Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3137362e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3137362e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          vHvUcUuEPDf+Kgit6gqRE5BbI/wVYaE3uO4suhK2b+I=
Subject key identifier:   A8:F7:F1:ED:DF:0C:88:95:5C:7D:6A:DD:44:B5:33:D3:6E:EB:E4:50
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       03A85E0429894559BB6704392063196227F77125
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3137362e302f32302d3234203d3e20323634373331.roa
Signing time:             Fri 13 Feb 2026 05:30:17 +0000
ROA not before:           Fri 13 Feb 2026 05:25:17 +0000
ROA not after:            Fri 12 Feb 2027 05:30:17 +0000
asID:                     264731
IP address blocks:        186.167.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 17:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:5e:04:29:89:45:59:bb:67:04:39:20:63:19:62:27:f7:71:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Feb 13 05:25:17 2026 GMT
            Not After : Feb 12 05:30:17 2027 GMT
        Subject: CN=A8F7F1EDDF0C88955C7D6ADD44B533D36EEBE450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:c2:8e:4c:27:5d:f7:21:dd:f0:79:07:e5:
                    dc:1c:80:05:ee:4d:c2:6e:e2:4f:ba:9f:39:9d:f4:
                    32:8b:b0:be:11:e3:15:aa:20:5e:c0:52:b7:c8:ae:
                    53:48:91:7b:88:51:91:0f:be:cf:3f:82:a9:dc:ad:
                    27:bf:6f:f2:20:80:54:01:fe:e0:83:4b:4b:97:2b:
                    ae:2e:fa:f0:dc:18:fc:c7:35:28:30:e8:54:10:76:
                    6b:3a:14:48:49:97:52:da:52:b1:88:68:1d:4f:53:
                    0e:86:7f:fc:90:1d:07:b9:f9:4b:f3:b3:06:52:7f:
                    54:45:9f:6e:34:0a:25:0a:86:5c:83:1a:cc:a1:fe:
                    21:e7:ca:89:0f:cc:db:c7:22:4b:73:50:f4:f1:25:
                    27:8c:08:46:b7:96:a4:5a:61:e1:df:dc:af:a4:58:
                    36:95:8a:93:8e:8e:34:42:c7:cc:d1:51:4b:2d:b7:
                    3a:c9:44:92:e9:f6:f3:ef:81:91:86:1d:7e:5c:21:
                    22:be:64:b7:96:cb:fc:55:8d:ad:c7:5f:56:36:2b:
                    f5:13:7c:a7:bd:cc:d0:c0:19:24:99:61:e2:e0:a3:
                    48:38:ac:cd:f5:5c:98:d3:a7:a1:22:4b:67:1a:5c:
                    cc:4a:ed:2c:c5:6b:d6:45:78:4b:fc:50:2c:30:28:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:F1:ED:DF:0C:88:95:5C:7D:6A:DD:44:B5:33:D3:6E:EB:E4:50
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3137362e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:ad:01:a7:03:1c:f2:79:f6:d5:51:90:2a:bd:74:29:31:
         95:36:8f:b3:0c:07:fe:fb:06:0a:c3:6a:9e:23:a7:0b:21:e2:
         e5:4e:a3:bc:3c:ba:5c:ca:84:2a:ad:21:bb:39:89:87:54:69:
         26:4d:5a:f1:31:e2:c8:eb:91:58:15:11:4a:bf:2c:37:a9:a4:
         9e:53:85:4a:12:f5:8b:9b:42:00:b6:99:b3:36:24:4f:dd:d1:
         8b:f5:d0:1b:b4:06:72:aa:cd:b3:ec:07:aa:72:0e:7f:79:82:
         d6:9e:8e:dc:a9:f9:ce:b8:28:e6:f8:30:bb:6b:06:64:98:ab:
         a1:78:7d:ca:36:a2:e0:6b:dc:d5:15:bd:57:67:a5:30:7d:a9:
         af:5d:cd:c1:56:be:49:b5:00:29:51:cf:d3:10:88:5c:66:0a:
         4b:4e:d1:b9:91:ff:30:a4:fe:9b:1a:70:8a:74:e6:98:2b:d5:
         34:92:8f:e7:96:24:2b:6a:15:f2:af:70:ac:5f:c4:61:03:22:
         6c:89:2d:58:84:84:ec:1b:62:80:72:48:19:82:09:f7:1e:dd:
         3d:1c:ab:3f:d2:4b:2a:be:32:89:7a:d7:91:0f:5c:e7:2d:7a:
         17:b1:f2:fb:ef:72:0e:6e:36:6c:e3:a0:48:7e:b8:99:df:f0:
         c1:09:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:19 2026 by rpki-client