Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
File:                     3230322e352e39362e302f32302d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          jxeeEHSPO24mippYnjEVdR9z+FzIVOBhYiM7nCCtYeM=
Subject key identifier:   0D:02:DE:89:6F:96:11:01:FF:9A:71:85:C4:AD:24:8C:1F:78:8D:BE
Certificate issuer:       /CN=4B158614B27067F3C5F4A713E506CD799671ECB6
Certificate serial:       79D7E0F4718AFBB83D9E582171408ECCC53A4C20
Authority key identifier: 4B:15:86:14:B2:70:67:F3:C5:F4:A7:13:E5:06:CD:79:96:71:EC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
Signing time:             Fri 30 Jan 2026 06:48:55 +0000
ROA not before:           Fri 30 Jan 2026 06:43:55 +0000
ROA not after:            Fri 29 Jan 2027 06:48:55 +0000
asID:                     265540
IP address blocks:        202.5.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d7:e0:f4:71:8a:fb:b8:3d:9e:58:21:71:40:8e:cc:c5:3a:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B158614B27067F3C5F4A713E506CD799671ECB6
        Validity
            Not Before: Jan 30 06:43:55 2026 GMT
            Not After : Jan 29 06:48:55 2027 GMT
        Subject: CN=0D02DE896F961101FF9A7185C4AD248C1F788DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:f8:56:9b:1b:06:ee:9e:68:74:aa:bc:85:
                    9d:a4:bd:9c:fd:11:12:d1:e1:d2:0e:0f:0b:c8:cf:
                    27:5c:9b:c6:43:e5:70:d0:37:6a:43:d7:fa:fb:7b:
                    d8:e4:b1:d2:4f:70:ae:90:1f:31:48:24:b6:b1:d2:
                    76:8e:0e:92:f5:9f:84:94:3a:bd:f0:dc:7c:be:cb:
                    bc:cc:35:9e:64:5c:f5:bb:7d:57:3d:cf:8a:6a:fd:
                    89:b4:df:89:c7:bd:0f:23:a2:b8:a1:22:ef:4b:05:
                    70:0d:5c:72:59:27:fc:bb:c6:c1:6f:ca:bd:40:45:
                    fc:86:41:f5:56:e9:21:1d:bd:fe:8c:4a:c0:96:c0:
                    5e:1a:16:ec:6b:a6:4d:ce:61:d1:e6:be:4e:3e:1c:
                    c5:d4:b8:c1:87:95:e8:3c:c2:b1:b1:d8:98:3c:85:
                    74:b2:b9:3b:49:c3:1f:54:95:2f:f8:af:7e:a8:30:
                    fe:a3:aa:98:75:0a:5e:1c:42:8f:f0:2f:e5:ee:6f:
                    79:21:b9:11:6e:e1:0c:fd:df:75:91:a7:b7:0b:1c:
                    95:f8:5c:91:7c:1d:98:b1:a0:7d:c8:98:de:36:65:
                    87:0b:c2:3c:6f:ea:14:03:ab:54:ce:70:9b:f4:ee:
                    54:60:90:78:99:fb:90:48:d0:0d:a0:39:cb:c4:8b:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:DE:89:6F:96:11:01:FF:9A:71:85:C4:AD:24:8C:1F:78:8D:BE
            X509v3 Authority Key Identifier:
                keyid:4B:15:86:14:B2:70:67:F3:C5:F4:A7:13:E5:06:CD:79:96:71:EC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/4B158614B27067F3C5F4A713E506CD799671ECB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B158614B27067F3C5F4A713E506CD799671ECB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:0d:67:8e:66:a1:8c:f3:1d:43:46:31:24:7d:11:7a:33:4b:
         24:1e:8d:c1:a9:66:23:40:ea:84:da:81:be:6e:52:7a:15:e2:
         4f:4a:0b:f5:77:07:b9:fc:9e:0a:c7:22:1f:70:69:89:cb:bb:
         ce:27:f7:2b:71:59:7a:d0:52:c0:5d:7a:32:71:7e:2a:16:7c:
         86:f3:ad:55:37:35:a9:fe:7d:86:d0:8f:0f:30:b9:df:bc:27:
         2b:6f:3b:8a:9e:85:2e:78:90:f8:38:41:b5:58:3f:87:05:9c:
         87:c3:dc:35:46:af:38:f0:74:35:3e:c8:fa:2e:1b:15:19:8e:
         a9:ef:a4:a8:ff:35:29:54:0f:2d:75:4c:4e:4e:fb:b2:bf:bb:
         5c:d3:9f:94:4f:b1:91:bf:f9:ba:fd:5a:29:26:5d:9e:47:a8:
         43:46:0f:65:22:9d:8e:0a:b5:a4:d8:99:dc:29:fc:68:ed:9d:
         37:b2:d0:ec:4a:af:f9:fd:d5:84:32:54:4c:66:23:b4:57:41:
         49:19:a6:5a:d0:01:9f:21:b7:b7:11:c9:3f:9d:73:3e:7f:ab:
         7e:ef:6a:b7:1e:df:37:47:9c:30:1c:80:7c:6c:ea:c3:57:cd:
         e5:50:31:28:37:1c:c4:a2:fc:13:c5:f1:06:96:45:66:22:ab:
         fc:e9:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:44 2026 by rpki-client