28:22:53:d1:a2:4d:1c:af:e4:d4:d6:e6:df:c3:91:6f:
         d6:86:5a:58:70:dc:23:57:d0:5a:25:20:77:67:6c:47:97:70:
         11:cc:25:ea:2f:66:50:65:c5:bb:72:63:96:f0:73:43:0c:03:
         7d:e0:22:7b:93:ca:94:8a:df:b9:cd:77:7e:70:f5:bd:f7:1b:
         7b:73:17:2f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNroKZw7xoMvhwJ8OXlJA0w99stwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNjAyMTgyMTI2MTFaFw0yNzAyMTcyMTMxMTFaMDMxMTAvBgNV
BAMTKEU5ODQ4RTFFQkQ1MDhEMEUzNjA2NzYwNUYxQzAxMDk0RUNGN0Y0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww2QTJ92Y5MwylgABfglt76pQ
Qw0y8j9oP7Ba186s1nisHpvMsiuj1tFrLYvw94DceePEhM+D1a/x6DhGc/FJVrmm
BROsYcv9mA/+wyn9FQGRGPbNKTUyn67hOW5z5/lZ+O8vx7TNgC9AcrVWBiys9rRg
yI7j8hKw3nevkm8PVtoIPIKIfb4p7fQ3JieNw/NFVDpZj6w5aFEzdWNOFo+2TUCl
MfaIV2vYsXlc1f8g3o9j6F/RoMK/UT+VNzZBgIFApjwd8aV07u1TvwN174/e6R0g
dEAWBsAEQZ5ojctySwIPjKjf6roY2ZPTVr1g+u05DmId8QzXvfBvz9gKterlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6YSOHr1QjQ42BnYF8cAQlOz39MgwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzgzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKViUTAN
BgkqhkiG9w0BAQsFAAOCAQEAeeTw8B3ewo65HHIaFiIAc2btxs4USH2XnRHE8Uh9
OV3UeITNwRSZnxp30zsYH6AhCZKFqCxMbg86spBeWth4Zn2l5DrElz1ka/DeF+pc
Zm081t7AdA9dhHol+JfRHLX6eVsCd15NAQqpICl0qRBCXK0krDO5ja5iMzkhZ3P4
3Q98bYso5zO4D58ijHBIwImxFfWPGgzcQsvjJKBVRSFT9lEySbtqee4jdAmthN3J
2PD/7X9KH9IoIlPRok0cr+TU1ubfw5Fv1oZaWHDcI1fQWiUgd2dsR5dwEcwl6i9m
UGXFu3JjlvBzQwwDfeAie5PKlIrfuc13fnD1vfcbe3MXLw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 02:41:43 2026 by rpki-client