Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e3230382e31362e302f32322d3234203d3e203237383834.roa
File:                     3134332e3230382e31362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          0TUwzDGATiw67/FN72LRzMPV/8XuXWp5UhtWWSPI0iE=
Subject key identifier:   1F:2E:B9:CA:45:1B:EE:EF:63:AA:5B:09:7B:88:77:11:11:2F:3F:D2
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       1E0117FFD7156CFB95CC1AA5AB93E727DA63D320
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e3230382e31362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 20:52:32 +0000
ROA not before:           Tue 06 Jan 2026 20:47:32 +0000
ROA not after:            Tue 05 Jan 2027 20:52:32 +0000
asID:                     27884
IP address blocks:        143.208.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:01:17:ff:d7:15:6c:fb:95:cc:1a:a5:ab:93:e7:27:da:63:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Jan  6 20:47:32 2026 GMT
            Not After : Jan  5 20:52:32 2027 GMT
        Subject: CN=1F2EB9CA451BEEEF63AA5B097B887711112F3FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:6a:bd:0f:7f:dc:d4:58:9e:02:16:83:de:
                    3a:cb:6b:ab:b4:63:51:ef:c5:a7:ab:3f:14:0e:79:
                    2e:2c:c4:aa:41:98:ee:80:60:c3:90:d6:05:cb:71:
                    f9:c6:bd:6f:00:b1:b1:13:e8:3b:49:01:b3:52:6a:
                    d5:8d:7e:06:0a:c7:ac:e4:c8:a4:30:68:d4:2f:9c:
                    4c:d5:1e:30:96:18:1f:51:9d:0a:38:75:f4:5d:fe:
                    0d:a8:b7:29:37:6c:5a:bb:6d:81:2c:a7:3d:7b:30:
                    dd:0c:c0:94:20:7d:cf:52:f0:a0:4f:66:fb:f5:a7:
                    2f:43:d1:99:60:9b:5d:94:20:38:c2:7e:fd:d2:80:
                    26:36:4d:c9:64:e0:c3:60:8b:21:0d:92:48:00:3d:
                    12:87:09:0f:50:94:47:45:dd:d5:33:74:c6:34:44:
                    c9:e9:81:17:33:25:c4:9e:9a:67:bb:68:37:fd:5c:
                    e7:55:35:2d:43:18:f2:61:22:00:bc:37:71:21:67:
                    0c:7a:01:57:24:36:64:9f:63:9f:18:93:86:c4:df:
                    89:2c:24:03:52:06:d9:d9:d5:64:ea:42:e0:f3:0b:
                    fa:09:60:2a:49:5d:d6:79:ce:84:c6:05:0c:17:e4:
                    b1:4f:23:fc:bd:55:fe:3a:55:49:47:78:20:3e:28:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2E:B9:CA:45:1B:EE:EF:63:AA:5B:09:7B:88:77:11:11:2F:3F:D2
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e3230382e31362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:be:96:d2:82:39:91:1b:20:35:31:25:4c:0c:8e:89:c2:
         dd:be:5c:37:ed:50:dd:f3:87:6d:ee:59:7b:d9:26:5c:ef:4b:
         b5:75:ff:e3:f6:a0:51:d9:00:3f:26:88:b6:77:80:e4:ec:b5:
         ad:a7:24:16:b9:5f:1b:bd:eb:d1:42:1d:3d:28:af:7c:c3:9e:
         8f:94:98:b1:0e:b0:a8:4c:1e:dd:f0:4b:c3:f5:45:3c:1a:b9:
         1d:d2:b3:e9:cf:f3:00:d2:55:c8:3e:e5:56:48:cf:bd:58:d3:
         c4:03:a2:35:f0:09:4b:aa:10:c2:92:a5:9f:26:cb:38:ae:dc:
         6f:6c:2b:92:dd:b8:48:45:e7:7c:2f:18:dc:23:a5:b2:92:4d:
         f7:a1:60:29:ad:b8:ad:7b:a1:4e:96:e7:b7:ca:4f:b5:83:53:
         d8:29:c3:06:7e:d0:94:3d:1d:76:c5:86:17:88:e3:d7:12:f9:
         8e:eb:2e:2d:6f:ed:96:1b:4c:ff:33:e1:2e:b8:d4:87:dc:18:
         14:fa:95:fb:11:8b:47:1c:8d:74:06:60:35:65:c4:12:28:77:
         e7:75:c1:b0:5f:02:0a:4b:62:d2:8c:29:24:9b:7d:7f:a5:3c:
         d5:8b:2d:11:63:e1:09:c4:b6:e7:ab:a7:03:00:25:bb:5d:7a:
         9a:25:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:53 2026 by rpki-client