Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa
File:                     3230302e33352e3133342e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier:          inB3htSPYk8ahOiekHSjt6CJOcL1V5u5cD2PCsHYo+U=
Subject key identifier:   8A:8A:46:07:46:C8:50:4F:2C:A1:73:5F:13:3E:D3:05:1D:CD:65:1E
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       566FB33B41932B2A97B0FAF5DE27D1D72AA1A99F
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa
Signing time:             Fri 13 Feb 2026 14:30:22 +0000
ROA not before:           Fri 13 Feb 2026 14:25:22 +0000
ROA not after:            Fri 12 Feb 2027 14:30:22 +0000
asID:                     28089
IP address blocks:        200.35.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6f:b3:3b:41:93:2b:2a:97:b0:fa:f5:de:27:d1:d7:2a:a1:a9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb 13 14:25:22 2026 GMT
            Not After : Feb 12 14:30:22 2027 GMT
        Subject: CN=8A8A460746C8504F2CA1735F133ED3051DCD651E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:86:39:a6:0f:c4:94:33:c2:09:d1:c4:c1:
                    3a:a8:84:a4:fc:d2:ae:f0:be:dd:3c:c5:4b:bb:a1:
                    1f:48:f5:3c:00:47:aa:51:75:62:98:a9:ab:31:04:
                    88:9e:2a:63:2c:1a:a2:98:0e:77:b9:66:02:c9:cb:
                    8d:84:d6:0c:31:c0:fa:52:50:ae:54:2b:c5:5d:2e:
                    4c:20:0f:f5:19:fb:92:0b:28:d2:fe:25:36:f6:2d:
                    f8:75:1f:92:0e:fa:d6:2f:73:ec:b9:10:c8:82:39:
                    19:54:96:e7:0d:49:3d:f2:48:c5:63:99:0e:dd:f5:
                    5e:c3:35:6c:3e:85:f9:bb:d2:0f:b9:a9:1c:66:1f:
                    7e:86:d4:35:3a:76:a7:78:66:3b:9b:fe:79:da:96:
                    32:e6:c2:92:c4:f1:90:92:1e:a9:2c:4f:26:d7:17:
                    a8:28:a7:ea:82:01:bc:14:f6:32:45:bb:50:9c:ec:
                    dd:7d:69:92:f4:b9:c0:1b:d4:6c:9c:1b:9a:ba:87:
                    5e:28:6e:89:a8:19:4d:bc:61:cd:f2:6e:93:6b:19:
                    bf:7b:c3:8e:e0:e3:01:2d:94:e1:50:c5:40:2b:ec:
                    4a:70:25:27:a7:c3:04:4c:fb:ac:d7:17:e7:92:4e:
                    a3:56:de:2c:71:13:60:3b:6d:06:4c:4e:70:91:70:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:46:07:46:C8:50:4F:2C:A1:73:5F:13:3E:D3:05:1D:CD:65:1E
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:d3:70:2f:97:e9:00:b1:c2:b8:82:54:26:d2:70:d1:df:
         5c:5a:3c:34:be:3c:29:ae:26:96:f7:91:07:76:26:c2:d2:ba:
         9b:65:f8:d9:bc:c8:e6:bc:d5:91:bd:b2:8a:0d:55:2a:84:2c:
         58:c3:52:0a:22:7b:c8:d2:aa:60:04:cb:71:04:8b:5a:ab:ca:
         19:e4:6a:fb:54:b9:eb:11:e5:11:cd:23:2e:cc:50:db:25:8c:
         c3:d3:15:bb:ad:0d:30:56:1a:2c:9e:5f:d8:e9:08:b0:da:60:
         d9:91:9f:23:89:a6:8c:f6:78:30:bd:fa:d5:3f:dd:1e:b4:7d:
         c7:18:3f:88:7a:bd:c7:ff:44:05:62:8d:5c:fe:83:a2:16:ca:
         a6:db:04:25:55:ef:ea:6e:d9:f0:8c:2f:6e:54:78:93:9c:2f:
         f4:81:05:6d:cc:89:4c:9f:4b:b3:0c:af:f0:52:d3:49:e3:61:
         cd:e0:14:45:60:cf:23:65:5c:58:98:0e:5f:44:7b:8b:47:63:
         5b:be:7c:7d:8a:e8:f1:00:95:08:23:b2:fb:63:2c:d4:4a:e6:
         b3:79:e5:71:13:bf:e5:ea:94:21:3f:12:36:45:d7:45:03:fc:
         8e:b4:72:da:f0:62:9c:7e:36:c4:15:c6:4d:6f:08:5f:76:95:
         c4:e6:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:03:46 2026 by rpki-client