Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa
File:                     3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          /ai6nkR1dQhIz6XzvZp1uCH34ML3pm6Qg58x/mkgVQ4=
Subject key identifier:   76:DD:B6:4C:C5:85:2A:A4:F5:70:4A:D0:6A:35:F4:FC:E7:8D:97:87
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       16BBD7455A4E831AF9320803F0413460A44C1307
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:19 +0000
ROA not before:           Tue 06 Jan 2026 19:21:19 +0000
ROA not after:            Tue 05 Jan 2027 19:26:19 +0000
asID:                     52510
IP address blocks:        170.233.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:d7:45:5a:4e:83:1a:f9:32:08:03:f0:41:34:60:a4:4c:13:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:19 2026 GMT
            Not After : Jan  5 19:26:19 2027 GMT
        Subject: CN=76DDB64CC5852AA4F5704AD06A35F4FCE78D9787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:0a:4c:de:48:67:fd:d2:ea:da:c7:03:fe:
                    3f:ed:c5:29:4b:03:63:fd:11:39:6b:e2:95:4f:cc:
                    77:28:1e:bd:75:76:a6:8a:c5:ec:0a:17:96:a7:17:
                    79:75:7c:72:05:d3:f4:b6:22:0a:12:b5:36:7b:02:
                    0c:b0:8f:15:04:97:20:1f:49:f2:a0:6c:2c:b9:b6:
                    03:84:64:8c:ca:eb:3f:b9:4a:81:f9:c1:84:c1:12:
                    af:5f:e0:c2:2b:5d:62:42:0a:15:56:4a:94:95:40:
                    d4:a7:8d:2b:15:2e:41:9d:7f:2c:08:81:10:9f:d1:
                    83:49:72:00:3b:c4:36:24:2d:01:11:8e:1c:2e:d9:
                    e5:fb:76:b4:9b:3b:94:8d:a0:f5:65:7c:e5:38:b2:
                    b8:ec:af:40:5a:1a:9b:8b:8c:f5:9b:2c:a4:49:9a:
                    cb:a6:23:06:60:3b:09:5f:12:c1:c1:b6:20:ae:66:
                    3a:ce:fb:f2:8d:03:4e:7f:94:a0:ed:4c:e1:c5:96:
                    f0:52:b0:58:3e:02:77:db:e9:9b:06:10:15:ca:e7:
                    fc:46:e0:d2:a4:df:68:7f:61:87:b3:34:e2:40:d5:
                    99:8d:44:34:d1:2a:43:0c:87:c0:b5:f4:7d:1d:80:
                    d4:5f:4e:4e:90:3b:f8:a7:1d:46:60:22:4d:1f:e0:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:B6:4C:C5:85:2A:A4:F5:70:4A:D0:6A:35:F4:FC:E7:8D:97:87
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a9:74:1c:f6:14:60:52:90:03:87:9f:84:d4:fe:9c:98:f6:
         93:cb:37:31:de:51:b9:0f:78:cb:c9:8c:a0:4a:5e:3a:69:14:
         25:a7:7d:e9:2f:77:7e:92:ad:cd:c1:64:57:9a:74:b5:81:4d:
         c5:dd:90:4f:f2:ea:4c:6d:5f:70:e0:87:79:c1:4d:72:22:4d:
         ff:03:32:82:28:fd:39:be:0a:80:b5:86:d5:6c:ac:e1:4b:fd:
         3b:45:d5:bd:66:13:a0:bf:01:dd:19:d7:eb:38:74:65:54:bf:
         56:93:7a:8d:90:37:64:62:34:88:8d:98:41:59:9d:7f:e9:57:
         2c:9b:45:35:7a:82:24:2c:d5:70:82:a9:62:49:2c:ac:9b:f6:
         0f:82:06:38:63:45:86:30:dd:82:0a:b2:6a:90:8f:fa:f0:1e:
         45:fd:9b:d8:30:99:53:3c:ea:4b:54:8b:63:19:3c:15:bc:50:
         0f:64:4c:56:22:f8:6c:99:1c:4b:d5:9f:71:df:97:4b:d2:0d:
         0e:64:f7:86:fa:7a:b1:67:b6:e2:cf:c3:d0:42:a4:20:d7:32:
         ff:ee:d4:26:dc:67:cb:f0:26:ad:76:65:49:cb:2e:53:50:b1:
         69:8c:80:ca:6a:b9:c3:85:86:e1:aa:7d:ae:c9:f8:40:5d:68:
         1c:1c:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:51 2026 by rpki-client