Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (raw, json)
Hash identifier:          R4wTjBxWlpExbHfGaT9L7bqgCN2JZ/n8GYHNr7wl5ec=
Subject key identifier:   DD:04:A4:2F:50:0E:7A:A2:03:F4:81:81:AC:A1:BF:86:B1:25:1F:DB
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       7AC4E6C398340715B7DF8349AD8C3A1C80962B1D
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa
Signing time:             Tue 06 Jan 2026 19:07:46 +0000
ROA not before:           Tue 06 Jan 2026 19:02:46 +0000
ROA not after:            Tue 05 Jan 2027 19:07:46 +0000
asID:                     263766
IP address blocks:        131.196.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 11:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c4:e6:c3:98:34:07:15:b7:df:83:49:ad:8c:3a:1c:80:96:2b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Jan  6 19:02:46 2026 GMT
            Not After : Jan  5 19:07:46 2027 GMT
        Subject: CN=DD04A42F500E7AA203F48181ACA1BF86B1251FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:9d:d0:0b:c5:19:25:c4:89:fc:f5:65:86:
                    48:7c:c6:70:64:61:69:4a:f0:fe:da:bd:0a:06:4f:
                    e6:72:dc:22:6f:4c:90:ec:6f:cb:3a:4a:9a:9c:74:
                    e7:08:13:fb:4f:6e:c0:cc:6f:8f:a7:52:9a:f5:04:
                    80:44:e4:bd:51:af:25:90:51:53:eb:a5:c6:66:06:
                    69:6c:a2:be:47:8d:ab:f0:b5:e6:6c:9e:9e:18:7b:
                    76:f0:ca:cb:6a:3d:49:0b:9f:4a:e4:ad:37:bb:93:
                    01:6c:17:a7:5b:ed:d2:27:f2:d0:b2:2b:23:c7:c8:
                    81:ae:db:33:a8:3b:a2:1a:32:e1:d7:74:34:b4:41:
                    e2:c6:73:de:72:17:ea:71:d3:09:29:25:92:68:4f:
                    f7:72:91:41:0a:8a:80:53:6b:40:e9:c5:5c:56:98:
                    e6:33:6c:f0:69:77:21:6b:cd:53:2a:75:9f:e2:86:
                    fb:ce:cf:11:47:e9:5d:d8:ea:64:eb:de:4a:1c:5a:
                    b7:cb:22:98:fa:88:8c:bf:d0:1c:a7:c3:34:b0:5a:
                    11:2c:a8:be:37:71:b0:fd:a2:da:92:f6:86:57:9d:
                    4b:af:87:25:a7:64:32:8b:e6:9d:2c:49:7c:ab:37:
                    6b:e5:15:57:d2:f1:95:38:4b:0f:7c:ee:39:b7:0e:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:A4:2F:50:0E:7A:A2:03:F4:81:81:AC:A1:BF:86:B1:25:1F:DB
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:a4:12:2c:84:31:98:87:fe:19:c0:94:a8:3e:fb:bf:39:
         fa:36:1a:59:86:3b:68:0b:2e:9e:df:35:81:78:1e:d2:ed:00:
         83:06:db:c6:5f:1e:e2:c2:c7:f5:46:ce:b2:ad:64:73:2e:f8:
         4e:cc:2d:fe:7a:5b:20:3a:59:49:b9:fc:0b:3f:38:51:0a:16:
         73:14:56:60:20:6f:03:37:95:c4:64:6d:35:2a:18:0e:10:fb:
         d8:0b:7f:f4:56:14:8c:99:02:5c:a8:eb:cb:24:ff:0b:9f:99:
         c2:f8:f5:12:5f:85:cc:61:d7:94:3c:a3:ec:b1:db:8b:58:f9:
         1b:f7:5d:8b:5b:67:0c:aa:d9:f2:08:4f:9e:92:55:ec:f3:77:
         eb:17:35:2d:8e:2e:be:e4:ae:38:67:dc:eb:7c:f4:ed:b3:54:
         2c:0f:9f:af:fb:17:cc:5c:91:bf:a8:db:ae:65:c5:fe:07:39:
         1e:06:80:86:df:9d:4c:7c:87:53:be:0b:bd:e7:2f:36:9c:11:
         64:cd:68:ed:1a:cf:fe:5d:25:fe:de:e0:7f:47:a6:ba:a6:65:
         1b:68:c6:cf:5a:74:f0:14:90:cc:75:9f:09:22:09:c4:c8:93:
         27:31:16:4a:3f:ad:02:55:04:36:f7:15:60:2f:a2:3e:08:fd:
         a3:21:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:04:50 2026 by rpki-client