Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
File:                     3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier:          ikVN8kAyrCv8/gzHqb+QLbfePNt8dkHGEtS5GEBfSUI=
Subject key identifier:   BF:86:CB:9D:A0:2C:98:01:9E:75:85:38:6D:39:EA:B1:53:76:FB:D9
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       6309E9E3A223B0C38CC311E36FE65E74EED19050
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:28 +0000
ROA not before:           Tue 06 Jan 2026 19:18:28 +0000
ROA not after:            Tue 05 Jan 2027 19:23:28 +0000
asID:                     263209
IP address blocks:        191.97.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:e9:e3:a2:23:b0:c3:8c:c3:11:e3:6f:e6:5e:74:ee:d1:90:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:28 2026 GMT
            Not After : Jan  5 19:23:28 2027 GMT
        Subject: CN=BF86CB9DA02C98019E7585386D39EAB15376FBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:e1:9a:08:0b:85:10:09:6d:7a:88:31:1e:
                    a9:aa:03:17:e8:02:4f:40:52:28:dc:d9:4f:bc:82:
                    fc:1c:3a:b9:54:f5:c6:b6:cd:fc:e3:c0:f8:0a:c4:
                    6f:50:cf:7a:02:81:ad:3a:73:31:b9:c0:17:fc:87:
                    31:83:a0:69:88:4a:fd:a1:a7:1f:1e:2f:4f:6c:7e:
                    76:bc:86:2c:f0:eb:18:96:66:38:80:b2:e9:9e:91:
                    99:55:3f:94:a0:27:d5:2f:68:35:5a:74:2e:33:8c:
                    bc:f7:6e:84:9b:36:c8:75:62:60:97:17:f4:ce:be:
                    22:38:0b:7c:05:b1:5c:67:1d:b5:37:d5:ec:d7:3b:
                    ea:7f:39:13:05:f2:c8:c1:ca:35:3b:9c:ac:f0:0b:
                    ff:2c:17:8d:f1:d0:ba:e6:63:47:b6:de:e6:64:74:
                    ad:20:b9:30:2c:c0:2f:64:65:26:67:c5:bb:35:2e:
                    8e:c5:44:67:3e:47:0f:ca:46:6c:cf:17:b1:4d:78:
                    5b:67:ca:97:a3:f2:9c:c1:8b:bd:f6:6e:df:3d:1a:
                    5f:57:15:30:bb:fd:41:42:de:2e:3f:64:dd:81:98:
                    e9:be:4b:e5:ff:5b:0c:85:bd:d9:2d:05:68:a8:7f:
                    e6:cf:c8:92:aa:27:dc:7e:ae:69:f2:5a:57:8c:b6:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:CB:9D:A0:2C:98:01:9E:75:85:38:6D:39:EA:B1:53:76:FB:D9
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:26:39:1b:04:a4:db:74:a5:aa:f1:3b:63:ec:e7:fd:35:40:
         ac:7a:a8:dc:53:3d:37:ab:0e:79:d1:63:a2:02:c0:e6:9f:8e:
         99:e1:cb:c6:a1:ca:9e:70:51:2a:ed:43:8f:34:aa:ee:6f:af:
         3c:d5:93:84:ba:f0:26:b8:d3:f6:df:6d:d1:54:f0:59:58:8e:
         e9:e8:58:6a:bf:25:20:ea:b0:50:45:ff:21:17:b6:c9:b3:90:
         42:85:ff:8c:9a:6f:e4:ea:71:5b:11:3e:fb:8b:41:8c:eb:be:
         8c:66:7d:57:e8:c0:fc:e1:c3:2b:bd:a2:b3:df:71:9f:72:89:
         bc:c3:39:10:27:be:7a:7f:c8:25:12:95:28:8e:75:4d:28:1e:
         3d:c8:bd:e1:ac:75:fe:ea:90:eb:f9:7f:1c:be:28:ae:ba:27:
         5c:23:0c:be:97:58:5e:09:cf:6b:e8:21:57:dd:ab:6c:59:76:
         5c:f7:db:12:e4:b4:b2:34:76:d0:51:4b:9a:d4:ad:5d:f7:41:
         f5:77:e7:9a:1c:5d:22:59:01:69:54:a6:94:36:5a:b2:5c:93:
         85:ca:9a:ae:87:f1:ff:09:0f:c6:f0:5a:7a:1b:ed:c9:13:77:
         4c:53:37:7c:96:82:46:ef:97:85:42:8b:e9:36:18:a3:96:99:
         ff:5b:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:35 2026 by rpki-client