Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa
File:                     3230312e3135382e34382e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          jpszp7IS7sKtC7ZXouVgeAOwxg5fZ692gnHD2RVBi3k=
Subject key identifier:   86:A9:F4:DE:E9:2A:47:DB:5A:FA:4A:A0:A6:9B:74:AB:1F:1F:76:6E
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       572827EBB59AF362F5D9768C24CBD16764CFA845
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 20:52:34 +0000
ROA not before:           Tue 06 Jan 2026 20:47:34 +0000
ROA not after:            Tue 05 Jan 2027 20:52:34 +0000
asID:                     27884
IP address blocks:        201.158.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:28:27:eb:b5:9a:f3:62:f5:d9:76:8c:24:cb:d1:67:64:cf:a8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Jan  6 20:47:34 2026 GMT
            Not After : Jan  5 20:52:34 2027 GMT
        Subject: CN=86A9F4DEE92A47DB5AFA4AA0A69B74AB1F1F766E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:cd:e6:5d:11:25:41:15:2c:6a:00:35:19:
                    b4:db:ed:b6:fa:25:2f:96:cc:cc:37:31:07:5d:ea:
                    ec:c9:7f:85:90:5a:67:4a:76:5d:4e:bb:38:de:53:
                    99:57:28:02:40:b7:70:eb:84:56:a3:ad:3e:15:5b:
                    4d:9c:69:83:74:32:c8:4c:cb:37:0a:af:7f:4a:36:
                    ec:cb:aa:46:14:b1:8d:df:bb:f0:d1:f9:35:26:b5:
                    aa:2d:66:d9:1f:61:ea:59:29:97:dd:00:a5:09:2c:
                    c8:8f:3a:c2:1c:ef:9c:28:19:6b:6c:8a:91:ed:d4:
                    26:bc:2f:fe:2c:8f:5f:f8:21:40:0e:09:be:f7:21:
                    d6:39:11:c2:05:04:b4:a9:d8:47:fd:40:5a:7b:c1:
                    dd:53:8e:d4:c4:8f:10:c6:03:52:8f:c7:39:2b:e4:
                    d3:ae:b2:b4:41:f3:c0:97:99:91:71:8b:a3:4f:ce:
                    b2:6c:0d:f2:a9:81:8a:e2:7a:ef:31:88:b2:37:72:
                    f0:03:5a:2c:73:53:fb:bd:85:c5:63:98:c8:7b:bf:
                    d2:af:c1:36:cf:a2:14:82:ae:2d:c9:34:bb:de:77:
                    d0:56:d4:90:2c:bb:17:b6:47:1a:07:61:27:6f:fe:
                    20:6b:28:22:b3:42:5d:7b:02:a7:67:ea:1b:99:71:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A9:F4:DE:E9:2A:47:DB:5A:FA:4A:A0:A6:9B:74:AB:1F:1F:76:6E
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:4c:57:f8:71:8c:6f:41:8e:05:c1:79:94:a1:6a:85:5e:f6:
         77:db:1d:70:bc:8f:ca:00:68:0e:1f:a6:f8:b8:af:df:8e:5c:
         96:ca:eb:10:ad:bd:38:05:13:22:b2:8b:68:24:cd:91:ad:f2:
         cc:3c:f8:6b:bb:80:3b:dc:1c:57:65:f1:a1:6c:b2:6f:c2:44:
         fe:55:37:f0:2c:64:9d:36:1e:bf:f1:3f:23:c8:7a:b6:22:22:
         a6:33:6c:8c:11:89:70:12:6a:cd:f4:a8:b0:34:c8:92:ac:31:
         a9:ab:91:48:23:26:cf:6f:34:ec:6b:be:d2:bf:02:98:c0:38:
         da:30:e5:ec:92:c9:3b:8d:cf:91:78:52:63:7f:e6:da:d3:94:
         3f:31:59:2a:95:f6:d5:f5:18:ff:af:8d:1f:99:83:3e:21:29:
         de:c0:ad:5a:fd:08:1c:d7:f3:14:3e:77:a0:57:11:5b:fb:ee:
         35:25:1f:1b:b4:41:fb:1c:81:dd:00:94:b4:4e:1a:51:83:bd:
         b7:a4:37:c8:14:c3:e1:ab:df:1a:d7:6a:7b:bf:23:fc:b9:cc:
         d0:4b:4c:5d:31:39:67:eb:e9:71:f1:42:33:8e:fd:48:f3:87:
         63:6d:a6:3f:be:b4:a1:55:3a:82:db:91:da:03:dd:71:07:91:
         72:e4:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:39 2026 by rpki-client