Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa
File:                     3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa (raw, json)
Hash identifier:          n4oR1M68dRkYG2/HZqzBmUCNCHQhU6M/TRO7V9R2x5Y=
Subject key identifier:   7C:A3:3E:69:AD:C9:60:09:69:8E:68:F3:D6:12:3E:10:37:F4:4E:9E
Certificate issuer:       /CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5
Certificate serial:       40A49A2CC5BDADA7DB85B3D8FCAB930F4D5E913C
Authority key identifier: 2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa
Signing time:             Tue 06 Jan 2026 19:39:31 +0000
ROA not before:           Tue 06 Jan 2026 19:34:31 +0000
ROA not after:            Tue 05 Jan 2027 19:39:31 +0000
asID:                     264619
IP address blocks:        143.202.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:9a:2c:c5:bd:ad:a7:db:85:b3:d8:fc:ab:93:0f:4d:5e:91:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5
        Validity
            Not Before: Jan  6 19:34:31 2026 GMT
            Not After : Jan  5 19:39:31 2027 GMT
        Subject: CN=7CA33E69ADC96009698E68F3D6123E1037F44E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:97:98:51:f0:9c:5e:6a:95:e3:5e:76:3b:
                    58:ec:25:18:62:8e:86:ec:3d:ed:77:bb:d3:3f:df:
                    33:2b:38:ce:fb:85:da:71:60:53:8b:ee:a1:e7:cb:
                    85:b4:5c:45:e0:cb:04:5f:30:e0:f2:b9:8f:60:02:
                    f8:cb:9a:32:72:11:2d:15:81:b5:f7:89:ce:63:a1:
                    11:dd:13:6c:80:3e:b4:0b:17:97:7c:f4:22:25:19:
                    eb:e5:08:3f:d7:7c:37:c3:4c:35:a5:ab:27:26:ed:
                    d8:d9:03:a8:90:14:fd:65:7c:12:22:8a:44:4d:54:
                    a2:5f:95:a7:00:65:50:48:47:14:fa:f5:92:6e:c0:
                    10:23:89:86:0b:7e:9a:1d:9d:c8:95:49:7a:9d:60:
                    f4:a6:9e:18:42:52:53:d5:2b:86:11:1a:15:c2:b2:
                    06:e9:97:54:63:08:ef:2c:94:b6:25:28:21:be:b5:
                    48:5f:d6:4e:56:38:f1:02:5c:e0:bb:6c:c2:53:45:
                    13:ee:f6:d3:8b:e2:0b:5d:fb:3c:20:aa:33:4a:c7:
                    b6:b3:b7:47:e8:2e:c8:75:4d:4c:98:c5:7b:85:e0:
                    04:a5:85:88:bb:c6:9a:e0:8a:94:85:31:b3:37:12:
                    60:e8:1f:07:f2:81:0c:b8:bd:40:71:b9:5a:0d:40:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:3E:69:AD:C9:60:09:69:8E:68:F3:D6:12:3E:10:37:F4:4E:9E
            X509v3 Authority Key Identifier:
                keyid:2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:f7:4a:78:03:dc:ca:0e:4a:b5:22:67:4c:96:57:28:c6:
         4e:ec:1f:74:9f:4e:d2:c0:a8:fb:09:4c:6e:ec:11:a5:25:ce:
         36:67:89:d6:8f:a4:6e:02:18:2b:1e:d8:fb:02:b5:ce:ab:9c:
         a8:cf:d7:3c:99:0a:f2:6e:fb:d4:f2:07:fe:9d:4d:24:1a:80:
         65:87:13:da:54:3c:52:90:e7:43:b8:b3:af:fa:a9:6a:89:6c:
         cf:98:e3:26:b5:35:3e:d8:15:9f:60:52:d0:1a:28:1b:e4:0b:
         84:14:1b:32:b6:67:7b:ee:c3:53:d9:11:ec:45:3a:05:ab:11:
         91:18:0d:f5:09:60:c2:e0:8b:c8:ab:d1:e6:62:9c:d7:4a:98:
         f2:ec:24:20:38:6c:04:4a:11:cd:ed:32:31:61:3a:50:61:1a:
         5f:79:37:0a:ba:17:62:94:dc:65:4c:d6:72:5d:3c:21:d4:6b:
         b3:41:b7:8a:7b:af:9b:c1:45:88:7f:38:5e:81:f6:75:7b:80:
         84:b7:82:df:5f:aa:0f:8a:f9:de:51:06:13:ee:ff:64:cb:7f:
         f9:ce:17:1f:7b:8d:76:eb:89:01:12:9d:24:09:7e:92:79:14:
         ce:96:0d:39:28:28:4b:fa:ef:63:ca:e6:2a:eb:84:4c:2d:70:
         d7:2f:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:31:32 2026 by rpki-client